Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
File: vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json)
Hash identifier: UHllyG245hGLhhenUXPYjnoSon8OKw0ZwiHfM9eaxbw=
Subject key identifier: 71:93:CA:93:30:5D:2E:85:2F:58:AC:C9:6B:A7:35:DE:A7:DC:1E:80
Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
Certificate issuer: /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Certificate serial: 019A4E18B233FCFCD7924285C81A298E3BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
Manifest number: 0CDF
Signing time: Tue 04 Nov 2025 09:00:32 +0000
Manifest this update: Tue 04 Nov 2025 09:00:32 +0000
Manifest next update: Wed 05 Nov 2025 09:00:32 +0000
Files and hashes: 1: hKsPJ4MnZD2pYCjFxua95M8Pd_I.roa (hash: doF91Tq6urawTtlcrWXugjS7shhgWKPbbEAfjccw0S8=)
2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: VQl0EAv08alLuB21F7MkOrN5pvw4st2sFpghJE+AQ94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b2:33:fc:fc:d7:92:42:85:c8:1a:29:8e:3b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Validity
Not Before: Nov 4 09:00:32 2025 GMT
Not After : Nov 5 09:00:32 2025 GMT
Subject: CN=7193ca93305d2e852f58acc96ba735dea7dc1e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:97:34:81:70:e0:1d:0e:dd:ad:0d:6f:fb:
38:8f:ad:9b:8f:87:9c:f0:28:ec:b8:6a:f3:67:11:
8f:b8:76:f5:6d:27:71:c7:99:5b:b6:1f:be:c7:fc:
83:9e:46:df:85:6d:bc:f7:05:24:56:69:8b:49:2c:
e2:25:d8:4f:98:08:de:51:e2:60:be:25:e0:0b:d5:
51:73:ec:dd:4a:dc:a3:68:5b:53:21:65:1f:b9:27:
df:f7:cd:dd:53:b6:8d:44:9a:ea:a2:c3:f4:8f:2d:
f0:12:3a:a2:e5:8f:0d:89:78:64:ec:ae:2c:fe:a9:
f5:fb:82:ff:86:f0:b9:02:af:35:42:1d:96:0e:28:
22:df:6c:95:f1:11:85:bf:d0:be:a2:c5:27:45:14:
a8:0e:bd:92:a6:ea:1f:db:f8:ce:0e:60:03:dd:dd:
52:48:1a:33:89:b7:04:04:aa:13:b4:85:fb:c5:c6:
61:49:ac:02:af:9d:c9:ef:58:38:a1:61:1d:6a:61:
f1:64:f3:46:f9:59:b0:95:e2:6e:e6:62:10:d8:fb:
4c:c5:66:80:cd:53:f5:ea:b9:fd:f7:f6:2b:70:a5:
a4:20:4e:ab:d2:a3:a3:fa:c9:ec:23:11:80:a4:0e:
bb:bd:e1:3a:ae:32:fd:f8:41:0c:5c:5d:78:5f:a0:
c7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:93:CA:93:30:5D:2E:85:2F:58:AC:C9:6B:A7:35:DE:A7:DC:1E:80
X509v3 Authority Key Identifier:
keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:09:c7:f2:63:a2:cb:63:27:2e:d5:37:d8:3e:ea:86:9d:41:
f7:9d:5d:8d:8e:4f:4e:92:e9:f6:15:86:58:92:a1:45:5f:c4:
03:e2:11:9a:81:a1:2a:bd:e4:c4:35:e8:30:b8:19:74:66:7f:
2e:45:24:60:b3:4f:73:c9:94:1a:35:58:05:5c:a3:33:a7:0a:
ef:e3:b1:91:15:71:0c:44:c1:87:ca:6f:b1:97:a1:31:b7:3c:
a1:2c:fb:d7:97:98:8f:c3:3f:c5:84:2c:dd:51:5c:d8:22:c1:
10:61:1f:80:4e:b6:9f:9f:9f:91:4e:2c:11:1a:8a:fe:c5:a2:
30:d7:4b:78:2f:e7:8a:9a:40:a0:a0:38:20:7f:9b:5f:f0:e2:
e6:35:08:95:9a:ec:5b:6f:2e:48:cb:eb:12:ac:1a:79:f6:78:
44:12:1e:60:42:7d:5e:9c:0f:62:28:8b:9b:6d:66:9a:0e:f6:
9a:8e:3c:6f:ef:5c:4a:54:09:fb:ab:49:23:c3:0f:9f:e9:f7:
d8:a0:b0:37:b0:14:b9:ac:86:f9:2e:10:c2:26:ea:d1:fc:69:
cb:96:0d:76:6d:2a:23:8e:84:a5:fe:85:9f:a9:95:41:08:91:
ca:c7:94:44:c7:85:cc:f8:a5:03:ef:01:83:cf:d2:9d:be:cd:
f6:b0:94:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:44 2025 by rpki-client