Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft
File: VVvz0dRYglh_O_uidLL4uaRbyJk.mft (raw, json)
Hash identifier: MlPkBPRDpnEqMhsnTA/awsvZoWISg01R8XJ7z40Wkb4=
Subject key identifier: 4E:BE:3B:AA:4E:07:39:5F:82:AA:A4:9D:CD:5E:6D:0B:C6:A4:CE:6F
Authority key identifier: 55:5B:F3:D1:D4:58:82:58:7F:3B:FB:A2:74:B2:F8:B9:A4:5B:C8:99
Certificate issuer: /CN=555bf3d1d45882587f3bfba274b2f8b9a45bc899
Certificate serial: 019A559B69ECE4C87CB41B4A389F47DAFB14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft
Manifest number: 020E
Signing time: Wed 05 Nov 2025 20:00:39 +0000
Manifest this update: Wed 05 Nov 2025 20:00:39 +0000
Manifest next update: Thu 06 Nov 2025 20:00:39 +0000
Files and hashes: 1: 0qvu7Ik4qOydod-67-aS8UYVRt4.roa (hash: 9dnShS1pPGDLKB9HEL/30IZt5FlagVMcCMwGrXSyfAg=)
2: VVvz0dRYglh_O_uidLL4uaRbyJk.crl (hash: 9XnQkamryw5YehY6G7tZkuXkLIvwQHuc74zljJ4sxx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:69:ec:e4:c8:7c:b4:1b:4a:38:9f:47:da:fb:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555bf3d1d45882587f3bfba274b2f8b9a45bc899
Validity
Not Before: Nov 5 20:00:39 2025 GMT
Not After : Nov 6 20:00:39 2025 GMT
Subject: CN=4ebe3baa4e07395f82aaa49dcd5e6d0bc6a4ce6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:43:fb:2d:37:ce:8a:e1:7f:2f:ee:b3:dc:07:
e8:60:15:1e:bc:76:63:cb:12:51:ab:62:93:a1:b7:
fa:67:b0:62:83:71:30:a2:99:7f:96:37:8e:70:d3:
05:58:fb:89:f6:e0:e8:26:d8:03:4e:5d:d0:8b:ca:
0f:13:78:c9:80:a1:56:1f:79:01:91:de:c8:9b:49:
c7:b9:41:d9:6e:43:8d:92:e4:97:5b:f7:7a:3c:45:
25:ed:c1:95:78:54:91:49:a9:bc:10:ed:68:ea:4a:
d7:0d:f5:5f:32:3e:2a:2d:20:bd:7b:f3:14:c0:17:
0f:4b:a9:68:bb:a1:77:fb:db:db:71:a7:1b:0b:fe:
20:b6:01:20:9a:ca:fa:74:90:02:8e:a1:ec:d7:d9:
85:08:ea:06:06:a0:fb:ff:a8:90:cd:e5:63:1e:38:
81:78:7b:01:42:65:ea:00:de:a4:32:55:ce:28:89:
ae:95:6f:07:88:d2:e3:c1:b0:db:a4:7a:42:0f:d7:
6c:12:3e:b7:2c:b6:0a:18:1e:5a:38:bc:41:cd:6e:
ab:fb:bf:6d:e2:77:c2:27:8b:57:89:41:5f:88:5f:
31:24:20:7a:65:c4:0e:08:c8:ce:43:b5:c3:98:48:
d6:a8:ea:bf:56:c8:a4:98:71:b9:08:b0:94:ce:9b:
40:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BE:3B:AA:4E:07:39:5F:82:AA:A4:9D:CD:5E:6D:0B:C6:A4:CE:6F
X509v3 Authority Key Identifier:
keyid:55:5B:F3:D1:D4:58:82:58:7F:3B:FB:A2:74:B2:F8:B9:A4:5B:C8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f6:85:54:4f:ec:84:9b:a8:8d:bf:db:35:f5:4f:29:87:ca:
2f:aa:04:2f:37:c5:82:69:c5:da:03:5f:8a:ce:25:e5:33:53:
bb:0b:4e:99:f8:7f:f0:b2:77:3d:95:59:fb:ef:f9:b5:3b:ba:
ca:02:3a:4d:19:c5:22:04:f2:6d:f9:68:e2:b3:e2:0a:a1:b6:
b3:b4:29:a2:90:96:2b:af:83:41:f3:d4:3e:6a:b2:60:bf:63:
9c:f3:c7:13:e3:fd:e2:b5:de:9e:44:d1:23:43:e6:2a:d5:2d:
ae:4e:78:dd:96:d8:ca:3d:83:f1:d0:57:24:4e:14:d4:23:7b:
39:1f:d0:77:9b:53:32:e6:7a:3c:29:0b:2b:59:ac:81:b0:ae:
1f:a3:38:c8:ea:3e:5b:88:22:f0:df:e3:5e:2e:bf:fe:eb:d1:
d9:c2:ba:70:3a:6f:a7:3e:97:c8:5f:c0:8a:a5:7b:89:cf:cd:
15:92:86:1b:af:49:1e:69:8e:85:58:0e:45:dc:09:16:1c:31:
0c:9b:13:e4:6c:bd:36:91:4d:4b:25:cf:ea:1a:f2:40:e3:50:
28:6c:b6:b3:ef:24:c4:d3:8e:27:46:94:71:0d:be:b1:dd:20:
7a:d9:f0:63:d6:55:21:fa:bf:11:e1:5f:68:a2:d5:89:6e:1b:
70:28:1b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:32:13 2025 by rpki-client