Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
File: VBfj2w0cLPwitL6HTiWY3QmSlO0.mft (raw, json)
Hash identifier: e7qaOYgFCMf/SRqhthUaJ1lQjA/3EOzt1rkYESOoVaQ=
Subject key identifier: 73:5D:CF:8D:A0:E7:26:2B:53:A4:DF:F1:B1:98:10:72:37:4D:F9:C7
Authority key identifier: 54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED
Certificate issuer: /CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
Certificate serial: 019A503DA878DFFDFEDD88E4314B4447A9B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 19:00:09 +0000
Manifest this update: Tue 04 Nov 2025 19:00:09 +0000
Manifest next update: Wed 05 Nov 2025 19:00:09 +0000
Files and hashes: 1: VBfj2w0cLPwitL6HTiWY3QmSlO0.crl (hash: dD0pfIn9j+OfX9/RzzsrgolAfACbSgO3vnBZxR+ENlw=)
2: Xon3ZRUmiHyafmwSbpFGnaeltWw.roa (hash: M4Nh/8K2vjAav0TbJZxKf47ENVLTCLivupIBPIaomOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:a8:78:df:fd:fe:dd:88:e4:31:4b:44:47:a9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
Validity
Not Before: Nov 4 19:00:09 2025 GMT
Not After : Nov 5 19:00:09 2025 GMT
Subject: CN=735dcf8da0e7262b53a4dff1b1981072374df9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9c:5a:aa:01:04:92:97:e2:20:60:e6:d2:97:
58:b3:f8:47:1a:39:3c:c6:01:78:ef:51:a2:b0:3d:
0c:bb:39:3b:7e:9d:ff:53:b8:60:83:41:ce:6c:0c:
ba:6f:a5:7e:30:2c:b0:5c:d5:ac:89:b6:72:1e:5c:
f6:ba:7a:39:4e:8c:2d:83:b6:1f:db:3a:77:76:86:
50:b7:f8:57:9f:d4:b2:a9:75:f4:d7:11:2c:c6:39:
21:b2:a8:06:8c:90:4c:74:f9:be:c8:1e:6a:34:7f:
58:8e:95:26:6e:95:a6:1d:89:ac:e5:12:08:01:2f:
b3:4e:ac:f4:21:b3:25:32:48:35:93:c4:db:00:d1:
a2:16:80:cd:71:20:93:ad:be:0b:1d:8c:48:67:cd:
a5:2d:de:96:ea:65:18:b8:2f:c0:34:ef:63:24:19:
81:17:e9:ec:bd:bf:67:ac:ad:fa:22:b8:81:a0:a6:
9f:d5:8c:4b:dc:6c:02:46:c6:79:9e:ba:46:9f:50:
f1:f2:97:6b:1d:5c:b7:5f:35:de:63:f2:d7:7e:32:
8e:c1:f8:e9:11:31:12:3a:1e:44:6c:df:91:f1:78:
63:85:7f:62:5e:ce:2b:32:23:a0:b1:4f:f0:b1:05:
68:9b:d9:eb:77:77:57:83:51:8a:dd:6e:f4:17:f1:
4e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5D:CF:8D:A0:E7:26:2B:53:A4:DF:F1:B1:98:10:72:37:4D:F9:C7
X509v3 Authority Key Identifier:
keyid:54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:83:dc:69:28:f5:82:14:37:ba:9f:74:8a:29:63:de:21:19:
60:f6:f5:be:eb:55:6e:c7:f3:99:d2:d9:6d:e0:7b:d8:bd:b8:
78:d1:e0:7e:c8:5f:ae:43:fd:91:dd:72:5f:86:fc:47:f3:e7:
a8:9f:a6:24:f9:19:5a:c6:93:e8:a0:89:b4:73:7d:8b:d6:fc:
83:f0:19:d4:e2:03:47:f3:c6:82:57:14:92:50:0f:48:46:8d:
4c:44:0a:b4:a9:e6:69:3a:46:ee:ad:5b:ce:6c:b3:bf:01:3e:
4c:bc:07:a7:87:de:e9:90:9b:0d:d8:a9:79:b7:9a:44:cf:76:
dd:be:a1:27:4e:9b:f1:a4:1b:ab:08:5d:72:dd:ec:03:1a:fb:
6b:61:61:b5:d9:12:34:7b:97:9f:be:12:54:ab:79:4d:78:7e:
98:81:f7:6f:7f:12:e0:2d:5b:ae:83:5d:0d:c2:c7:c0:8a:83:
c3:cd:5f:81:04:fe:fa:ce:92:18:b3:79:ed:9b:52:0f:cd:01:
76:3f:04:d5:cc:5e:24:f1:d2:10:04:f1:ea:66:ea:1c:b3:11:
a9:ae:4a:43:a3:93:f7:4f:5d:b3:c7:04:8c:88:a0:3d:74:47:
c8:36:33:cd:f3:c9:79:3c:e2:22:d9:66:8e:81:aa:1a:e8:34:
76:9c:6d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:26:29 2025 by rpki-client