Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
File: VwhmHGruys2bcRdqct6WybRQlDk.mft (raw, json)
Hash identifier: iuC7kvwRA4BsQdSAKOGKesemjQEScY/vF6RUYtRgmCw=
Subject key identifier: 4E:7F:38:90:8F:F7:33:5D:E9:3C:7C:B1:8E:A5:1A:5C:99:01:F4:52
Authority key identifier: 57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
Certificate issuer: /CN=5708661c6aeecacd9b71176a72de96c9b4509439
Certificate serial: 019A4DAAC145146B6AC89208F7254889D9A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
Manifest number: 1037
Signing time: Tue 04 Nov 2025 07:00:27 +0000
Manifest this update: Tue 04 Nov 2025 07:00:27 +0000
Manifest next update: Wed 05 Nov 2025 07:00:27 +0000
Files and hashes: 1: 0DRAcYwVU1wTPmKPUVZE-cIvVWk.roa (hash: SCcdCtXYPz3bfVKFsB8kMQkE3rKjzNyXJ29sazaODiU=)
2: VwhmHGruys2bcRdqct6WybRQlDk.crl (hash: RQMIfX2WRoheC+ipy53GfluvO9iX7HkhwyV0bkXSx+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:c1:45:14:6b:6a:c8:92:08:f7:25:48:89:d9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5708661c6aeecacd9b71176a72de96c9b4509439
Validity
Not Before: Nov 4 07:00:27 2025 GMT
Not After : Nov 5 07:00:27 2025 GMT
Subject: CN=4e7f38908ff7335de93c7cb18ea51a5c9901f452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:bc:7a:ba:d9:de:9e:49:fc:d5:2f:1a:79:
b7:bc:ef:c5:e9:e0:52:8e:b9:41:0b:c4:cb:4c:2e:
50:32:af:00:e7:50:bc:42:2f:0e:69:8d:c5:8e:1b:
a6:82:71:54:fe:c2:37:9d:9b:4c:2f:fa:19:16:2b:
1e:09:79:c3:70:4b:75:c0:9e:db:6d:f1:14:6b:ae:
71:0f:47:45:d7:60:b1:f8:38:8f:e5:57:81:43:88:
5e:96:08:57:bf:97:75:4f:b6:7e:5a:4e:54:c2:ad:
5f:dd:2c:51:8a:0d:d5:4f:e2:2a:26:3e:90:09:ed:
0a:1e:ef:3c:ca:31:b6:c9:28:2f:37:97:f7:84:bf:
f5:97:d4:e6:0e:9f:99:33:45:17:0e:dc:ec:fc:59:
fe:c3:4a:a8:d3:ff:47:6a:cc:0d:b7:ab:ea:fa:c2:
3a:cd:c4:5c:3f:5b:76:eb:e1:10:70:e5:2c:38:9c:
be:97:ce:a8:14:7f:0e:20:81:7e:45:b2:d9:9a:27:
a6:ef:1f:96:a2:6e:76:84:82:cd:60:42:0e:f0:90:
64:30:1f:e2:09:e0:c7:e7:e6:89:81:89:cf:22:f2:
46:9c:ba:29:2b:de:19:14:b3:c9:42:fa:e6:f1:64:
b4:29:b2:94:1f:85:7c:da:5e:1b:6b:1f:bc:f0:c3:
d2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7F:38:90:8F:F7:33:5D:E9:3C:7C:B1:8E:A5:1A:5C:99:01:F4:52
X509v3 Authority Key Identifier:
keyid:57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9e:28:df:97:72:eb:21:9f:bf:4f:56:0b:e1:2c:bb:48:dd:
ff:11:2e:8d:37:4f:ed:84:af:95:29:4b:fa:e1:ed:43:17:bd:
d0:6d:1a:78:5e:08:5e:df:64:7d:ed:31:56:9b:ce:53:6f:c1:
7c:f8:8b:3a:43:76:64:78:21:cd:e4:d1:a5:84:c2:a6:b2:5e:
43:99:66:2b:76:7a:3d:f9:84:59:b2:5c:66:a1:8d:4c:12:42:
1c:f5:4d:11:ba:fd:ea:d5:6b:61:db:b0:f2:91:6a:c1:bd:ec:
7c:89:92:3a:39:8c:64:17:22:1b:0b:86:de:68:db:5a:0e:80:
5a:8e:f0:fc:0a:4e:8a:1f:ec:2c:bc:9b:57:9a:6a:bb:9d:f1:
5c:fd:c6:75:1e:7a:88:f8:aa:40:d8:f6:91:f1:45:d6:40:45:
a1:7b:d1:0e:dd:7e:f6:26:85:40:15:e5:59:f7:6c:5d:09:7e:
b8:10:41:05:68:ea:10:ca:b8:f1:bd:17:85:33:d3:b7:b9:96:
88:e3:03:6e:e9:75:15:36:87:5e:68:66:a8:fb:c9:db:83:cb:
82:ff:df:6d:c2:84:1d:59:23:58:44:57:0e:d6:dc:95:af:3a:
30:0c:73:9d:e3:e0:05:a5:ec:86:a8:be:74:c1:ce:b4:b6:9d:
c3:31:e0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:28 2025 by rpki-client