
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
File: C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft (raw, json)
Hash identifier: 0vDZn/IHbBi1/8purgL+sE5fMbfqwfpjPkwoeRiC80c=
Subject key identifier: 75:3A:44:4E:64:78:CD:D1:CE:13:9D:4E:CB:02:0B:61:DE:67:13:E8
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 019A503DDB081648E3A7C89BF11FCDB530D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
Manifest number: 13BC
Signing time: Tue 04 Nov 2025 19:00:22 +0000
Manifest this update: Tue 04 Nov 2025 19:00:22 +0000
Manifest next update: Wed 05 Nov 2025 19:00:22 +0000
Files and hashes: 1: 3kJhXofCpFDD7Eo6E2j1Gd-FMQ4.roa (hash: K3OTcQcoZnzC8T3KuSMerKr1Yy1y4ZL68Y/lWSF+tJA=)
2: 5vgRN93Ikx6vDyOuxjecwfDMpQo.roa (hash: Nm0/LoBBPkWnuWn59UFBPJeNenuNXFQpk38gCTpN7ng=)
3: AfLHT74NdL4YRI-gpiiLO8PPShM.roa (hash: 944lZaS4mAfM/S0ieSHEvM3mRV9M0T2Y3u48y1aDIjk=)
4: BqUsGxJbAHaodSor8dzxhiBDYnY.roa (hash: UcdL5oWXT3jVU2069PpqlnxiDKWvKcXri93cb+kI6qY=)
5: CLgBj6oYt6sGJ5ZpJJTL8C3Fnrs.roa (hash: aUOM41Nf+BqbKmy9YjUFL+mBeBI8749PsIPj/loME94=)
6: C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl (hash: 6mRaT+Stw+b4ud8a4msWXZ07jSFb1H7OOSOCLD9z7Ck=)
7: CqNmCGGQsBrEt7zh-VfcGtUv9RA.roa (hash: 7HTEUHavuiaMXQtqJhG62cD/8gu3Fv5evoWWikvAioM=)
8: HH7LiS3U3uopaZw4Q2ypSb4mHCU.roa (hash: g8QkQGvHJtb9sSJ+GjbOOdCXOEktOE2F1fhBHqBOKls=)
9: HZmCfsHb09xlrSBh2iIxpOWZ3Ow.roa (hash: RrsPdmWqoOnc37eNmh2WMAAS+360HWRIjhjqZURUhWk=)
10: Ha6B96NNdRYOdZinwD0K4FfFvZU.roa (hash: rPSvBQM3yuUs9wJEKKxibaAsnl3o3tzJWi7VDh3ziS0=)
11: JPuN2YPz_l01LHcxJTRgQ5fN06Q.roa (hash: sO4iVZOw03myN2KiGjBOdg4pmq+1tC1eFs8GD/uCEJk=)
12: L7BpeKSr3aJNyrJ3jyLg3Vye834.roa (hash: BKU0s1AFVfjoQBSMzARmXiXP2HsCC4PJttRceRONfMI=)
13: MDIbS6sEXbMo4ibcLekhzijIjYY.roa (hash: 7iIxmTu02d89hGoTIMu/80TJLS3BqGKAagC48ze8HTo=)
14: MtRudBwfeuM_gV5Rxs2GMGZwQ28.roa (hash: jyZOCTzazS4hZAS8vXh55e8wdvGkjLOC1l/j4Cldlkk=)
15: MvceJYeC7exu39P-KklGzIhKezo.roa (hash: l7CWLK2x2ygZPduMunzZSQp+ZhD4hpMbVwc9AxPKUD8=)
16: OctDu_DWJM_ePhGKcxjKDU812B4.roa (hash: 8PSwDnEoVXcVpWULLxMU/tnZb/t/w988BD3T8r1Vyqk=)
17: QqVG_Jig1AWpsZjXM3ozkcck_rk.roa (hash: cuOJ8bahzoMT5MnSdXLE/ebuIEkibnbU4Phcnk8deko=)
18: RdFk8pqwtmhHw2UX4x0rgDjdvVg.roa (hash: UfFtH0Qa2ULdo2eWM4CXCIXafZmQBAeqkERPoGsE9DY=)
19: SlBCxI-Gr8RZUcWFdhLWCcmpICs.roa (hash: JIPe6vhu+AxbOSgeBUS8yHnoK/5rZWIA9A3Gij3IhXY=)
20: T8DiPd4COZAMrM15dsDMZh3-46k.roa (hash: FLVoIftsSDw3XycsNixyrK2164vfuETBh8sALFOAFvo=)
21: YKuzm8eZ5thjoG3YWlLmGyis6Hc.roa (hash: lRlLqWarJKTArL8I3Oh3IGUAjFaJLYWsMsfvgIvdCEk=)
22: ekzy4TbSmKoAngHD6nt1XvIY_kg.roa (hash: S4bTYJiZvd+MIyq2CNE9A391k97deJn0Ljqufvr/oI0=)
23: mlYAGWh15vGd93694fMr69kZ1-s.roa (hash: otHCfgliIY/SrOf4+V6i45uE7RR60PmYBw532SayjKk=)
24: nBGaxHS4njnBuZih8vNGsp1DG9c.roa (hash: XLGWBSyFNOz/Nq0CINiB/5Nx/Ff5JQHbqxgQoHl8pY8=)
25: uF1fzkxS1dvB384G_6ACG-gahqw.roa (hash: /0hDj28NRbF23VkEh2wmxEvtyGKZo3nN4bNoYlxvanE=)
26: uiEwRDzyo2IATe2UZ8J34lJkwOQ.roa (hash: qd8Q/scpzUgFvAn3rGCEs42W3qdpmfptd5u2EgNgXK4=)
27: zgvcOUimolOfc-2snaZEdo8wyhc.roa (hash: S2xJZFbuR+fVbmsKnaewbJdRcVJWvtsi5rfDD2/PNaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:db:08:16:48:e3:a7:c8:9b:f1:1f:cd:b5:30:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Nov 4 19:00:22 2025 GMT
Not After : Nov 5 19:00:22 2025 GMT
Subject: CN=753a444e6478cdd1ce139d4ecb020b61de6713e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:b5:87:2c:f0:c7:6c:1f:65:9e:19:35:46:
ed:54:8d:3b:d7:4d:37:46:48:bd:a4:c4:62:71:d7:
4e:16:4f:43:33:95:3c:ec:af:44:7e:29:f8:1b:12:
d3:b1:46:67:21:6a:0f:5f:86:5b:7b:1f:f8:de:ff:
cc:42:2d:b4:cc:24:d0:71:df:a4:7e:e7:f8:8a:0f:
27:24:ba:a8:75:f4:39:ac:fa:ff:1b:03:99:1a:7b:
35:a5:7a:1f:9f:8a:69:a9:86:55:71:d6:8d:b0:7c:
5c:5a:56:2e:79:44:cb:65:a7:79:fb:37:83:cc:e3:
aa:b0:8b:9c:56:89:a4:eb:43:f4:dc:f3:d6:44:65:
03:95:e8:c8:6d:53:03:e1:f8:14:1f:37:a8:95:2d:
f5:42:28:96:01:d6:52:52:38:51:a2:07:78:81:b0:
a4:96:c7:34:e1:54:3b:ff:bb:95:9c:02:d5:21:8c:
4d:e5:9d:fe:0c:87:c3:03:23:f7:7a:7a:04:4e:9e:
d3:ab:4a:2e:61:1c:49:f7:46:45:f9:e6:aa:fd:39:
f0:a2:09:d7:54:c9:8b:26:92:5b:5d:ec:90:18:71:
96:86:84:27:fd:64:ea:98:55:3c:72:2e:19:17:42:
40:29:5e:63:75:05:25:2e:05:5b:c6:9e:b7:91:7d:
ec:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3A:44:4E:64:78:CD:D1:CE:13:9D:4E:CB:02:0B:61:DE:67:13:E8
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:17:48:35:70:5b:95:f0:c3:4a:44:ef:d8:6d:63:68:25:94:
69:1c:c1:d5:62:34:01:4c:f6:b1:2d:13:d4:f8:91:57:52:85:
7e:31:8e:19:bd:a6:e6:6f:8b:71:d4:86:1a:c8:32:17:ad:a8:
34:ba:55:21:42:f8:44:ae:0a:20:91:1d:53:45:70:91:0b:92:
ab:2f:bf:db:53:b6:6b:db:e3:f9:f6:20:d2:ec:bc:11:b2:f7:
24:6a:ee:36:b3:01:bc:c0:4a:45:84:d7:4d:18:64:b9:6b:5b:
15:23:b0:f9:ea:4a:f3:ff:d8:08:60:c2:33:13:d3:af:f4:1b:
06:7b:4a:9e:57:cf:93:13:b9:67:bd:7f:38:67:57:b7:c4:1d:
8c:9d:34:f1:39:c0:b5:e8:db:ae:6b:2b:c6:ed:a4:e7:e7:1d:
04:fa:9b:5b:6c:d9:4b:40:05:e8:a8:a8:c0:19:fe:d5:0e:95:
e0:91:7b:bf:c3:d0:b2:12:e2:dc:89:a9:8f:25:ac:a4:bb:ad:
8e:73:8b:1d:fb:37:de:6a:20:54:e5:8f:0b:de:7a:74:fd:46:
47:e7:49:12:4a:b5:50:14:6d:91:6c:77:9e:1c:f3:40:e2:c2:
78:48:e2:4a:61:9e:2a:1b:0a:02:27:25:50:05:09:e7:af:57:
6a:32:a8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:30 2025 by rpki-client