Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
File: VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft (raw, json)
Hash identifier: 9X+XiE//sf6B8t028RHqSiDrLKfLzNRYUZ+QBxn/6yQ=
Subject key identifier: F6:ED:7F:CF:5C:AF:64:3F:02:03:BC:41:A6:54:C7:91:BF:80:0C:31
Authority key identifier: 54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C
Certificate issuer: /CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
Certificate serial: 019A4DAA9AAA6D9E3F5FB7A53E652AAAE0A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 07:00:17 +0000
Manifest this update: Tue 04 Nov 2025 07:00:17 +0000
Manifest next update: Wed 05 Nov 2025 07:00:17 +0000
Files and hashes: 1: VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl (hash: HmCzrsP9YvZgiUDSa6C4xVK7jIK/CK+fop5RFfoQoa4=)
2: bOIrh8o4MvR1wd4C84En4JCn0L4.roa (hash: DG81fv6EP9+XjNFDQGRmy+cQGfBXw0VPtgzqJ5IZAq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:9a:aa:6d:9e:3f:5f:b7:a5:3e:65:2a:aa:e0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
Validity
Not Before: Nov 4 07:00:17 2025 GMT
Not After : Nov 5 07:00:17 2025 GMT
Subject: CN=f6ed7fcf5caf643f0203bc41a654c791bf800c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:dd:60:58:07:22:d1:ad:b5:30:a9:61:a4:6c:
bf:a4:6c:00:33:46:70:0a:30:5c:f3:32:de:33:74:
09:0b:5e:6c:7f:b8:f5:36:6b:33:98:5b:38:9c:bf:
5e:fc:7f:90:7e:40:e5:8e:3e:04:fb:3e:9c:18:0d:
bb:25:7c:a4:c8:26:79:88:c9:f3:16:c5:6f:35:6d:
74:3c:f2:2c:63:07:cd:14:c9:6d:39:a8:ed:43:41:
ea:ed:17:4d:7e:fc:a0:4e:7e:97:bb:4b:1a:a2:a5:
da:5d:54:21:6a:c6:24:41:fb:84:cd:db:b7:ed:1a:
0f:c9:d0:c2:22:2a:b2:82:af:9a:6d:d1:66:02:07:
3e:11:71:58:41:dd:64:48:c5:0c:0f:f8:37:c0:ad:
83:18:1b:63:27:5c:1b:5a:e8:30:3e:c0:e5:88:25:
6a:cd:2d:5d:11:52:24:90:b8:63:45:60:fe:86:9a:
26:43:f0:a3:a8:96:91:df:b2:46:a0:36:aa:99:e1:
b6:0e:78:9c:93:7c:a4:b3:64:4f:9e:93:19:80:68:
8e:50:fe:06:bb:a9:06:b4:34:16:9e:e5:43:79:14:
f0:41:73:61:fb:10:c2:2a:ba:27:19:83:20:2c:ae:
69:fe:fc:af:fd:cd:27:fe:5b:c5:a1:76:09:c9:a5:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:ED:7F:CF:5C:AF:64:3F:02:03:BC:41:A6:54:C7:91:BF:80:0C:31
X509v3 Authority Key Identifier:
keyid:54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:fa:5a:9d:e1:d5:48:8f:95:95:d4:80:98:10:e6:2f:3f:94:
48:dd:0f:be:6c:4e:24:70:3c:4d:9a:89:6b:95:4e:10:fe:71:
ee:02:77:41:e7:01:19:c3:33:a0:27:31:da:20:6e:f4:88:50:
9f:d7:53:d9:3e:12:29:5a:96:23:b3:01:4e:37:75:4c:ca:87:
6f:05:c4:66:88:c5:e6:1e:81:0f:0f:23:99:bd:af:b0:59:98:
bc:2e:ca:c3:cf:28:d4:4b:d6:76:0c:ad:b1:44:7c:4f:a5:67:
ef:75:ac:14:72:ad:d7:60:a3:17:84:ae:52:cf:eb:9f:46:88:
8e:3b:23:6d:da:4c:93:0d:3e:60:eb:a5:88:7f:83:c8:e0:d8:
3c:12:42:0b:f9:35:f0:94:f8:70:52:f8:fb:37:09:21:7d:73:
b7:71:94:96:c3:f8:29:b5:a9:31:b7:65:07:e0:e4:90:23:f2:
68:d7:05:40:4e:9d:64:f3:c9:81:41:7a:2d:e0:49:94:74:46:
9d:b3:95:27:ca:37:99:01:bc:8a:56:e4:d8:57:d3:86:7d:47:
87:67:18:64:9b:22:ac:d2:d4:c2:e8:78:cd:9a:ec:24:cc:33:
8b:aa:e8:be:e9:32:a3:74:b2:1b:d0:7a:be:f4:1f:34:99:78:
1a:ca:c2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:10 2025 by rpki-client