Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
File: vqPSZTUbZfI58pl94eioBneTOl4.mft (raw, json)
Hash identifier: YtmA5xjqdX8IR1GWoeHmIJKtaDVZiqxCi0Xc+BKW5Y8=
Subject key identifier: F2:D5:47:12:88:48:AE:C7:8C:87:58:4A:EF:66:9C:22:19:73:05:05
Authority key identifier: BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
Certificate issuer: /CN=bea3d265351b65f239f2997de1e8a80677933a5e
Certificate serial: 019A533EF5F0B71DEEB59E22BE136656F1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
Manifest number: 0534
Signing time: Wed 05 Nov 2025 09:00:26 +0000
Manifest this update: Wed 05 Nov 2025 09:00:26 +0000
Manifest next update: Thu 06 Nov 2025 09:00:26 +0000
Files and hashes: 1: qeUjFmDBXRanRORKytHhxi_chXY.roa (hash: BDfZzOuGAgs1F3dD55NRk4ttvCosc+ZV+zf9zuFmFos=)
2: vqPSZTUbZfI58pl94eioBneTOl4.crl (hash: vR/LhXFCcvaV8NKb1flud7FeA6keGmksTNsyWv0cy8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:f5:f0:b7:1d:ee:b5:9e:22:be:13:66:56:f1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea3d265351b65f239f2997de1e8a80677933a5e
Validity
Not Before: Nov 5 09:00:26 2025 GMT
Not After : Nov 6 09:00:26 2025 GMT
Subject: CN=f2d547128848aec78c87584aef669c2219730505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:3b:70:d2:eb:de:7a:a6:0c:ab:db:65:5e:
06:4a:d0:85:c0:9c:a0:b7:b7:f1:af:08:12:95:d4:
73:c6:d4:07:3b:01:25:37:ff:62:c1:1e:6a:d9:f6:
4f:15:bc:61:b0:d3:fb:06:e9:5c:25:b8:f6:67:83:
27:50:2c:43:d7:61:46:e3:c0:db:92:bf:e8:bf:cb:
bf:e5:03:87:f9:71:16:2f:04:ee:ca:ff:c5:0f:f0:
35:af:2a:7d:08:65:e5:67:79:34:82:6f:c5:13:92:
d1:a5:90:54:e5:a3:f5:18:86:c1:7c:00:f8:33:0c:
1f:42:09:e2:66:13:64:2a:0c:4a:10:69:2d:72:04:
d0:1d:0b:13:55:0b:21:f1:cb:0f:26:af:10:71:b4:
da:fe:e4:77:dd:e9:0b:e2:b1:d7:2a:7f:d1:1c:6d:
aa:70:f3:74:15:dc:fa:31:16:6a:ef:d6:d8:44:fe:
69:32:25:be:db:e0:90:36:9a:3b:b6:51:c1:8a:1c:
02:dd:28:1c:dc:8c:f0:ed:1c:ce:4f:90:3f:69:9f:
22:f6:99:16:5c:75:b6:c2:5b:e1:1d:59:b4:a1:7a:
b2:38:1f:43:38:b4:b9:f2:21:f6:64:a0:ac:aa:e7:
c3:c0:ef:e0:66:b0:f0:90:03:e6:f7:4f:cb:2f:f6:
55:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D5:47:12:88:48:AE:C7:8C:87:58:4A:EF:66:9C:22:19:73:05:05
X509v3 Authority Key Identifier:
keyid:BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:13:ba:90:3c:2a:1b:a4:21:5a:58:99:4b:f5:58:0e:75:4e:
9c:cc:75:8a:76:21:13:4e:43:e7:3a:17:84:3a:e3:fa:72:55:
c3:9c:17:e8:e8:4c:2a:a7:9e:ba:ba:03:58:50:6d:e6:a2:8e:
fd:dc:c0:31:93:6a:2b:d7:bd:1c:da:02:b9:1c:9d:86:6d:5e:
69:7e:18:7f:cb:9d:93:0a:36:ee:62:96:6f:eb:51:18:44:60:
bb:a1:eb:c6:a3:e3:d0:1b:4e:bd:a2:d8:db:63:ea:4b:c6:10:
fd:a8:5c:b1:04:f2:3d:71:38:52:f0:d3:a0:53:37:35:20:14:
a8:a2:9a:aa:7e:7a:54:9c:3f:9f:c6:9c:c2:c3:d8:f2:20:a5:
07:57:e6:43:90:b6:66:57:1a:8e:1f:ae:e6:a0:ac:05:fb:c6:
39:3a:70:1c:3d:ca:9b:3b:b4:d9:74:9a:d4:78:fb:08:94:c3:
8f:99:d6:62:0c:1a:60:27:49:fe:0f:38:59:98:f3:94:49:88:
dd:2b:3f:04:60:08:b1:4e:d2:ca:ce:1a:93:2e:86:27:fe:e5:
b2:cd:48:5c:5f:43:95:70:9b:8a:ab:ee:4f:4d:d6:d7:94:1c:
e7:e4:ad:d7:fa:bc:d8:fb:bd:2c:e9:55:db:41:08:98:d2:92:
5b:b2:57:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:56:09 2025 by rpki-client