Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
File: VUNDfunFqMhPjTSD3F4PpLqJzD0.mft (raw, json)
Hash identifier: 6BSoi0rcQ6DiNq2vVDGdNUso4uQi6xx2cI3JuxrMxaw=
Subject key identifier: 47:4C:9A:12:37:17:09:B8:5A:FC:1D:56:DF:D4:C3:FF:08:12:35:CA
Authority key identifier: 55:43:43:7E:E9:C5:A8:C8:4F:8D:34:83:DC:5E:0F:A4:BA:89:CC:3D
Certificate issuer: /CN=5543437ee9c5a8c84f8d3483dc5e0fa4ba89cc3d
Certificate serial: 019A4FD01059905C99607CB19656CE088528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 17:00:26 +0000
Manifest this update: Tue 04 Nov 2025 17:00:26 +0000
Manifest next update: Wed 05 Nov 2025 17:00:26 +0000
Files and hashes: 1: VUNDfunFqMhPjTSD3F4PpLqJzD0.crl (hash: /wBCtv+GhWWKDzwGG4aLcu22AbYrldutdCBJS3r0T9U=)
2: XNlRYOrdP4YhxB9m-RjQGIDXydw.roa (hash: yt93xApYhguaF4Zby7MP0nE6qjw1BNUYTRRGsguxdkI=)
3: dpCn75hkt5WCsXcemx99arZsVj4.roa (hash: UNV6qFqvh7+zsZgIxSlwdVSHxi77oGWMR4+NitLYm6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:10:59:90:5c:99:60:7c:b1:96:56:ce:08:85:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5543437ee9c5a8c84f8d3483dc5e0fa4ba89cc3d
Validity
Not Before: Nov 4 17:00:26 2025 GMT
Not After : Nov 5 17:00:26 2025 GMT
Subject: CN=474c9a12371709b85afc1d56dfd4c3ff081235ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f2:9e:cf:16:18:b0:3b:1f:bf:28:e5:65:cb:
58:0a:34:3e:30:a5:1c:b2:7d:62:d9:ca:3d:62:59:
4d:cd:9d:74:fe:dc:55:67:99:fb:3b:63:35:1e:01:
3d:38:d3:90:d9:06:fc:13:11:4d:be:13:47:26:81:
57:ef:12:9a:ee:63:e8:30:b3:71:a6:35:0e:b9:84:
75:2b:4c:9d:24:79:b6:98:f3:1a:58:e8:cc:bb:db:
22:72:f7:e5:b4:b3:59:d7:cf:e7:66:70:39:54:26:
f3:45:3b:89:26:a1:bf:57:01:a0:be:a7:a0:83:3d:
6a:a7:b7:7d:88:96:9e:72:b1:82:61:42:ec:b2:44:
d0:f1:5c:78:5a:bd:d3:55:3e:94:63:14:ec:0b:97:
3a:3f:17:5f:f9:7b:1a:52:69:7e:7f:37:04:70:4a:
a3:ca:e7:e4:18:0a:ad:69:2e:90:7d:33:18:0b:dc:
8a:7a:13:bb:68:d3:36:1c:4d:45:35:06:dc:c1:a5:
4c:45:7e:91:80:74:b7:60:28:c7:6a:ad:41:6b:de:
ee:2d:15:1b:2b:37:b7:7a:a3:df:3e:04:90:62:6d:
b4:00:93:a7:a9:3f:13:f6:31:de:12:f3:4e:41:b3:
bc:79:4d:d3:08:6e:ef:ca:72:43:8a:99:34:90:bc:
b5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4C:9A:12:37:17:09:B8:5A:FC:1D:56:DF:D4:C3:FF:08:12:35:CA
X509v3 Authority Key Identifier:
keyid:55:43:43:7E:E9:C5:A8:C8:4F:8D:34:83:DC:5E:0F:A4:BA:89:CC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:14:a2:26:46:e7:31:b5:2b:cb:0a:88:3a:b4:2f:4c:6e:70:
9e:d0:4f:29:c6:24:ee:31:0c:f1:6e:13:01:bf:b6:83:75:89:
ac:94:27:86:0c:4e:68:d6:47:59:6f:e2:e3:a9:7c:3d:bf:32:
6c:aa:13:3b:c0:82:c8:74:2d:18:2c:d1:f6:52:63:a5:d9:39:
3d:40:b7:3c:15:60:cd:e9:57:2a:f5:7f:af:5d:1a:b9:1a:74:
d4:db:a4:93:64:4f:f8:02:7a:cb:16:61:10:26:a7:c9:2c:75:
61:18:af:09:35:9a:c4:c4:43:11:7b:8a:21:27:f1:d4:1e:67:
b2:30:fc:24:03:ca:e8:06:a4:13:3d:5d:bc:e8:a3:bf:3e:22:
d1:a7:ff:69:e6:d0:dc:4d:eb:dd:cc:90:b4:bf:4d:9e:dd:60:
a1:6b:0a:03:49:c9:4e:ec:df:1a:0f:97:4b:8e:71:13:df:7d:
a1:a3:cd:93:91:72:13:2e:56:6a:06:b7:ba:6d:33:8c:74:ca:
80:ab:d7:df:0f:4a:5e:93:7f:7f:b1:33:40:10:5d:55:72:3a:
1b:30:5d:1e:b2:b9:12:3a:65:5e:ec:f5:22:25:1c:13:ad:ef:
81:dd:09:d0:d9:ee:01:72:b7:7a:11:0d:cb:20:c5:53:43:1c:
56:4d:13:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:32:38 2025 by rpki-client