Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
File: VdBq_SbSUiNCenoNX54xWQY_vKM.mft (raw, json)
Hash identifier: s9mgKhpWBqb87D7SSxjWk/YlKCfBH7PUjRRJaVMCZes=
Subject key identifier: 08:D9:A1:43:32:32:AC:60:39:5D:E4:44:83:7B:03:AD:B2:7F:83:77
Authority key identifier: 55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3
Certificate issuer: /CN=55d06afd26d25223427a7a0d5f9e3159063fbca3
Certificate serial: 019A4E18BE03533FB7370336F58DFAC32FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
Manifest number: 1105
Signing time: Tue 04 Nov 2025 09:00:35 +0000
Manifest this update: Tue 04 Nov 2025 09:00:35 +0000
Manifest next update: Wed 05 Nov 2025 09:00:35 +0000
Files and hashes: 1: LGr3W12gg5B5iAQGS4LlAtKKquM.roa (hash: E6DrGRYtfy1QPOk4PfrfkhjZuBFDW5GfEmSOYSVlg/k=)
2: VdBq_SbSUiNCenoNX54xWQY_vKM.crl (hash: E+PMJMOLhwNmdC04tm5snEVYFyAF2lp6NGZ2ByVN4KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:be:03:53:3f:b7:37:03:36:f5:8d:fa:c3:2f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d06afd26d25223427a7a0d5f9e3159063fbca3
Validity
Not Before: Nov 4 09:00:35 2025 GMT
Not After : Nov 5 09:00:35 2025 GMT
Subject: CN=08d9a1433232ac60395de444837b03adb27f8377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e8:c1:a0:bb:a2:23:28:e2:89:f3:37:59:79:
e5:7f:9b:fe:5a:07:e2:28:b7:ab:87:a4:85:00:7c:
5b:02:56:fc:4a:6b:35:54:d9:c9:0f:83:59:e1:f1:
61:25:89:af:4a:01:80:9e:f9:3b:79:61:4e:20:38:
65:17:00:b0:90:39:f0:4d:44:82:d3:9f:ee:ba:98:
e9:a4:10:96:74:34:ba:b6:b7:39:e2:cb:4c:52:fe:
a4:db:9c:54:cd:c2:2c:f3:33:69:bb:71:d8:f6:fa:
ca:4f:31:a8:f0:d6:3d:08:45:59:63:fe:f2:d9:7b:
c7:3a:04:ea:63:da:09:2d:7a:2a:55:16:b8:20:f3:
03:63:d9:f5:cf:8f:e4:4c:10:84:ab:b2:d6:5c:10:
53:a2:97:e2:85:71:b9:1d:18:9a:8f:fc:0e:71:2b:
8b:d2:0c:c4:1d:7d:e8:f8:6e:f0:88:a9:b1:9c:f6:
56:2f:eb:1d:38:69:08:46:5f:70:5e:51:a1:74:18:
2a:0f:9d:8c:ff:6c:39:38:bf:d0:8b:b9:be:82:e6:
94:da:ec:8e:83:30:60:35:42:16:d4:ad:5f:ef:03:
25:28:f7:69:67:9c:39:14:b5:bb:b9:12:7f:f9:6b:
d4:ab:29:52:eb:8e:89:6f:ef:3f:36:4a:f9:a0:0c:
61:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D9:A1:43:32:32:AC:60:39:5D:E4:44:83:7B:03:AD:B2:7F:83:77
X509v3 Authority Key Identifier:
keyid:55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:61:76:d5:00:35:11:f4:1c:9a:a9:c0:82:10:25:f9:7b:db:
40:23:c5:ac:56:00:87:a3:94:52:5b:ed:93:0a:71:5b:63:59:
42:8a:8c:cd:53:a2:17:e3:8f:94:9c:e1:42:74:26:ff:4e:26:
36:be:4a:dd:28:37:da:8f:80:6b:ff:e4:43:9f:b2:38:9a:b7:
1f:11:4a:de:64:44:32:99:0d:b0:ba:6c:27:5b:11:8b:11:e7:
28:14:e6:b1:b2:77:72:f7:d0:37:e7:21:ba:2d:ec:f1:7b:54:
fa:fa:d9:9c:cc:bc:b4:0c:4c:2b:7c:0c:fd:6e:97:4d:df:fe:
5e:bd:7c:a2:fe:88:25:ac:f3:5e:e8:3b:20:fd:cd:ef:16:3f:
c2:c2:03:60:2b:fb:d4:38:aa:b5:5b:ac:5c:85:2f:05:91:26:
a3:2a:2c:fa:3a:0f:f5:18:33:6d:f2:6f:dc:fc:5c:b0:69:4e:
33:85:0f:5a:7e:e6:53:dd:1b:16:cc:68:ae:e3:43:31:85:b9:
75:4a:8d:53:49:31:ea:fa:f5:52:0b:70:fd:f1:b1:97:ea:e1:
f7:da:34:c7:8c:55:4f:62:6c:e6:34:5c:c7:82:78:99:15:4e:
e7:41:48:a7:5e:fe:c3:13:f9:99:d2:ca:f5:46:e0:ae:f9:de:
8b:1f:47:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:00:59 2025 by rpki-client