Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
File: VCcv8xcpc8hppSISv3zoAeH454M.mft (raw, json)
Hash identifier: iHY5s9/2HoHMkRVXTXJVfNgVaWh0T/n9/EizjX95ugw=
Subject key identifier: 9D:72:DB:97:D1:36:F0:22:85:8E:71:3C:A4:36:E0:E5:4C:0A:84:07
Authority key identifier: 54:27:2F:F3:17:29:73:C8:69:A5:22:12:BF:7C:E8:01:E1:F8:E7:83
Certificate issuer: /CN=54272ff3172973c869a52212bf7ce801e1f8e783
Certificate serial: 019A541A840C5C7126C9EEEFA35D20992FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 13:00:15 +0000
Manifest this update: Wed 05 Nov 2025 13:00:15 +0000
Manifest next update: Thu 06 Nov 2025 13:00:15 +0000
Files and hashes: 1: VCcv8xcpc8hppSISv3zoAeH454M.crl (hash: QPI0QmWBnJuQQ0p5gYhPLdVXrkFa3tb5/C8x/nMohtc=)
2: oohgjiQIj_tIu1PGNdnlfQkGF6M.roa (hash: 6v4z144BDrgglq1LMAS7dreBWe+2oC3G15H9vrrNnFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:84:0c:5c:71:26:c9:ee:ef:a3:5d:20:99:2f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54272ff3172973c869a52212bf7ce801e1f8e783
Validity
Not Before: Nov 5 13:00:15 2025 GMT
Not After : Nov 6 13:00:15 2025 GMT
Subject: CN=9d72db97d136f022858e713ca436e0e54c0a8407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4f:5a:f3:08:44:f2:3e:29:07:3a:a5:3b:73:
43:ba:93:89:24:c0:db:7a:d3:71:4d:21:c5:e8:f9:
50:2d:28:f0:44:f4:db:e3:8d:0c:eb:f9:0f:0c:29:
3e:12:9b:cc:63:2d:a7:78:bc:22:4e:b7:95:9a:03:
92:ff:11:17:d6:3e:62:e8:b5:dd:ce:c6:71:68:d5:
be:d3:13:76:2d:39:de:1e:3e:d6:03:90:06:b7:13:
85:8f:68:af:8c:40:3f:b4:58:28:1d:e6:87:f6:1f:
ee:e7:19:85:f5:da:f3:6b:17:4b:24:18:b1:c3:94:
90:91:f5:d5:ed:b7:92:62:bb:65:c7:68:39:cb:64:
3c:d7:8e:be:91:5b:50:f0:58:23:fd:9c:58:8d:22:
af:1b:6a:27:5c:73:7f:58:b9:62:43:35:aa:60:ed:
ef:a3:ca:3b:03:3b:db:38:ac:30:f9:39:71:11:9e:
64:e7:40:58:6a:67:d7:ed:7a:d1:33:83:8f:4c:81:
4b:0f:ed:98:a2:2d:62:f8:05:ee:06:75:06:04:97:
29:39:b9:11:5a:e6:f0:8d:02:20:38:f0:cd:37:76:
0d:f6:e0:ea:92:e9:de:82:bf:32:59:12:71:74:b8:
14:f1:3d:83:d3:0e:eb:47:de:a4:50:f1:15:b0:ad:
46:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:72:DB:97:D1:36:F0:22:85:8E:71:3C:A4:36:E0:E5:4C:0A:84:07
X509v3 Authority Key Identifier:
keyid:54:27:2F:F3:17:29:73:C8:69:A5:22:12:BF:7C:E8:01:E1:F8:E7:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6c:62:3b:a9:81:99:73:9e:ac:fe:ad:ac:55:7e:b5:b7:e3:
91:85:da:39:02:32:9b:6d:7f:0a:9b:d2:2c:2b:e7:41:70:4f:
a0:7e:98:08:89:c6:69:43:ee:5f:23:1d:90:0d:b2:80:ec:59:
40:36:28:73:26:68:59:90:75:72:8a:5d:3f:65:49:56:8e:fe:
41:3c:3b:34:13:ad:8c:7c:2f:34:44:5b:b1:cf:c5:1d:b6:8f:
99:ec:8f:09:eb:60:6a:fa:ad:4c:4c:33:a3:08:a1:fb:80:aa:
94:7d:fb:1a:a5:16:39:f8:0c:77:1d:a5:ab:92:f6:d0:8b:be:
0b:1b:1a:76:ad:7d:ab:0d:84:97:97:5e:a2:3f:f4:46:87:fa:
af:43:65:30:04:df:96:0f:8c:14:7d:f9:87:61:31:5f:a2:15:
e6:9b:5a:34:98:42:30:25:2e:ef:15:4f:9f:c1:1f:db:70:7f:
06:36:5a:68:6b:b6:89:c3:e6:5a:d6:59:28:ec:03:9a:80:5b:
0d:56:21:90:b6:17:e2:94:41:b2:00:29:07:94:2d:55:94:eb:
9a:01:1b:c6:a9:77:b0:2b:2e:03:e0:7b:fa:c1:09:73:08:b7:
23:9b:2e:8c:cf:3c:98:75:1b:30:53:f5:0b:39:ca:8a:91:4a:
f4:1a:b0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:02:48 2025 by rpki-client