Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
File: VvAaHpnqXU85lNMzCdCUMS3IVCc.mft (raw, json)
Hash identifier: OSNmM6xhxS62z4Aa8FrrxX4PqHnFDniAOzM3w1ycO20=
Subject key identifier: 38:E9:80:69:D9:0F:1A:0A:52:3D:BE:73:C3:A3:45:9B:60:E0:F3:A7
Authority key identifier: 56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
Certificate issuer: /CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Certificate serial: 019A4E18CFFB737120B90634CDAD7C7B5420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
Manifest number: 039F
Signing time: Tue 04 Nov 2025 09:00:40 +0000
Manifest this update: Tue 04 Nov 2025 09:00:40 +0000
Manifest next update: Wed 05 Nov 2025 09:00:40 +0000
Files and hashes: 1: VvAaHpnqXU85lNMzCdCUMS3IVCc.crl (hash: OqPmaroSANXVbVZhik0qiL9dDELz4D75sCs1EyPO0cc=)
2: v_KzQYlvsCBO_i8yYO8HLxZWeDc.roa (hash: +uoQdMzOaHRMGuVFuouzf8EBLpuGaYxtN4+0W2dukzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:cf:fb:73:71:20:b9:06:34:cd:ad:7c:7b:54:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Validity
Not Before: Nov 4 09:00:40 2025 GMT
Not After : Nov 5 09:00:40 2025 GMT
Subject: CN=38e98069d90f1a0a523dbe73c3a3459b60e0f3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:ae:80:6d:0b:84:07:2f:15:58:67:eb:40:
38:66:6d:ee:2b:a0:64:7b:af:20:40:4c:35:e4:01:
14:4a:5f:64:a3:0f:d5:d1:35:2c:b1:17:a3:40:48:
1c:0d:9d:61:5b:bc:17:2b:b9:8a:70:be:1a:74:07:
df:f7:ae:ab:7b:97:62:36:2b:ff:51:4c:7a:fb:03:
75:36:c7:de:bd:16:72:dc:1c:0e:dd:a7:7f:7b:2f:
92:46:45:76:a5:ed:f5:e1:48:f8:1f:07:a5:65:43:
43:3d:cf:60:b2:ad:63:9d:80:85:e6:3c:ea:9d:9b:
ad:c4:42:31:0f:4c:6f:51:ed:74:67:a0:75:c0:c6:
a5:c5:f2:32:72:9f:95:8f:4e:07:4c:f5:3d:9f:36:
b7:12:b3:38:d1:0f:e9:cf:ff:df:31:9d:8c:74:ea:
37:86:55:42:94:88:29:a1:41:e9:1f:59:f6:9f:f9:
04:e2:95:1a:5f:a4:75:4f:8e:97:fc:8e:ba:23:ef:
c0:db:5a:c8:fb:a1:75:62:14:cf:68:c3:53:ee:d3:
26:74:ed:9f:58:16:00:50:14:4a:e9:28:18:a0:83:
d7:d7:5f:04:33:81:13:d9:4e:3b:9b:38:af:3b:7d:
3b:12:b3:cb:08:6b:17:20:06:78:0b:20:bc:bd:d8:
d0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E9:80:69:D9:0F:1A:0A:52:3D:BE:73:C3:A3:45:9B:60:E0:F3:A7
X509v3 Authority Key Identifier:
keyid:56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:92:c5:fd:f1:41:43:f5:39:14:7a:97:31:80:71:6e:d9:b0:
6b:0d:3f:ff:1b:15:09:7b:ea:a5:87:a0:94:a2:d0:5c:4f:8f:
1b:74:47:af:cf:66:e4:71:cc:d4:89:d1:ad:09:09:53:c6:bc:
5b:3f:dd:7c:fe:c7:18:e0:f0:9b:55:26:03:fd:5d:bc:28:4e:
ea:b5:77:fd:92:7b:bf:e0:e5:54:d1:b3:0e:f3:24:60:98:97:
50:d2:3e:55:17:ec:35:76:8a:70:cc:9d:be:fa:68:fb:0a:08:
19:78:36:71:d4:7c:2f:62:e0:98:2d:92:02:de:cb:fd:10:92:
e9:b9:9c:78:41:eb:9c:26:1b:d6:10:86:cf:4b:04:22:2d:98:
a0:d1:6f:d2:51:41:d8:54:c9:cc:64:40:8b:e8:d3:b8:c4:0e:
dc:c9:c4:a1:bb:ba:57:bb:b5:59:79:d7:a3:ce:55:93:49:d3:
d6:bc:d4:aa:87:25:e9:e4:ff:4f:6a:c5:f0:00:30:c3:a3:e4:
ff:7c:79:8d:0c:de:6e:b8:48:d8:61:76:3f:1e:7d:ba:7d:04:
bd:67:b2:33:55:1c:9b:b7:dc:18:97:65:8c:0a:2d:7a:1d:97:
a7:a6:3b:a0:ac:ac:35:26:66:3c:a3:ab:0c:2b:f3:cb:f2:0d:
bd:36:71:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:54:55 2025 by rpki-client