Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
File: vpxSiWGxCzIPR-i3BlTurtLyRNM.mft (raw, json)
Hash identifier: isTpUUaAziJ1aF4OX6/TXEQq/ZeZ4JzTz+1yUWjz2C0=
Subject key identifier: A4:56:7A:D1:DD:1C:F2:86:4C:40:CE:C8:D2:1A:B0:D2:71:37:0C:60
Authority key identifier: BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
Certificate issuer: /CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Certificate serial: 019A4F992A43A5D981513670B5D828E38F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
Manifest number: 0CFE
Signing time: Tue 04 Nov 2025 16:00:29 +0000
Manifest this update: Tue 04 Nov 2025 16:00:29 +0000
Manifest next update: Wed 05 Nov 2025 16:00:29 +0000
Files and hashes: 1: vpxSiWGxCzIPR-i3BlTurtLyRNM.crl (hash: pITe+W/mMKpIzs+0PxSNszfa2tz+5EMb9Dv+O1QpQKw=)
2: wtrOxy-Cqrf4yPJ92NbD-E33BP8.roa (hash: HZVqoFJ1fSxzdnoOFKLqW1LRpp7/mkZ4xgc+aQGadyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:2a:43:a5:d9:81:51:36:70:b5:d8:28:e3:8f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Validity
Not Before: Nov 4 16:00:29 2025 GMT
Not After : Nov 5 16:00:29 2025 GMT
Subject: CN=a4567ad1dd1cf2864c40cec8d21ab0d271370c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:04:24:9a:0a:b0:75:92:b4:da:8d:ce:84:82:
23:b3:70:fc:09:6a:61:08:4c:ad:fd:7b:40:d5:0a:
dd:14:cb:66:06:7a:45:30:69:26:74:a8:e2:53:9f:
69:08:85:74:ab:88:64:3e:a5:ec:ee:80:cf:84:63:
c6:34:a8:68:37:b5:b6:1c:5c:ed:5c:d6:3d:49:cb:
da:87:73:1f:3a:9f:ea:69:79:ca:0b:de:08:8a:78:
e3:11:28:b2:25:7d:da:73:6f:03:e4:b7:83:8a:72:
f1:2f:fd:09:79:53:76:03:05:10:23:85:84:d5:b8:
cd:a1:3f:73:46:e9:15:a8:2d:2b:44:61:1f:9f:e3:
28:74:d1:8f:b0:82:00:c5:4a:a7:25:e3:e5:a6:83:
2e:12:35:dd:2b:49:5e:db:ff:61:8f:04:eb:3f:e1:
9a:72:68:1e:1d:28:bd:29:16:9e:42:9e:4d:99:7b:
4a:67:7b:f1:6d:a5:47:cd:fd:40:40:56:00:39:7e:
90:8d:b9:32:41:7b:34:46:72:5c:a3:4e:30:0e:ea:
f9:87:a7:de:2e:e8:8b:ee:30:b9:82:e1:7a:5c:bc:
11:1a:61:d3:df:84:a4:48:7e:34:86:83:03:b3:6b:
64:d3:b0:8c:dc:04:f3:ab:7a:4e:e4:56:bd:f6:7e:
01:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:56:7A:D1:DD:1C:F2:86:4C:40:CE:C8:D2:1A:B0:D2:71:37:0C:60
X509v3 Authority Key Identifier:
keyid:BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:27:7c:73:eb:51:a6:a1:24:01:4d:88:99:3d:4a:06:c7:89:
0e:2f:4d:e2:59:cf:43:4f:eb:e3:5b:ae:ca:7c:f0:fc:60:ab:
8e:ef:25:53:58:6b:e3:2b:a5:2a:80:6c:0c:b8:79:da:6a:82:
2c:27:f8:5d:8a:f2:3c:af:9c:dd:62:57:60:f8:21:64:6d:4b:
d2:ca:b6:56:da:aa:f1:0e:3f:62:7f:61:6b:b4:2a:5e:13:dd:
be:34:b8:ee:2a:ab:b9:a5:0a:c5:7c:d4:c2:e1:c1:5f:c5:58:
ef:ed:f3:b2:7f:51:18:dc:61:dd:3e:02:74:d8:35:ad:b8:eb:
25:73:80:a3:aa:ea:00:2d:ec:98:cd:33:0a:56:c6:3d:f5:ae:
ce:ce:1c:79:80:47:48:a8:ab:ac:20:67:dc:8c:73:3e:ea:24:
67:39:f0:3c:2c:f8:6a:10:81:ab:ac:4f:30:2d:c4:02:72:f8:
98:e8:a3:73:c3:2a:72:a4:c5:33:cf:1d:ac:04:9c:2f:ab:91:
13:a1:be:6c:82:bf:86:9c:79:97:3c:ef:1f:b9:96:cb:d1:0d:
0a:e2:20:56:34:2b:e6:b3:45:b8:c5:ae:5f:68:ec:06:d3:28:
bc:9a:12:f3:78:e6:6b:ed:1f:d1:56:34:8e:bd:7b:d4:38:05:
4d:da:78:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:32:54 2025 by rpki-client