Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
File: VbIFm3SNbd1cWgwdNel173uohEI.mft (raw, json)
Hash identifier: +sJcxIAHpxA656L8Wc8FpqxaCeQ7WeT4szX1hzNtw3o=
Subject key identifier: ED:16:E8:57:28:61:17:B6:A6:88:F8:C0:82:7F:EC:2A:CA:1F:90:9D
Authority key identifier: 55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42
Certificate issuer: /CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442
Certificate serial: 019A4DE1C3691A106B8905EEB4DD875292F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
Manifest number: 06CA
Signing time: Tue 04 Nov 2025 08:00:32 +0000
Manifest this update: Tue 04 Nov 2025 08:00:32 +0000
Manifest next update: Wed 05 Nov 2025 08:00:32 +0000
Files and hashes: 1: VbIFm3SNbd1cWgwdNel173uohEI.crl (hash: iJO8DiHqA0TAMd6s51iW1IYXZj538gpwve9kkFDh4vA=)
2: r2ver_B1QfAF2R2XPpvc11DJXmA.roa (hash: 6Y5LmQV5zXuhOo4pwCZR6jl/OtipaY9LyBdb5pEQmos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:c3:69:1a:10:6b:89:05:ee:b4:dd:87:52:92:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442
Validity
Not Before: Nov 4 08:00:32 2025 GMT
Not After : Nov 5 08:00:32 2025 GMT
Subject: CN=ed16e857286117b6a688f8c0827fec2aca1f909d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:c5:f8:32:17:9a:a4:c5:0f:a6:32:72:45:
2d:bf:dd:8d:8a:47:0c:d2:c3:e7:17:59:fd:0c:5a:
4a:7c:4a:f5:42:26:8b:69:93:61:e9:53:89:e2:2f:
ed:dc:4b:21:1b:ff:cd:5c:81:bf:1e:a2:c8:34:9c:
5e:0f:e7:c9:a3:a2:c3:40:8a:a3:1f:d9:cf:a7:c6:
29:b4:89:0b:28:ec:68:08:ae:a0:50:4c:0e:c9:a7:
3c:23:89:23:3e:a3:da:84:40:c3:c7:1b:14:8c:8a:
49:f4:1a:da:0d:c2:d4:12:cf:84:65:df:8e:97:3a:
a0:75:f3:99:e5:e2:4f:af:c8:09:4f:f2:a1:58:26:
5b:9a:b6:3a:81:d1:f2:23:3b:ac:d1:53:8b:a3:45:
c4:0c:d2:87:a2:0e:15:08:d3:aa:4d:4a:51:a2:3d:
1a:8e:77:91:62:d5:44:8a:74:9f:60:0b:46:9f:f2:
c7:50:11:87:dd:e8:ad:25:92:d2:a2:ad:72:b0:c1:
ea:5a:fe:73:47:3c:3c:98:2e:ca:ee:55:e8:83:37:
1e:23:8a:9a:18:16:b3:7c:7a:10:73:c9:bc:58:83:
53:ed:80:3a:3c:a1:27:55:51:bb:99:ac:7d:73:f2:
ed:9e:63:62:99:63:be:72:d3:0a:71:0e:62:57:f8:
ae:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:16:E8:57:28:61:17:B6:A6:88:F8:C0:82:7F:EC:2A:CA:1F:90:9D
X509v3 Authority Key Identifier:
keyid:55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:c0:26:f0:d2:57:92:47:65:60:72:16:3c:a5:de:a2:20:85:
9d:fb:8e:f2:d4:c5:63:5b:d6:65:68:8c:9f:42:c4:47:3e:5f:
d4:6f:11:e9:60:70:f3:77:4d:a7:b1:e6:1d:15:97:c8:21:5e:
1a:8f:64:f7:6f:1a:e9:76:25:95:ec:eb:3b:7e:ca:8b:81:c3:
05:73:fa:0a:52:80:87:f7:0e:8e:04:b4:e6:da:a3:bc:90:e7:
a7:69:e4:4b:5b:68:5a:0f:52:39:10:e8:9c:fb:f7:b4:8f:74:
24:c7:ee:9e:24:bb:9c:45:3b:ca:27:be:65:8c:5f:b7:f8:59:
ee:79:65:34:0c:88:0f:fc:c1:d7:7b:c7:fc:5e:c6:fa:54:0c:
84:57:9c:f6:eb:29:e4:d7:0d:1b:1a:b5:d9:9e:6b:fd:28:88:
8c:44:fb:f5:6f:45:1d:74:26:0f:10:f1:cf:ca:90:6e:c5:e8:
8d:2a:90:8f:74:e5:17:ec:b7:87:ed:ff:60:1e:db:22:11:e4:
4e:29:00:c4:8c:3d:e1:4c:72:d1:d5:b9:a7:59:ca:15:76:3c:
67:b0:9d:18:28:29:ca:1f:59:6a:8b:fa:b2:89:e2:08:63:c7:
eb:3a:ec:97:ff:bd:62:62:7f:48:4e:47:89:24:63:89:4f:d3:
31:79:43:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:29 2025 by rpki-client