Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
File: Vr1_at_sbUTRbT4_eY4_K9INo_8.mft (raw, json)
Hash identifier: 9tr6y/ZeUAq/OjNnOSsuYxHCCTN4VdE/YyB1QXWbtIg=
Subject key identifier: 04:D8:37:EE:2B:EA:BA:0F:DD:BC:D8:72:14:5B:E3:18:77:BF:E8:F8
Authority key identifier: 56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF
Certificate issuer: /CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
Certificate serial: 019A5307E00609AAB6206DB3F8A873CD73CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 08:00:16 +0000
Manifest this update: Wed 05 Nov 2025 08:00:16 +0000
Manifest next update: Thu 06 Nov 2025 08:00:16 +0000
Files and hashes: 1: 1-uUqLBRi2l8Qom0YXKGFyiE_52s.roa (hash: 6O0uoZsxwqn/ZRSGGUR/YkC5bDCXgCwLU9wV4dkd6Ng=)
2: Vr1_at_sbUTRbT4_eY4_K9INo_8.crl (hash: ABbYBUoMQWmchFnvbXXBVsdeIGgVvj9ohv/BAiq9fZ0=)
3: Yhyd6_3--40XbUHLiYyj2qr-Yoc.roa (hash: 1oOXBnBBaEwXQlaBh7+MdVkKyYQvik1W61cIDXTDdBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:e0:06:09:aa:b6:20:6d:b3:f8:a8:73:cd:73:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
Validity
Not Before: Nov 5 08:00:16 2025 GMT
Not After : Nov 6 08:00:16 2025 GMT
Subject: CN=04d837ee2beaba0fddbcd872145be31877bfe8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:98:2d:87:d8:9a:0b:49:71:76:5e:da:76:
47:96:21:df:dd:1f:35:df:2b:f2:cd:1a:ad:2f:31:
43:03:fa:d6:81:0c:94:97:88:68:0a:e4:2b:b4:50:
8f:1c:db:25:81:05:ad:57:0d:70:cc:c8:2e:26:24:
b2:bd:80:e9:51:f7:80:68:0f:f9:f4:72:31:e8:f4:
c2:0a:0b:16:95:96:5a:3a:d1:b1:44:10:f4:7e:4b:
0f:ea:54:7d:f7:ab:3f:e2:a7:2d:3e:74:5a:0e:73:
4f:f7:ab:c0:cc:46:45:64:71:44:32:38:bd:78:05:
a0:2a:1d:f9:32:aa:51:42:36:b1:02:06:a4:ac:17:
1a:1c:81:20:05:01:70:e9:6f:a1:1b:fa:b3:30:82:
91:b5:a3:a0:a8:7a:e3:12:c0:f0:8a:e0:cd:c6:6e:
96:f9:d6:f7:61:f7:be:ff:90:85:b8:73:d5:00:44:
63:c1:9e:5e:0f:8d:91:0c:bb:60:df:9b:d9:bf:7a:
32:dd:e1:53:f3:1e:52:75:89:57:89:96:4c:00:a5:
28:4f:a9:24:56:25:1e:26:2d:72:15:72:d0:7e:25:
c7:29:f7:7e:ff:9f:f7:49:23:d8:55:f0:62:2f:b6:
ce:8b:7e:a8:9d:fa:5f:55:40:0c:70:ca:2d:f2:b9:
46:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D8:37:EE:2B:EA:BA:0F:DD:BC:D8:72:14:5B:E3:18:77:BF:E8:F8
X509v3 Authority Key Identifier:
keyid:56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:28:c9:4f:da:1a:c4:ed:9a:05:8e:ac:29:36:82:58:d1:1b:
a0:e7:21:1c:50:49:79:89:f4:90:bb:a1:5c:b4:e6:5f:a0:72:
72:99:29:a7:31:fb:dc:a3:e5:c6:e5:f7:03:57:c0:2d:3a:ee:
d8:5b:70:80:b2:52:29:ef:7d:cc:17:fe:4a:ab:97:2d:a2:94:
cf:03:0d:27:a4:b8:fa:69:1f:b3:30:8d:0a:0f:ca:c7:f1:10:
ce:3e:da:39:ac:fe:80:c1:a2:6a:75:7c:7e:cc:89:f6:86:23:
53:37:b7:54:8e:0a:51:5a:ef:ea:69:77:07:d9:a5:78:38:9a:
bc:f1:02:46:61:2d:27:d3:63:63:ed:76:09:95:43:10:0c:71:
6d:c3:c8:43:54:7a:b9:2e:c8:5a:9a:f0:54:a8:37:bf:ca:48:
83:35:d5:53:d8:3c:a0:ca:96:de:c6:a6:51:35:33:df:02:88:
1c:91:d3:b0:fb:0e:6e:99:fc:dd:33:1a:ae:37:95:24:cb:33:
47:b6:9a:f5:79:17:de:32:7e:be:8f:74:77:4f:f8:71:fb:f1:
8d:04:5b:6c:36:34:c7:18:b1:28:00:9d:85:46:88:a7:82:40:
80:95:63:0e:7a:30:8d:d8:3d:6d:b2:d6:3c:f9:66:ff:c2:10:
2c:6c:41:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:29:55 2025 by rpki-client