Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
File: VSyaHJxP95PoiL1YPcqYFcxFdMA.mft (raw, json)
Hash identifier: k4DyRR+J3Sm311UNkqyb/4FNXy8ILIWTPpcUK/ieQl8=
Subject key identifier: 50:87:8B:3C:95:8C:83:E1:14:91:4B:A2:30:0A:A1:F3:CB:17:F7:05
Authority key identifier: 55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
Certificate issuer: /CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Certificate serial: 019A4D3CD5662DC3F859CBDE4E925E6B4774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
Manifest number: 169D
Signing time: Tue 04 Nov 2025 05:00:23 +0000
Manifest this update: Tue 04 Nov 2025 05:00:23 +0000
Manifest next update: Wed 05 Nov 2025 05:00:23 +0000
Files and hashes: 1: OY4UYP6MQJjL7Sxg2gh9CE4T1RE.roa (hash: ZrfsE/pEoCJELDNN+z7XrdVrqnmY0w2a+56TbedDcbs=)
2: VSyaHJxP95PoiL1YPcqYFcxFdMA.crl (hash: jYIcwuZ3+cKbvnRPHYRLY68N3kJcbqqP4rl8JWTL5Os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:d5:66:2d:c3:f8:59:cb:de:4e:92:5e:6b:47:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Validity
Not Before: Nov 4 05:00:23 2025 GMT
Not After : Nov 5 05:00:23 2025 GMT
Subject: CN=50878b3c958c83e114914ba2300aa1f3cb17f705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:28:13:2d:be:ec:a5:c7:0d:af:14:b2:b8:
0d:4f:00:bc:6c:85:1c:98:66:76:e6:b6:39:c4:33:
ba:6e:be:cf:24:b0:2a:04:af:44:58:c4:ab:c3:2d:
b8:e8:90:14:cb:6b:40:2c:76:a0:93:c5:f4:61:e7:
35:b7:10:5d:c9:b7:0d:07:07:27:24:73:de:6e:00:
43:a5:24:ad:4a:80:cb:12:2a:37:1e:85:88:cc:b6:
b9:c3:59:53:d3:14:cb:92:94:bf:f5:23:ac:42:6d:
cd:80:06:8c:82:16:e1:7f:cd:b0:92:c6:4b:54:81:
51:a4:8f:a2:f6:4d:02:9e:f7:54:76:49:96:6e:45:
54:0b:32:bb:16:65:26:8a:be:98:24:e3:56:7f:f0:
d3:38:4c:33:aa:4a:3f:8f:a9:8d:0e:1a:ff:c9:dc:
cb:85:20:1f:75:fc:67:b0:e2:18:8e:bc:47:14:45:
51:33:b0:25:09:49:b5:c6:98:b7:84:65:b6:40:e6:
92:f5:ab:66:df:92:85:75:0f:59:83:94:09:44:61:
5a:94:b7:5d:c3:b1:d5:28:bb:45:fd:15:9f:1b:ed:
8e:f2:eb:7d:a8:40:fb:d6:3f:d7:33:8d:40:78:47:
b0:28:bc:a4:07:5d:39:da:da:c1:5a:dc:74:2a:15:
cd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:87:8B:3C:95:8C:83:E1:14:91:4B:A2:30:0A:A1:F3:CB:17:F7:05
X509v3 Authority Key Identifier:
keyid:55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d7:d8:d5:e1:c2:aa:d4:6d:27:de:3f:e5:8d:29:9b:37:2e:
4a:e9:b1:db:09:f1:d4:c9:bd:5b:52:0d:eb:3e:40:57:ea:4a:
d0:a6:0f:17:eb:9d:3f:ac:95:fd:73:7a:a6:9f:3d:8a:ce:a7:
22:ba:af:2b:49:7d:c3:4c:fa:9d:35:0f:28:f9:fe:1b:1a:1a:
31:8c:9b:b2:20:e2:34:5d:2a:d7:c6:ec:c1:61:1e:8e:02:d7:
4b:00:8a:d8:b0:cf:50:dc:a6:0a:d9:2c:5e:5d:86:39:98:29:
94:51:59:ed:01:e3:de:f7:a8:ee:31:14:b0:ad:1c:b8:01:63:
e4:5c:6d:60:6f:31:f2:d4:8e:a0:09:14:5f:36:24:d3:ab:10:
56:17:20:9d:77:12:f9:8f:de:6e:ae:ed:51:a3:0b:f1:61:4c:
5c:87:b6:71:f6:a3:62:ff:cf:ab:f1:27:21:27:a7:32:3b:4c:
16:6b:2a:da:e2:b4:40:47:6d:af:fc:ff:9e:39:39:03:7b:19:
8b:99:e1:e8:1b:82:6f:10:23:34:8f:93:7b:07:cd:fc:2d:ab:
ac:45:8e:a2:da:45:25:48:11:b8:75:a1:5a:82:d2:01:f4:bf:
77:aa:db:76:e4:1f:10:29:18:2d:3e:82:1e:2a:30:04:a2:12:
d8:57:13:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:36:22 2025 by rpki-client