Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
File: VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft (raw, json)
Hash identifier: Y9POgwrDKkyyMKM42OGrEPyEA4nVSOOIhXpfVt9265c=
Subject key identifier: 04:7C:DF:FF:91:F0:9B:F6:88:3D:11:E1:35:56:91:0E:3D:A2:0D:6B
Authority key identifier: 54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61
Certificate issuer: /CN=54913026f079cda241aef4514fd353c28330e461
Certificate serial: 019A4E18CF3E0181F82E7EE40BE63E7E32B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
Manifest number: 0A10
Signing time: Tue 04 Nov 2025 09:00:39 +0000
Manifest this update: Tue 04 Nov 2025 09:00:39 +0000
Manifest next update: Wed 05 Nov 2025 09:00:39 +0000
Files and hashes: 1: VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl (hash: 8bQgInhkmH0JsbvV5rux54fp2ekVlnkEOwg/v0cZxII=)
2: r03a4FD5QDtqrMjhRP_L2N8sPt8.roa (hash: MsCswh8Y77pSHpRZqJYoQ4n9OWB/3Qp0BgO62Er81go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:cf:3e:01:81:f8:2e:7e:e4:0b:e6:3e:7e:32:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54913026f079cda241aef4514fd353c28330e461
Validity
Not Before: Nov 4 09:00:39 2025 GMT
Not After : Nov 5 09:00:39 2025 GMT
Subject: CN=047cdfff91f09bf6883d11e13556910e3da20d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:2d:ec:10:4d:75:55:46:be:bc:5d:f7:a0:
f2:89:19:23:d4:b4:83:12:28:16:9f:fd:22:47:f5:
0c:be:3d:0d:b1:c7:5d:3d:7c:39:d4:95:01:27:39:
26:15:98:a4:96:c6:00:0e:be:74:8b:e0:f4:cd:83:
bc:ef:7c:2f:0a:66:70:74:f3:2f:3a:9d:ca:3c:0d:
9f:4c:cb:2b:68:75:0f:7d:2d:3b:c7:39:f3:43:eb:
3e:e7:73:c5:f0:fd:d7:b5:4e:96:19:41:cc:e9:29:
ae:3e:08:21:37:94:c9:3d:eb:26:d9:c0:72:64:d6:
11:41:83:67:34:ea:0b:26:8b:98:07:0c:a6:4e:45:
a3:40:19:50:5c:7d:64:0d:e0:08:c7:99:92:79:f1:
42:e9:0b:fd:50:88:ff:60:07:51:3c:73:c1:72:33:
7a:4e:3c:ba:a7:a0:9f:44:ba:f0:2d:90:09:6a:6c:
eb:8b:d3:24:ba:53:f6:5d:16:8a:45:2d:1e:77:e7:
d2:8f:dd:25:5a:66:0e:68:a2:6a:1c:25:fb:af:63:
9f:82:7b:32:0e:ac:ac:3d:d7:13:2e:37:7c:46:9d:
7a:b9:77:ee:16:59:48:55:1c:09:14:98:1b:d4:87:
07:63:7e:1b:27:af:82:8c:a1:d5:73:be:b4:d3:2f:
53:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7C:DF:FF:91:F0:9B:F6:88:3D:11:E1:35:56:91:0E:3D:A2:0D:6B
X509v3 Authority Key Identifier:
keyid:54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d2:8a:75:60:8f:ae:2f:db:da:f0:83:6b:b3:22:c4:09:1b:
b1:76:a6:0c:d8:fd:c0:10:76:df:85:b0:d4:6f:f9:ec:1d:72:
44:d1:2f:62:c0:72:55:a2:f2:91:4d:2d:db:e1:9d:13:b2:09:
74:d0:c7:ad:88:6b:26:a3:44:d7:ad:71:84:26:03:f2:91:17:
df:cc:05:db:63:55:14:53:c7:52:a8:3b:86:00:71:44:b7:b5:
91:fb:90:fb:9a:a2:1b:5c:4f:1d:ce:a2:0b:27:ca:24:b8:b9:
ab:f2:10:ca:48:6d:92:bb:41:cf:78:4c:4e:f2:8b:68:7d:95:
67:17:f0:49:04:a4:25:93:91:34:22:9d:fc:6e:d6:ae:55:9e:
25:dd:64:d4:3a:64:5b:57:58:6a:84:ae:db:0b:db:93:84:5d:
e9:17:38:5d:9b:f6:f9:c4:d4:04:9d:9b:9a:0b:6d:22:e3:7f:
da:37:7b:20:e9:70:0b:1f:32:d5:09:85:e7:23:80:c1:d5:a3:
00:89:ce:65:6f:fc:67:3c:2e:a6:a2:ed:79:31:fb:c5:83:86:
ad:dd:e5:eb:3a:08:94:d7:f5:18:89:3a:ba:c1:51:6e:c7:32:
9b:f2:33:5f:7a:59:dc:e0:94:16:f0:7f:77:3e:a8:77:4a:8c:
26:07:1a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:28 2025 by rpki-client