Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
File: VQlsYRU9KrVQd_GjDCRZhgAbodk.mft (raw, json)
Hash identifier: D8wMWGoQYYpLaI+KZYBHIL7hR90jIlj+o4SApZ3YCF8=
Subject key identifier: EE:8D:0D:84:AD:37:D2:52:D9:6E:4D:79:BC:FB:9C:1D:B1:60:89:2F
Authority key identifier: 55:09:6C:61:15:3D:2A:B5:50:77:F1:A3:0C:24:59:86:00:1B:A1:D9
Certificate issuer: /CN=55096c61153d2ab55077f1a30c245986001ba1d9
Certificate serial: 019A4E18D2ADCA04A4C98CEAFC1BF601F859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
Manifest number: 1665
Signing time: Tue 04 Nov 2025 09:00:40 +0000
Manifest this update: Tue 04 Nov 2025 09:00:40 +0000
Manifest next update: Wed 05 Nov 2025 09:00:40 +0000
Files and hashes: 1: 2UJUcXgEXfunFA21jmeL2YNS9MM.roa (hash: 6FVHb9+rMImArAonsBYihu+wIYZJbNNs1MntdRcJc2I=)
2: VQlsYRU9KrVQd_GjDCRZhgAbodk.crl (hash: zeRbfrnWVpQ7D2HUf9jR7eBokoTy+GrZN0P8kmwRPKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:d2:ad:ca:04:a4:c9:8c:ea:fc:1b:f6:01:f8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55096c61153d2ab55077f1a30c245986001ba1d9
Validity
Not Before: Nov 4 09:00:40 2025 GMT
Not After : Nov 5 09:00:40 2025 GMT
Subject: CN=ee8d0d84ad37d252d96e4d79bcfb9c1db160892f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e8:a0:af:ed:40:ed:64:fc:be:0b:cb:2c:ec:
5a:27:48:16:e9:e6:fa:fe:bb:16:83:da:a6:81:63:
47:19:b6:d9:8e:56:cf:a9:5a:0d:a4:5a:9f:14:54:
5e:cb:98:6a:d8:7b:60:7b:c5:db:2b:40:49:a3:34:
21:78:20:22:15:8f:3a:52:16:16:05:6a:17:e5:09:
6e:a8:35:19:c3:bc:62:b3:d4:d6:76:1a:6c:8b:5a:
ee:01:f2:ff:81:8c:19:ca:88:9e:92:e8:9e:c4:41:
47:ed:09:13:0a:84:f6:8a:6b:72:26:6a:7a:a5:9e:
a9:5b:39:83:11:81:cd:14:97:1a:16:0a:26:88:6b:
d1:90:44:c9:ec:d2:cd:ad:ce:fa:04:46:a9:83:25:
a0:38:5a:23:d4:dc:c4:50:fa:73:8f:55:eb:73:83:
92:43:8e:2d:1c:e0:37:e1:80:db:49:66:3a:25:1d:
88:56:b0:8d:0a:4f:e0:60:9d:98:ef:7d:6e:d8:9a:
e2:e3:30:ed:ee:9f:69:3a:30:f6:5a:23:df:c5:aa:
65:a2:64:25:8a:52:ca:11:72:f7:2e:d0:21:af:e9:
0d:0e:ec:24:c2:9e:f9:94:02:5e:6b:47:96:bf:95:
5f:07:92:3b:e7:8a:21:88:76:be:34:97:36:97:67:
88:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8D:0D:84:AD:37:D2:52:D9:6E:4D:79:BC:FB:9C:1D:B1:60:89:2F
X509v3 Authority Key Identifier:
keyid:55:09:6C:61:15:3D:2A:B5:50:77:F1:A3:0C:24:59:86:00:1B:A1:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fd:54:1a:9a:20:c7:42:13:36:36:af:19:4d:1c:03:5a:55:
05:74:2d:f5:c9:c4:ee:58:bd:b9:3c:e4:3c:ca:0d:6b:b4:9e:
33:9c:f5:a7:a8:bb:9b:9c:85:12:48:f6:e1:0a:ab:b1:c3:3c:
8c:a0:80:3e:fc:57:1a:cb:5e:59:eb:5e:90:51:6e:ce:9a:8e:
b6:74:e5:df:17:d7:2f:6a:b4:e9:ce:42:8c:b3:e7:26:6e:f2:
1d:43:8c:ce:49:17:4c:81:92:58:b6:52:0c:f4:e6:19:8d:bc:
22:bd:b1:40:94:35:99:73:e4:40:76:42:0b:73:72:8f:81:32:
5f:4a:05:0c:6c:91:a7:32:15:82:2f:e8:49:5b:68:b8:79:90:
83:bd:7f:d8:34:da:97:a8:a5:a8:18:72:f5:30:01:59:db:75:
9e:12:82:3a:3a:a5:53:51:11:48:2a:74:30:c3:d4:3a:33:4d:
fd:19:45:25:f2:66:fd:46:59:a3:d8:d2:2b:0c:89:ed:6d:a3:
6a:18:ca:4a:61:f2:90:81:97:b4:16:c2:f9:70:0f:38:a3:5b:
75:57:8d:c8:8e:24:4d:44:89:db:fe:4c:23:5b:2f:83:e3:6b:
43:43:9f:87:f6:86:0c:60:59:25:2d:b7:c7:fc:d0:32:49:2e:
a3:6d:de:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:10 2025 by rpki-client