Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
File: VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft (raw, json)
Hash identifier: 3NVth2bEBRktKrzUjIAiunhI/sV8jZShe2vIGh+wR1Y=
Subject key identifier: 26:7C:35:75:DF:D6:3D:7C:9E:A5:4E:AD:37:97:F6:8E:E4:2C:2C:33
Authority key identifier: 55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6
Certificate issuer: /CN=552986484ecd015857ebf61dc4b361302c7916c6
Certificate serial: 019A4F62AFE0972F0CE4FE97870054A84ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
Manifest number: 0541
Signing time: Tue 04 Nov 2025 15:00:58 +0000
Manifest this update: Tue 04 Nov 2025 15:00:58 +0000
Manifest next update: Wed 05 Nov 2025 15:00:58 +0000
Files and hashes: 1: VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl (hash: 9WYljNo0SSbqabaHi8+islLk6IIliBJuGsS0I3V9Yrk=)
2: mpGMS7GoniScCIZ1yKqQ67UbO7w.roa (hash: cqVoNWXcKz6tLYUP/1j67v5QSUFr9HoUVD319m1SaB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:af:e0:97:2f:0c:e4:fe:97:87:00:54:a8:4a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552986484ecd015857ebf61dc4b361302c7916c6
Validity
Not Before: Nov 4 15:00:58 2025 GMT
Not After : Nov 5 15:00:58 2025 GMT
Subject: CN=267c3575dfd63d7c9ea54ead3797f68ee42c2c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:92:c8:24:79:54:9c:45:99:98:9a:46:93:
f0:7e:4f:8a:f5:93:85:a2:27:67:49:8c:99:8a:93:
e6:8f:52:bb:57:17:92:96:43:08:b8:1b:a8:68:d8:
27:ca:c5:01:18:a3:5d:38:30:db:5f:82:89:fc:78:
f1:6c:7e:92:cb:39:3f:9a:63:15:fc:f3:9e:84:9a:
e2:5e:1f:84:7d:90:29:42:43:49:47:4a:33:c4:e6:
29:35:b2:51:20:50:c2:69:6c:23:b3:30:28:18:91:
b7:8d:43:28:1b:bb:c2:53:66:ea:a2:02:ec:4a:ef:
74:fb:81:bb:93:c2:65:24:e4:f1:da:d8:ad:20:ee:
ce:92:02:e5:60:93:65:9f:c6:6e:e3:44:07:8a:9b:
4c:73:43:88:32:71:c6:b6:45:ab:53:99:3b:e9:ba:
f5:9e:6e:bf:5f:d8:d5:14:fa:2f:24:9f:f6:20:c5:
0a:1d:bb:fc:17:11:e2:eb:08:42:af:2e:09:4b:e4:
54:e3:2b:88:07:d9:ba:f8:fd:a6:51:8d:de:dc:4d:
a3:82:57:bb:fd:3f:4f:90:69:8c:f1:63:18:b7:bc:
68:28:21:17:ab:b2:76:2c:71:c0:cf:1f:ea:0d:fc:
7a:c2:03:5a:b8:95:bc:3f:f4:fd:33:1a:b3:5f:c9:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7C:35:75:DF:D6:3D:7C:9E:A5:4E:AD:37:97:F6:8E:E4:2C:2C:33
X509v3 Authority Key Identifier:
keyid:55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ed:7d:da:c7:86:40:ca:77:83:5f:1f:1d:5a:a7:d5:89:16:
95:12:db:67:af:72:bf:de:c0:0f:09:b6:9b:24:42:a7:c7:3e:
d7:27:97:04:e4:16:da:3c:89:be:5a:33:72:a2:e4:5f:c0:e0:
ee:93:ff:98:7f:88:df:9c:10:90:ef:bd:9a:82:d4:e1:c9:3c:
51:10:92:c1:ba:ef:e4:2c:d5:4c:48:26:5e:3e:5b:e6:28:8b:
b5:d9:89:fa:ba:f5:a1:d7:05:92:2e:77:bd:f0:47:35:a3:80:
03:ff:1e:47:01:4e:37:9a:78:9e:7f:eb:b0:5f:b9:22:5a:e7:
24:e4:a4:80:d6:23:f0:b2:9c:5e:78:0a:b5:8a:24:d7:c7:76:
29:96:2b:53:cf:96:23:19:65:df:64:06:79:dd:3e:f9:4e:90:
65:7c:0b:2c:86:4a:93:5e:0b:bc:6e:fc:70:94:44:4b:51:a9:
24:da:b7:63:a1:9d:de:b8:96:d7:00:ac:44:b8:cc:21:ab:0a:
9d:9d:6a:80:6f:74:90:9c:9e:d3:59:9c:40:f8:be:c2:5f:ce:
37:01:3b:ae:bb:c5:d3:32:3a:cd:2f:e6:5c:d7:31:7c:9f:32:
6f:91:fe:10:ac:e1:a9:e7:48:cf:8b:f8:e1:91:03:41:ec:ad:
76:d0:67:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:15 2025 by rpki-client