Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
File: VWEKWd3_vSTuSymemySxvwNvjkM.mft (raw, json)
Hash identifier: OZtf2Z8P1D5KKYDBOKbiagWZdbsJvr0lqhlC7I78o1I=
Subject key identifier: 76:14:C1:A5:6B:19:7F:93:06:4D:A5:1A:70:C5:82:0B:CB:91:85:36
Authority key identifier: 55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43
Certificate issuer: /CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
Certificate serial: 019A5187D5E220AF4FD7315EA5AC20516789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
Manifest number: 09EF
Signing time: Wed 05 Nov 2025 01:00:47 +0000
Manifest this update: Wed 05 Nov 2025 01:00:47 +0000
Manifest next update: Thu 06 Nov 2025 01:00:47 +0000
Files and hashes: 1: Lh0KUJ3V35wYz2i99gYTrV6dktc.roa (hash: Svr4T1ZPQxakxnAH0s4zkcIB6ko9R8TkXB+xdSHMUeE=)
2: VWEKWd3_vSTuSymemySxvwNvjkM.crl (hash: k+VPE8968ltCTYmyAOoKNrG2eos+ngIKrPcWyTN4CJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:d5:e2:20:af:4f:d7:31:5e:a5:ac:20:51:67:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
Validity
Not Before: Nov 5 01:00:47 2025 GMT
Not After : Nov 6 01:00:47 2025 GMT
Subject: CN=7614c1a56b197f93064da51a70c5820bcb918536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c7:fe:17:e4:01:85:59:e6:4c:1d:63:fb:db:
a3:57:61:08:de:4f:9d:67:f9:68:02:4e:b4:d4:45:
2d:19:a0:a3:df:ee:73:cf:fc:31:61:4a:2c:43:30:
7c:e7:38:5d:c8:8e:27:83:04:8e:97:e3:ae:c7:a5:
c6:c6:ed:78:bf:a4:1a:09:32:ee:d0:0f:91:f0:98:
c9:dd:da:7a:3f:13:07:a8:3e:20:e5:7a:96:62:5b:
1f:af:98:78:af:7b:a6:ae:73:7e:0f:ba:32:9a:c0:
5c:a8:00:0e:3e:8d:4d:71:44:d2:a2:33:c4:58:b2:
ae:3d:5c:59:16:af:cc:f6:a3:84:19:5f:8c:06:0c:
fb:1b:81:6d:35:90:af:e1:8b:23:d9:24:65:a3:60:
43:4c:99:a7:30:28:79:56:14:f9:aa:d5:c0:e1:6b:
0c:c1:67:85:7a:25:cc:c1:22:2c:7e:dc:3c:3c:ab:
d3:1c:db:b6:43:e3:a4:31:47:89:b2:b6:58:28:59:
08:19:b7:48:ac:6f:b1:d1:06:e3:06:a0:df:25:48:
0a:1b:0e:bb:3d:ba:52:50:7b:f1:3e:3e:ab:d5:64:
00:a7:04:4e:16:41:e2:8e:42:48:34:f2:3d:c5:6b:
3e:de:a1:e0:00:98:f3:97:bd:3d:9f:a7:24:e8:b6:
35:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:14:C1:A5:6B:19:7F:93:06:4D:A5:1A:70:C5:82:0B:CB:91:85:36
X509v3 Authority Key Identifier:
keyid:55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a8:1b:ee:2a:f1:62:bd:40:c0:fb:94:e8:1a:c0:4d:0f:93:
d6:b2:1c:e5:aa:9b:5a:05:42:e5:6c:ae:cf:81:46:34:87:b3:
4a:0c:54:47:4a:a8:5c:85:23:1b:ab:ea:b7:b3:90:e8:c7:8d:
fa:67:76:d9:b4:89:ab:a5:25:d4:47:84:ee:29:01:56:55:ef:
36:78:ed:1d:6f:59:c1:f4:80:8e:5f:1a:f5:7c:90:7d:3f:51:
ee:9f:f2:04:87:e8:dd:3e:bb:db:f0:12:ab:cc:b8:71:5f:c2:
42:14:35:f6:84:fc:4a:b8:8b:25:8e:73:a9:37:1c:bc:63:e8:
75:fc:5e:16:68:4a:c3:d2:0a:64:d8:1a:2e:43:1c:ae:bf:18:
bb:7c:31:76:b3:43:bf:de:11:3c:6a:af:86:f9:77:8c:ef:0c:
fa:4a:30:65:3b:d5:75:56:4d:9d:79:a2:b1:b3:28:d8:44:24:
41:39:2c:ac:3f:47:55:12:f5:5d:02:92:79:34:5f:ed:f8:6b:
cd:96:18:5d:62:ff:8f:df:bc:a9:47:71:89:c3:03:3f:fc:e4:
4b:a9:68:1d:dc:7f:a5:9f:c6:32:33:9c:2e:98:46:89:76:7a:
20:71:2a:93:2d:c8:02:be:5d:da:ca:75:17:1d:f5:02:56:71:
66:61:e5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:45:50 2025 by rpki-client