Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
File: vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft (raw, json)
Hash identifier: MJClyliU4hw4WZMVgbtUQVw6H9awr/twzT5yOvi7OkE=
Subject key identifier: 56:AF:EC:13:59:EC:33:E4:FF:9B:CA:36:D0:37:06:53:80:A5:C9:9D
Authority key identifier: BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
Certificate issuer: /CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Certificate serial: 019A4EF5E9C522EDA8822F10F014406C133B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
Manifest number: 0F4D
Signing time: Tue 04 Nov 2025 13:02:10 +0000
Manifest this update: Tue 04 Nov 2025 13:02:10 +0000
Manifest next update: Wed 05 Nov 2025 13:02:10 +0000
Files and hashes: 1: kwNFG0wAspm4fsxR2YrPKVGk1Ig.roa (hash: Mk2aoCm4frK824+nr9MmscS3ypVOVo2+1jHAmjQT/qI=)
2: vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl (hash: u3YX/oG54ThmjHnpTP5veEz+AUkADRQZh1KwFrKkc4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:e9:c5:22:ed:a8:82:2f:10:f0:14:40:6c:13:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Validity
Not Before: Nov 4 13:02:10 2025 GMT
Not After : Nov 5 13:02:10 2025 GMT
Subject: CN=56afec1359ec33e4ff9bca36d037065380a5c99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:0e:f5:fd:76:db:03:f8:cc:21:10:f3:65:
00:ee:10:57:1d:ef:69:c2:36:71:c7:19:45:42:02:
84:79:dc:8f:02:7d:80:7f:16:6a:bf:ae:1f:c6:24:
b5:1b:f7:3e:df:a1:27:47:d5:c6:c3:23:e4:0e:b5:
58:68:41:f9:e4:9a:91:ee:d1:6f:b4:28:74:1f:c2:
a3:f1:7a:d7:5f:a6:58:f6:f0:c2:72:bd:f2:8b:47:
1a:a9:20:a3:28:8e:66:21:eb:a1:f6:21:4a:9a:89:
43:38:0f:a9:9a:c3:56:9a:ad:43:8d:e3:64:8e:43:
94:53:38:63:6a:2b:f5:70:cc:7b:39:6a:27:14:8d:
92:90:6b:ff:87:af:3c:57:36:83:21:6b:0f:82:e6:
fd:95:3e:17:52:09:cf:52:45:0e:54:dd:1d:13:d7:
aa:2e:20:64:ab:4c:b4:91:51:ec:0a:3a:8a:61:3f:
ea:07:7a:b8:b3:13:fe:05:6d:bc:f6:2a:9a:0c:b0:
94:08:77:5f:40:49:b3:5f:7f:9e:d2:1d:56:d1:33:
cb:83:af:45:a7:da:0d:12:1c:85:bd:40:f9:13:29:
94:17:13:69:cf:71:1c:9e:12:24:24:dd:cc:6f:6e:
19:98:57:68:d5:c0:22:61:59:84:4a:13:79:dd:d4:
18:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AF:EC:13:59:EC:33:E4:FF:9B:CA:36:D0:37:06:53:80:A5:C9:9D
X509v3 Authority Key Identifier:
keyid:BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:47:7c:95:f4:dd:ff:c5:a6:c6:fe:cf:1f:39:73:75:69:d6:
6b:96:98:fe:59:31:fe:6f:8b:d3:b5:36:f4:79:86:4f:26:1d:
a5:f0:a0:15:ae:ef:37:db:cc:ea:21:78:65:46:9e:95:84:92:
00:18:af:2c:34:69:03:cf:37:5e:b0:8c:39:d9:e6:e2:00:44:
b7:55:21:73:7e:f8:69:57:01:70:4a:36:f2:5c:43:2e:91:50:
74:ca:31:e5:33:d5:ea:e7:2a:61:d4:e6:29:55:69:b6:d0:20:
bc:7d:19:80:b5:b8:05:a5:93:1d:23:94:dc:3c:52:e3:9d:0a:
a8:b0:88:92:d9:a7:82:31:f2:bb:36:c5:52:53:ed:6f:e5:a1:
23:73:fe:a6:94:c5:7d:af:55:6f:85:94:b2:79:7e:5d:b4:c1:
a4:5f:1d:c8:93:f5:ef:67:93:e9:78:fc:da:a6:b6:a3:a7:a6:
5a:8d:a0:5e:3f:4e:da:a3:64:fe:12:cf:f1:25:ae:0c:80:21:
dd:2e:aa:13:12:0f:30:2e:b7:95:8b:14:60:04:b6:0f:31:02:
8a:6f:69:d6:13:4d:db:6a:aa:a9:f1:53:0e:2c:b4:c1:59:c6:
fd:a5:35:c9:52:aa:8e:00:64:c3:46:c0:4b:6c:b3:18:a3:0e:
97:ef:eb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:38 2025 by rpki-client