Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
File: VrVQVQ1WQYCx333rW1jTprES5-M.mft (raw, json)
Hash identifier: WwUlyylJ8MFu/ne9Ryu0vWcl+GroOswCqvLKmp+5lYU=
Subject key identifier: AE:39:47:1E:8C:DE:DA:BC:2C:BD:D5:5A:B9:DF:6F:9F:29:61:7B:0C
Authority key identifier: 56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
Certificate issuer: /CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Certificate serial: 019A5150ED5F103E7E1B798CC3FA65249481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
Manifest number: 0CA3
Signing time: Wed 05 Nov 2025 00:00:49 +0000
Manifest this update: Wed 05 Nov 2025 00:00:49 +0000
Manifest next update: Thu 06 Nov 2025 00:00:49 +0000
Files and hashes: 1: VrVQVQ1WQYCx333rW1jTprES5-M.crl (hash: u73sccf9kuAvnLs3jgBhVTXDzc7Pwtck2L/zYCdEJhc=)
2: zpnOf9kFG2Xz2U_yV2ggZbtDJtc.roa (hash: iw1XdbLWPraJP46xAmdMKYSNoE+Pua69gMhun7cgX1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:ed:5f:10:3e:7e:1b:79:8c:c3:fa:65:24:94:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Validity
Not Before: Nov 5 00:00:49 2025 GMT
Not After : Nov 6 00:00:49 2025 GMT
Subject: CN=ae39471e8cdedabc2cbdd55ab9df6f9f29617b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7b:a3:0f:88:95:e0:81:98:b9:00:54:c7:ab:
b5:26:12:de:a0:81:3d:a0:b1:42:21:8c:17:e2:40:
f5:ae:ab:22:4a:c3:eb:87:04:a6:7f:e5:1d:56:33:
12:f4:48:e5:d1:38:d9:a6:4f:d0:b1:a6:73:29:2e:
3f:0c:13:83:78:3d:c7:36:e0:94:9b:79:ca:ac:5e:
37:54:8a:00:12:4f:02:c7:5e:d7:19:d6:83:41:8e:
5d:57:7d:a6:1f:7c:4c:ae:5f:ff:fe:23:16:30:4a:
ef:da:db:1a:18:18:d7:f5:c0:a1:54:d7:70:5e:7a:
2d:e7:85:d2:bb:11:7c:48:45:9d:93:f1:8a:6d:30:
3a:70:84:7f:26:e4:38:4f:ea:58:aa:14:a5:28:63:
3a:44:13:10:b5:cd:47:b7:e0:3d:78:49:ca:a0:8c:
6a:b3:a0:d0:81:e2:a4:f0:33:fb:32:88:c2:04:f2:
c8:9a:4c:66:f2:e9:b2:e7:7d:9a:4d:50:e4:f7:40:
5e:6d:a7:ae:50:80:63:c4:cb:ca:a9:58:f7:55:66:
6d:e2:ee:a8:53:1f:4f:c4:61:2b:c4:c7:f9:45:94:
c9:9c:1a:c1:c2:0b:29:b5:b8:dd:84:92:96:33:fa:
a2:f8:63:60:9e:68:0a:a3:39:3e:79:67:8a:67:f5:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:39:47:1E:8C:DE:DA:BC:2C:BD:D5:5A:B9:DF:6F:9F:29:61:7B:0C
X509v3 Authority Key Identifier:
keyid:56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:79:68:85:bc:cd:3e:e4:d2:53:bb:37:55:4f:58:f0:45:57:
cb:7a:cd:f5:75:ae:86:eb:4f:ca:fe:a4:39:c4:36:ad:22:b1:
10:df:2c:9d:3b:13:04:3c:98:36:f1:c5:88:02:05:22:de:4d:
31:b1:c3:0e:2d:ff:72:fd:5a:40:24:3c:c5:d4:57:8c:1e:9c:
9b:f9:c9:9c:a2:f8:ff:2e:b1:b2:ab:d2:d3:aa:60:64:a1:d9:
f0:6c:dc:dc:9d:bf:bb:74:7d:9d:f8:8c:ef:50:ec:fa:ec:e5:
0e:73:1c:d8:35:b5:76:de:81:6d:dc:c8:92:25:dd:ea:d0:62:
46:f8:af:ef:c3:b8:a7:bc:8f:b3:fa:73:c5:f8:6d:e0:ce:eb:
7f:fe:9d:ee:af:76:6c:a1:fb:0c:f7:e9:22:b2:1e:e4:ed:39:
38:ac:d9:5d:a4:79:95:f3:55:5a:5e:b7:35:0f:f2:72:ae:b0:
c0:86:d7:26:15:e0:28:d3:aa:06:cd:eb:31:7d:98:b6:31:b1:
be:f2:be:06:97:d6:fa:6d:e7:b2:0e:02:b6:d4:f1:15:1f:48:
68:9d:e1:04:d6:df:d1:d4:c5:82:c6:05:79:0f:9c:f2:35:20:
a4:26:a3:6b:99:d1:a3:14:0f:18:5c:16:f5:48:4f:79:d7:fe:
11:83:fe:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:37:31 2025 by rpki-client