Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
File: VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json)
Hash identifier: /BrnBsBuusPl0smSfAF+JbqKzSrifQ6U6tkseD7QZ4M=
Subject key identifier: 8F:C8:56:39:7A:3E:EE:8B:76:76:0F:05:1A:B6:1A:C6:A8:64:0B:D1
Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
Certificate issuer: /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Certificate serial: 019A4F998070EF266A9F947B01184EC2DB46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
Manifest number: 1101
Signing time: Tue 04 Nov 2025 16:00:51 +0000
Manifest this update: Tue 04 Nov 2025 16:00:51 +0000
Manifest next update: Wed 05 Nov 2025 16:00:51 +0000
Files and hashes: 1: 6hSnRR0poSKLkgYbDLBwSreCHXw.roa (hash: 2LSwLZwlqMozkmvNpXnEPuZJylqRvk5GNtgnCAWWf9Y=)
2: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: +JSYwoArQJEU2Enit6xH1hid8Ey9TGWn8s1dyOT7R4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:80:70:ef:26:6a:9f:94:7b:01:18:4e:c2:db:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Validity
Not Before: Nov 4 16:00:51 2025 GMT
Not After : Nov 5 16:00:51 2025 GMT
Subject: CN=8fc856397a3eee8b76760f051ab61ac6a8640bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:10:e9:af:4e:2c:9e:61:16:e1:ea:93:29:
3f:85:07:80:99:d9:28:05:d9:44:c1:d0:21:4f:06:
ce:7f:40:35:28:f3:c8:34:47:7d:26:87:85:8d:72:
7d:b5:a6:d9:8f:e5:6f:a7:4f:ec:38:80:69:c8:7a:
b9:93:d1:de:a6:50:ee:47:d5:28:44:d1:3b:1c:e7:
85:9f:a8:28:94:66:d5:2d:be:37:86:4b:79:9a:91:
51:b8:12:28:d4:82:7f:71:10:4a:da:6c:a6:c0:6a:
68:2d:99:b2:94:fc:97:12:27:d8:b9:42:51:e5:8e:
ba:6d:40:d7:bb:fe:74:f0:0d:1b:a0:15:ab:59:a9:
07:96:32:70:49:30:c2:16:8f:e5:29:90:1e:00:a6:
ee:e8:cb:3c:3f:e7:67:64:ac:bd:bd:ac:84:90:08:
76:0e:4f:22:1d:41:f3:d7:d2:80:11:f5:ab:28:b6:
e5:29:03:e4:42:c9:7d:76:d7:0f:70:1d:c3:56:72:
31:83:ac:09:f7:b2:75:f5:c4:5d:cb:65:92:b5:d4:
f7:77:f8:e3:57:fd:d9:90:1c:2c:eb:e7:92:35:e7:
b6:b9:86:0e:ed:d8:31:ce:bd:a2:61:32:f3:c2:6b:
74:99:2d:b3:9e:d4:97:d2:40:1f:04:79:21:a5:71:
9e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C8:56:39:7A:3E:EE:8B:76:76:0F:05:1A:B6:1A:C6:A8:64:0B:D1
X509v3 Authority Key Identifier:
keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d5:87:85:9f:67:b5:f2:46:52:0c:b4:19:11:8e:87:00:a2:
5c:3f:52:0d:40:0c:10:e2:00:06:28:a4:61:c2:99:77:af:4f:
76:48:2a:f0:1b:2d:4a:b3:1e:c7:7d:d3:c3:b9:24:5c:ce:99:
02:a7:63:c3:0b:a8:f7:8c:46:05:0a:7e:03:86:b1:9c:ab:3a:
cf:64:38:e5:b4:4f:67:04:7e:6b:2c:f8:ed:a7:24:a6:2e:e2:
b3:00:5d:08:0c:bc:f2:af:5d:94:cf:15:26:19:44:02:0d:30:
8b:ae:bd:0c:df:f8:46:b0:8b:60:a8:60:4b:df:2a:b1:0e:1f:
f1:b6:21:5f:59:91:e2:ac:ec:c4:c7:59:c9:08:e3:49:31:e5:
83:e4:1c:e5:63:41:2b:a9:99:83:8b:c1:e0:17:7b:25:d8:54:
3a:78:92:b9:a4:22:7d:fc:ec:f5:12:da:c1:a4:4c:7b:f0:c4:
50:5a:d6:53:87:b0:8f:6f:87:00:4b:46:b3:f2:57:f1:32:f4:
c7:15:1a:f8:ca:a0:1d:e4:8d:ab:83:84:5c:83:82:78:7c:ed:
b4:1e:26:fe:8a:97:a8:40:93:73:7c:f5:21:97:a6:02:17:cd:
9f:55:de:44:29:69:28:e4:e9:41:0c:0c:84:c1:e4:17:40:6c:
23:50:6c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:21 2025 by rpki-client