Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
File: VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft (raw, json)
Hash identifier: pN1PK7wrE6sLus/RS9WpuAu34wwjWUXNjTWivCVQNv0=
Subject key identifier: D7:45:32:3C:4F:7C:4B:86:E9:F1:DF:77:D3:68:7E:9C:ED:E9:19:C2
Authority key identifier: 55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B
Certificate issuer: /CN=555988478690ad8d81149aa5c4cae75af5385f1b
Certificate serial: 019A5151570BD9CC45101B21209543DF6D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
Manifest number: 090A
Signing time: Wed 05 Nov 2025 00:01:16 +0000
Manifest this update: Wed 05 Nov 2025 00:01:16 +0000
Manifest next update: Thu 06 Nov 2025 00:01:16 +0000
Files and hashes: 1: VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl (hash: XdShrbheQDINiea6mLlfa3G3yDepRT5EpmWCwhGP3J8=)
2: v2ho3NiiZx-6p7vJ-l_IkgZf6Ho.roa (hash: i3FXkxgEq115F85sl1L3vi5QlnfTs48fnP7JBJ8VQb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:57:0b:d9:cc:45:10:1b:21:20:95:43:df:6d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555988478690ad8d81149aa5c4cae75af5385f1b
Validity
Not Before: Nov 5 00:01:16 2025 GMT
Not After : Nov 6 00:01:16 2025 GMT
Subject: CN=d745323c4f7c4b86e9f1df77d3687e9cede919c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:90:66:87:44:c5:39:6f:d0:5f:14:98:a7:e7:
37:fc:0a:cf:f3:02:00:8f:83:40:78:48:43:ba:48:
bf:9a:25:1f:83:50:6a:4a:a2:a7:62:3a:a0:c1:23:
f9:a8:99:34:75:1f:f3:06:8f:3b:72:e6:af:32:c5:
7f:17:ef:91:51:1d:0e:2b:b7:00:71:15:f5:20:e6:
f7:bf:47:ad:f0:7c:ae:3a:7e:07:57:4b:c4:10:7e:
50:c8:63:3e:ba:ce:c5:1d:70:68:95:ed:12:91:7b:
e5:40:39:34:ce:0e:e1:7e:4b:73:d2:96:77:69:2e:
e3:8c:62:47:ea:0d:98:c7:ea:57:c2:a1:6e:58:d1:
c0:64:60:40:87:f1:2d:e0:45:45:cd:de:ef:65:67:
cb:38:a7:28:ad:2a:10:75:84:0e:c5:f3:42:03:14:
0b:2a:e1:9b:c5:47:6a:ef:9e:4f:24:27:f1:4a:54:
7d:5e:b9:75:73:7f:7b:74:a4:5d:d5:5c:cf:04:00:
50:14:76:f1:a1:21:66:ae:95:0d:7f:3c:37:57:fb:
d2:e5:87:d1:71:12:2b:cb:b2:3e:02:ff:60:11:92:
6f:40:f2:86:43:7f:22:66:c2:83:57:fb:69:ca:aa:
65:29:08:9c:88:b4:69:27:4b:fc:49:15:93:89:20:
31:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:45:32:3C:4F:7C:4B:86:E9:F1:DF:77:D3:68:7E:9C:ED:E9:19:C2
X509v3 Authority Key Identifier:
keyid:55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cf:58:3c:34:87:21:dc:d8:df:a2:4a:96:7e:7d:30:e0:c2:
50:89:95:07:98:40:c9:bd:bd:6a:69:70:a2:4c:ec:86:1b:33:
cc:c9:05:24:bf:e1:6c:c9:53:29:0b:61:43:f2:f6:56:aa:9d:
f6:a7:95:2a:60:de:b6:59:bc:e3:a5:7f:7b:4a:6c:80:f7:ca:
55:5f:4d:df:0f:cb:71:7c:b4:65:e2:e0:ae:ec:9d:74:89:0c:
52:5c:bb:d1:88:73:ce:90:a9:7b:5f:6c:1a:d6:f2:86:19:49:
28:86:53:aa:c4:24:63:4d:d1:67:67:db:93:39:a1:30:46:b7:
5f:42:45:4b:7e:20:b8:e8:f2:2e:bb:67:14:79:78:cf:e5:a8:
c9:de:4a:07:13:74:8a:ed:9d:51:45:fb:8a:cd:41:46:01:cf:
b2:d6:b4:d2:48:64:b6:6c:58:b6:8c:3f:d6:8b:d4:f9:88:7c:
59:08:53:81:b2:1e:bd:57:54:8a:67:52:a4:b1:e3:10:e4:dd:
cb:49:72:d6:46:b5:11:fe:ca:39:6b:92:70:45:12:6d:b0:a2:
54:76:7c:d8:f9:56:0e:77:ca:97:4b:7e:10:6d:a7:8e:56:c2:
dd:a6:ea:15:a1:4d:2e:df:d8:5f:f2:43:54:a6:a3:63:1c:7e:
4a:d6:e5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:03:47 2025 by rpki-client