Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
File: vqse58Ta0p0SfVZdG5N5RlwoiTc.mft (raw, json)
Hash identifier: RUwU7DN/HjoNTI1i5WxLw6uoQ53UwMYVJmSCGGRAQaw=
Subject key identifier: FF:09:3B:EE:27:D6:66:58:40:DB:97:7B:24:39:E1:FA:FD:86:B4:48
Authority key identifier: BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
Certificate issuer: /CN=beab1ee7c4dad29d127d565d1b9379465c288937
Certificate serial: 019A53AD44E91317047F20A59047F847FA78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 11:00:55 +0000
Manifest this update: Wed 05 Nov 2025 11:00:55 +0000
Manifest next update: Thu 06 Nov 2025 11:00:55 +0000
Files and hashes: 1: M6HhHlPpshdNz9eD4RpZo054CNI.roa (hash: Oj0e4uW1W20zki7xK3pquycyEqfpqSDKDUOaElxS5vM=)
2: vqse58Ta0p0SfVZdG5N5RlwoiTc.crl (hash: Xz6hPwZKgRax9kR7R0ch2rrC1jh+BwwC2NhgkFwNEz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:44:e9:13:17:04:7f:20:a5:90:47:f8:47:fa:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beab1ee7c4dad29d127d565d1b9379465c288937
Validity
Not Before: Nov 5 11:00:55 2025 GMT
Not After : Nov 6 11:00:55 2025 GMT
Subject: CN=ff093bee27d6665840db977b2439e1fafd86b448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:40:cf:75:71:35:a8:c1:27:55:ae:3e:27:a0:
6d:65:aa:67:fe:75:34:3d:07:44:c1:c3:b4:f8:35:
0f:a7:15:c3:d7:d9:27:7b:e4:d0:90:05:fc:b2:68:
62:e8:56:5e:00:82:8a:df:ce:05:bb:64:43:ec:fc:
fd:4e:36:0a:db:61:a5:95:0c:47:f9:34:98:84:ea:
b4:81:42:5c:8d:c6:0b:9f:a5:e3:1a:1f:9e:c3:3c:
e0:e3:11:39:6a:9a:4e:d2:6c:78:21:5f:a2:19:7e:
72:af:ba:9c:c5:89:cf:dd:97:46:70:c5:2e:12:4a:
36:9d:58:ee:0b:3e:b8:e5:38:69:75:50:55:9a:da:
71:9d:62:b5:e9:99:7b:6a:1a:58:18:10:58:24:0b:
30:94:f9:bb:0b:88:23:65:68:d0:84:7a:30:67:15:
69:03:e0:56:33:5d:3a:41:62:00:41:3a:9f:36:24:
c5:e4:ae:f4:e6:d7:57:bf:60:4a:e5:c0:2a:1c:65:
00:94:41:9e:77:c6:0e:06:f8:6a:20:f6:23:4c:a7:
40:b6:a1:cb:c6:52:94:96:94:6d:c8:32:30:a0:0d:
7d:98:00:e2:1b:24:6e:90:c2:6e:36:c7:62:a3:40:
73:b1:95:f3:51:15:26:90:a4:8f:eb:17:58:0e:82:
77:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:09:3B:EE:27:D6:66:58:40:DB:97:7B:24:39:E1:FA:FD:86:B4:48
X509v3 Authority Key Identifier:
keyid:BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:84:7e:86:b2:ab:b8:d6:3a:04:27:3b:b4:80:98:aa:7b:07:
c3:87:64:75:95:d5:2c:97:04:ec:55:59:fb:06:a3:e7:2d:27:
5f:dc:4b:d2:23:8e:fb:22:88:99:e8:e2:be:27:6b:36:66:a3:
36:60:3a:78:44:d6:9b:2a:ab:db:2e:1d:2a:9d:85:7e:55:c4:
a1:ae:18:20:7a:37:78:ac:3e:58:05:45:48:1c:97:0b:58:99:
7b:dd:91:c5:e7:16:57:59:78:71:25:5f:79:a8:0c:4d:7b:7e:
ee:3c:04:8e:40:a4:d9:f5:ae:a9:a4:47:95:5c:31:7d:70:71:
e1:b4:09:50:ce:6d:21:4d:06:08:ec:c3:e1:6b:b4:37:f1:55:
bd:81:2f:79:7a:5e:78:33:9d:f3:ed:c0:15:90:76:24:50:8d:
52:c7:d3:95:ae:6b:1c:82:b1:df:4b:64:08:25:a2:d6:80:c4:
63:0f:8c:0f:9a:57:e7:4c:1a:1a:59:94:ff:94:3f:08:f9:af:
d3:65:b3:a0:30:2f:88:d3:f8:00:26:c3:02:81:98:6a:08:79:
d6:0b:54:2d:5d:19:32:26:d2:07:f7:11:ec:99:6d:9a:0c:e8:
34:55:34:3b:92:b4:da:f1:35:0d:23:8c:ec:1c:d8:49:f1:43:
af:04:87:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:53:00 2025 by rpki-client