Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
File: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft (raw, json)
Hash identifier: RdhL/c4FxBT8OXcB41hBLiY4YukN2qQ5hpFh3iUo/hI=
Subject key identifier: C3:12:D2:53:8A:2F:90:BE:A5:2D:5D:E6:87:82:BB:4A:F9:A2:59:95
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 019A51507C1BABF12494313BC9786F3D845B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
Manifest number: 0451
Signing time: Wed 05 Nov 2025 00:00:20 +0000
Manifest this update: Wed 05 Nov 2025 00:00:20 +0000
Manifest next update: Thu 06 Nov 2025 00:00:20 +0000
Files and hashes: 1: CGPP8HhjMW_RZkE7DV2Keb_-LHY.roa (hash: BwYMxlq5FSbj/DRTEs1ojEz4ScbmF9CAybLJxeuJX1Q=)
2: GuhdpgwH5YJ7xnpdA6s24QpX49w.roa (hash: ZdCnAlacsr9A9vO1RGVJCjuUMPmhV5WqNBmLQuVkobQ=)
3: N1Onrv7nhAaOvq7SUfOQEHI1u0Q.roa (hash: XfPvZiSzA2jPJQaFVfWcm0/MZ4kiyCO7Rw1NAz93uXo=)
4: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl (hash: MIwb3KBOfj7RqAkS56IpMr3EavBkav+kbk4MSsgCCZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:7c:1b:ab:f1:24:94:31:3b:c9:78:6f:3d:84:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Nov 5 00:00:20 2025 GMT
Not After : Nov 6 00:00:20 2025 GMT
Subject: CN=c312d2538a2f90bea52d5de68782bb4af9a25995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:02:03:2c:e1:11:46:65:73:6f:72:cf:69:61:
28:6d:8a:3a:7c:98:44:20:99:bb:9e:03:9e:f8:75:
7e:18:d2:65:81:8b:47:37:d2:75:e7:5e:fa:60:a3:
53:cd:b8:a1:7b:4a:f1:08:23:42:d5:66:e9:67:65:
d8:58:20:1a:2d:93:91:bf:ed:54:a8:58:78:9c:db:
7e:65:88:ba:b0:86:f2:ef:dd:74:0f:37:1a:46:91:
09:cd:ea:c5:15:ab:cb:6b:da:48:6b:c2:b3:6d:be:
a0:e8:df:c5:b8:02:2b:5b:54:a7:0b:ce:21:1d:c7:
4e:0f:98:77:9f:b7:39:d1:03:90:56:8b:b9:9a:3d:
5a:8a:dc:4c:46:9e:d6:16:4d:77:cd:06:0d:17:67:
1d:89:51:3d:81:76:79:20:93:d1:a2:cc:ae:be:0c:
e0:17:20:dc:13:95:65:65:d9:b2:e5:41:7c:42:fe:
ae:58:45:17:cd:cc:d1:b2:cf:49:95:f1:28:60:d3:
05:70:b0:1a:c6:03:7e:8e:fd:5e:92:97:e9:0f:b3:
a2:8b:c9:fb:da:9d:c8:3d:11:10:fb:29:dd:d3:7e:
0b:b2:47:1b:40:e3:8c:cc:ae:95:35:37:bf:fa:ff:
7e:2a:ac:09:75:f8:8a:86:ba:ad:27:39:db:16:75:
75:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:12:D2:53:8A:2F:90:BE:A5:2D:5D:E6:87:82:BB:4A:F9:A2:59:95
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:25:e1:34:53:6a:ed:9a:9d:6f:ad:a5:a4:23:3b:99:7e:64:
65:32:95:b4:c4:5c:af:c6:64:0a:27:58:73:b0:df:2f:4f:eb:
d9:23:05:5f:01:ed:ac:d6:1c:85:13:86:4c:95:99:bd:4d:91:
73:9a:0e:7f:38:21:1a:22:65:63:96:92:86:51:6d:c1:bf:b2:
2e:d8:aa:fc:6c:eb:90:d5:a4:98:8a:1d:67:fe:58:72:f4:62:
2c:e2:cc:c2:c0:4e:dc:a5:9f:e8:26:80:f5:f6:b8:64:e6:4e:
ca:21:f0:ca:79:5f:d4:9e:9c:7d:74:2f:de:bc:ee:e1:b5:c7:
45:48:65:1e:86:ab:74:ec:9d:a5:d2:ce:fb:48:e1:f2:8d:a1:
6b:f4:43:b6:cd:49:21:11:0a:1f:48:1a:1c:6c:7e:4c:34:33:
12:dd:d1:58:90:1a:ed:9c:f4:51:6e:b5:2d:76:a3:0b:a6:ca:
77:84:e0:e9:32:9b:69:d2:8f:89:88:e8:13:d6:17:ee:11:58:
2d:de:0e:6c:7f:5a:2b:88:c1:7d:f0:c1:bf:75:3c:f8:e4:59:
8b:9a:4a:08:a6:f6:e8:09:7c:3f:3b:5f:ab:d4:95:66:10:6f:
2a:48:01:fb:16:08:fe:4e:9a:a6:76:eb:4c:13:5a:37:bc:67:
23:e4:ee:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:15:41 2025 by rpki-client