Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
File: VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft (raw, json)
Hash identifier: KbAeX45UecXxXyzLaiKMzDGitVRqcssXjTcIhMKKGxI=
Subject key identifier: 4E:66:9C:7D:A2:88:89:69:A7:50:76:0C:1A:ED:6D:7D:1C:8A:F6:62
Authority key identifier: 54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1
Certificate issuer: /CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
Certificate serial: 019A4EF595AF9089BBFDBC31959509674C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
Manifest number: 0630
Signing time: Tue 04 Nov 2025 13:01:48 +0000
Manifest this update: Tue 04 Nov 2025 13:01:48 +0000
Manifest next update: Wed 05 Nov 2025 13:01:48 +0000
Files and hashes: 1: NZvb2qKNw6TNNeDvqlV_-QChDh8.roa (hash: AvipIjBdsS0207+aK/JkUYN7M+6rcBf9DVuXv7pl1K0=)
2: VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl (hash: FWRRfLlIG2dfGGccqvgnQERx4peBRI7c6Ol1i7VwaCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:95:af:90:89:bb:fd:bc:31:95:95:09:67:4c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
Validity
Not Before: Nov 4 13:01:48 2025 GMT
Not After : Nov 5 13:01:48 2025 GMT
Subject: CN=4e669c7da2888969a750760c1aed6d7d1c8af662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:08:18:4b:60:58:da:6b:b3:28:99:95:ee:84:
97:3d:70:80:5f:ba:73:a4:54:88:1e:b1:29:cc:e9:
db:b1:1d:87:5a:e0:35:71:b7:73:f9:f5:f4:95:41:
05:08:ed:77:f4:66:5b:0f:31:68:84:af:42:3b:5e:
c0:b4:f5:3e:1d:97:54:45:4a:47:f3:af:51:e3:d7:
c3:e6:95:8e:45:54:db:03:2e:f2:2d:d7:55:6c:e1:
bc:f2:e8:e0:08:87:0d:ed:c8:24:97:9e:83:26:b4:
b3:07:aa:9a:00:06:62:b5:8e:20:82:2e:cc:2a:2b:
33:62:e4:ad:d6:e9:57:22:d6:47:01:a5:2c:31:4d:
61:8c:1e:41:27:6c:f5:c6:9f:5f:8f:4d:e9:b5:ed:
a7:61:b8:d1:df:39:e0:c6:1b:6a:ec:f3:61:8b:b8:
7c:60:ec:4d:1f:94:5b:e9:a6:57:e2:fc:aa:e8:ea:
d1:80:f3:96:21:e1:ab:4a:96:e9:c3:89:56:41:8b:
3d:e3:19:70:7c:7d:f2:7b:f7:4a:aa:48:00:ed:c2:
f9:99:d9:38:e4:2e:4c:d8:86:1d:af:25:38:3c:ee:
c0:57:4c:71:7d:de:e8:2a:8e:22:05:e1:ca:17:bf:
7d:85:a1:dc:7b:ab:fd:06:15:e7:38:96:6e:6f:d9:
25:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:66:9C:7D:A2:88:89:69:A7:50:76:0C:1A:ED:6D:7D:1C:8A:F6:62
X509v3 Authority Key Identifier:
keyid:54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:eb:f0:a7:69:bc:de:8c:2f:81:e9:da:6f:e3:46:5e:be:8e:
a4:e9:89:2c:a2:be:b9:3b:2c:56:da:3b:04:05:5c:f6:67:3a:
b3:01:4c:0e:4f:c0:91:c6:34:29:74:98:a3:f1:89:d7:6c:e2:
b4:fe:1d:25:b3:57:a2:62:73:f4:93:c4:f8:15:b5:fe:6f:4c:
d9:bb:83:16:c9:77:26:1c:56:46:24:03:21:d9:6c:61:d7:a1:
24:8f:62:4a:ea:72:34:2d:1e:03:a3:64:02:c9:eb:41:86:86:
67:53:21:d1:61:9c:e0:d0:bb:31:07:bd:32:05:b5:96:70:a6:
ee:d0:ec:99:e5:63:40:4e:3c:54:90:db:e6:ee:7c:38:c4:df:
ca:46:c7:4e:a3:3c:f0:b9:ac:b9:88:cb:70:e4:65:1b:4b:44:
d7:ad:86:ff:84:a0:1c:72:b9:e2:73:1a:14:df:b2:95:6b:a2:
4c:23:07:68:ce:4b:bb:05:34:23:78:1c:45:8a:04:54:ab:16:
1c:49:43:c4:45:f5:25:40:df:30:b3:f6:d4:44:cb:68:9a:be:
65:fe:ea:95:51:0d:1d:d6:82:cb:16:6a:5f:e1:ab:58:7e:2f:
10:1e:84:a7:62:62:50:c2:0b:95:fb:fd:8c:41:ae:ae:c5:3b:
60:f7:9d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:31:31 2025 by rpki-client