Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
File: VHGK9qNvZqkZOTZKr8hkRauKbg4.mft (raw, json)
Hash identifier: RVbdQZ86HAlPDzcQLIxT0sHS8yv5sTLdgo8QwHZPKCk=
Subject key identifier: 9B:F6:0C:46:8E:C0:32:FA:29:A5:C3:D3:9A:A6:9E:45:65:13:85:83
Authority key identifier: 54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
Certificate issuer: /CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Certificate serial: 019A5119DFB56C2122D8A56BFA69E61A92A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 23:00:41 +0000
Manifest this update: Tue 04 Nov 2025 23:00:41 +0000
Manifest next update: Wed 05 Nov 2025 23:00:41 +0000
Files and hashes: 1: E6amiYi53XMdG38KpjAggGoL-xU.roa (hash: Z2VRJf48TJk3kvh/qYBt+PTaI/amPskBYdQSciVu6xk=)
2: VHGK9qNvZqkZOTZKr8hkRauKbg4.crl (hash: 8fPrKP02Bz6yuGhsD9KhqFM7cp9WWq/LBTxTuzYsQJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:df:b5:6c:21:22:d8:a5:6b:fa:69:e6:1a:92:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Validity
Not Before: Nov 4 23:00:41 2025 GMT
Not After : Nov 5 23:00:41 2025 GMT
Subject: CN=9bf60c468ec032fa29a5c3d39aa69e4565138583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:84:01:b3:0b:f6:ab:fb:a0:13:fc:e8:e9:9e:
ce:61:67:a5:c5:2b:72:2e:8f:80:93:0c:0e:7f:a6:
9f:19:9d:c6:4c:43:70:7b:5d:65:96:9c:76:dc:95:
77:8c:b8:f2:ce:69:fb:d3:a0:21:d5:67:92:1b:22:
94:2e:ed:b7:00:7f:0b:d9:85:e8:09:e9:3c:d8:9f:
c5:3c:b1:5b:b6:21:da:1a:cd:4c:ee:01:87:06:95:
e3:1c:65:39:95:58:02:04:f7:f1:b9:35:08:1b:7b:
97:72:0d:4c:a7:df:6f:7b:f8:c5:fd:12:2d:37:79:
6e:27:24:f2:6d:d4:02:fd:99:cb:90:8c:d8:05:0f:
5e:64:03:8b:f0:ed:fe:ad:ca:93:9c:6d:e0:80:10:
9d:37:eb:de:d7:74:ca:93:55:fd:f0:31:da:77:bd:
22:3c:cb:ce:6c:39:58:c3:e8:87:f9:85:c8:a6:c4:
5d:f9:fb:14:7c:88:3a:34:d1:60:81:67:39:4f:6d:
79:5c:cf:c1:8d:18:b3:a0:f9:a7:88:1f:61:78:5b:
e9:61:0c:ce:a9:12:39:b4:5d:51:26:3e:78:a0:75:
3f:ea:df:e1:37:d2:2e:0b:f1:e2:cf:84:3b:a5:82:
32:76:11:7b:8e:b2:46:f4:7a:d9:fa:e5:60:49:8a:
9d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F6:0C:46:8E:C0:32:FA:29:A5:C3:D3:9A:A6:9E:45:65:13:85:83
X509v3 Authority Key Identifier:
keyid:54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:7c:e8:7e:11:a7:71:8e:c5:c9:c7:da:81:07:ed:75:c2:d6:
ef:e9:5d:c6:9e:26:f1:e6:c9:b5:b4:9e:f9:c3:ab:f9:ac:35:
e7:e8:c0:2c:46:08:27:dd:53:7b:4d:f9:d4:1a:93:ba:f7:9e:
36:d3:a3:d8:e3:17:f2:46:cf:a3:16:e7:65:67:0c:cc:31:f6:
01:84:2f:d0:5e:05:fa:ef:6e:c0:65:8e:05:93:56:fc:13:03:
20:33:c2:56:8f:98:8e:1f:21:24:76:ed:a9:27:67:cc:58:f4:
d8:ce:da:37:05:f6:78:3f:20:9d:a7:b5:bf:ba:a3:33:02:03:
d4:51:40:da:d4:7d:eb:c6:7e:c8:f7:f3:a8:c1:29:7c:6e:da:
f2:5a:d6:57:4f:70:ae:cd:8e:5f:11:3c:cf:81:07:61:c8:b7:
d6:f5:c7:06:87:81:78:e4:53:3a:8c:85:92:3a:9d:b9:75:09:
4d:d0:08:7f:02:19:f8:04:01:a4:38:bf:58:da:35:34:be:f5:
4a:2b:76:02:63:9f:ee:7a:a6:a8:0b:95:aa:2d:45:63:3f:0f:
dc:68:b9:e5:b1:93:ac:6f:be:bb:05:cc:87:ac:47:82:84:04:
02:cd:4a:67:8f:1c:6d:8e:2a:63:a0:93:b9:77:23:e7:8d:77:
38:a9:12:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:27:13 2025 by rpki-client