Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
File: VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft (raw, json)
Hash identifier: n7NnIKsgh+ARqiojamHF59jBxGuhNdcYTGKjuIRkZA8=
Subject key identifier: 61:8A:7B:80:63:C6:F8:01:47:DF:C3:2A:61:1F:E0:EC:38:8E:87:3F
Authority key identifier: 57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
Certificate issuer: /CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Certificate serial: 019A4DE1FBFDAE607E3072C58F220FC8E49A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
Manifest number: 0EC1
Signing time: Tue 04 Nov 2025 08:00:46 +0000
Manifest this update: Tue 04 Nov 2025 08:00:46 +0000
Manifest next update: Wed 05 Nov 2025 08:00:46 +0000
Files and hashes: 1: VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl (hash: zO9UPBIKVbPJ4UExDiq14CszCOqIuJymJaZZ3PjS0Bc=)
2: q4OtYqQ5F8toaT0oHQfCemmVpFY.roa (hash: pSnKgnqoG1TyZ2WLGeGgthK4U38JeBxESDQq72YUX64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:fb:fd:ae:60:7e:30:72:c5:8f:22:0f:c8:e4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Validity
Not Before: Nov 4 08:00:46 2025 GMT
Not After : Nov 5 08:00:46 2025 GMT
Subject: CN=618a7b8063c6f80147dfc32a611fe0ec388e873f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b5:91:6d:ae:be:90:ed:85:d3:53:30:bb:79:
d2:38:79:89:90:61:70:d8:33:37:9b:43:7c:50:a1:
54:ef:d7:f2:4f:95:fc:fb:9b:26:ae:37:5a:98:88:
02:40:80:cd:e3:78:37:9a:35:60:59:55:8f:7d:38:
24:14:44:7a:44:9f:4a:f7:c9:00:aa:5f:a8:84:76:
3b:a6:96:cc:49:fa:2d:6a:b0:91:57:71:f7:4f:52:
a1:99:8f:29:aa:a9:7d:e8:15:8d:e4:40:83:3e:5a:
35:c7:ab:fa:de:37:f3:b9:ed:d6:0e:8b:76:74:17:
c3:1e:f4:1d:20:91:c8:99:6a:65:ae:8e:e3:eb:6c:
3d:66:a7:31:8b:18:2a:da:1f:6e:b2:28:44:bc:36:
e9:a0:6c:c8:a1:fc:2b:30:39:50:ea:af:f5:50:93:
7d:1a:b3:90:f0:16:d0:71:f8:6a:02:8e:d5:6e:ae:
83:6c:39:19:a5:7b:1b:08:08:77:92:cb:62:81:24:
4a:fc:75:38:73:15:67:54:a1:b5:fa:a6:0f:9b:b1:
75:af:dd:69:c8:53:90:d2:27:e8:15:3a:56:0e:ca:
fb:ac:8a:ac:ff:67:fc:21:3f:06:86:7d:b5:e0:26:
98:de:63:36:5c:a7:47:19:e0:39:f4:24:13:e7:70:
e5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8A:7B:80:63:C6:F8:01:47:DF:C3:2A:61:1F:E0:EC:38:8E:87:3F
X509v3 Authority Key Identifier:
keyid:57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:4d:96:83:11:23:48:1f:07:0f:fa:9b:87:90:ae:54:5b:2a:
21:d6:3e:de:69:e4:b2:65:44:3f:49:d0:62:e6:8a:68:04:6a:
45:69:ee:55:a5:6c:a2:25:31:76:7d:ec:c7:a9:73:e8:97:fe:
ed:aa:7c:61:d6:2b:e9:f0:8e:ef:a5:a7:a8:38:ef:87:0d:43:
be:d0:70:b4:c6:29:b0:b3:4c:d5:f1:93:27:2a:f2:30:16:fa:
2b:07:7d:d8:c2:26:27:23:99:6f:c4:c3:88:96:8a:fc:7b:2f:
32:ac:00:98:7f:64:46:15:ec:0f:27:6a:b7:5f:a2:f2:99:41:
b9:f4:c6:1f:43:08:92:de:b5:0a:85:c8:66:3a:aa:6a:e1:e8:
ef:f1:80:1d:99:01:ca:3b:f5:18:17:35:05:13:97:66:a9:95:
1a:1b:0b:25:0d:3c:66:e1:24:da:3a:c4:9e:f5:6d:4f:63:7d:
1d:55:55:36:cc:4d:92:0a:d9:a5:86:66:3e:c8:2f:bc:1e:85:
20:44:e6:8a:1a:6c:c3:a8:30:1f:df:4a:f4:d6:04:77:fa:49:
1b:fb:be:81:3e:57:0a:d9:21:42:2d:13:2e:f1:72:45:a4:b0:
b2:4c:e6:17:84:bc:cf:74:e6:7e:16:17:e5:6d:aa:a1:2f:6c:
92:1e:23:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:15 2025 by rpki-client