Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
File: VxoPwBLvuJZQp35vvRLcq9pCjLA.mft (raw, json)
Hash identifier: 2+vHhFwgfClkoRIVQMGeIcti/yWc5R+qlRoLZT82GGk=
Subject key identifier: 7C:2C:65:97:CF:7B:C6:5D:9A:60:B0:8F:AF:79:0E:9C:BD:84:6D:F1
Authority key identifier: 57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
Certificate issuer: /CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Certificate serial: 019A4FD00E5E5FED0028138EAA58B4C4E2DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
Manifest number: 169E
Signing time: Tue 04 Nov 2025 17:00:26 +0000
Manifest this update: Tue 04 Nov 2025 17:00:26 +0000
Manifest next update: Wed 05 Nov 2025 17:00:26 +0000
Files and hashes: 1: 5mIqDi-qSZMNQfzVabCDYIualIY.roa (hash: emChHnQclj1wViLAe/VRE5oA1OWGgrZwj1qbaE68eS4=)
2: VxoPwBLvuJZQp35vvRLcq9pCjLA.crl (hash: d2INJkoLnOiw1f/VpxNNRgEmKRTSo0ZZcJXOt2ub4Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:0e:5e:5f:ed:00:28:13:8e:aa:58:b4:c4:e2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Validity
Not Before: Nov 4 17:00:26 2025 GMT
Not After : Nov 5 17:00:26 2025 GMT
Subject: CN=7c2c6597cf7bc65d9a60b08faf790e9cbd846df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:12:9f:f3:55:a7:5d:f1:10:67:26:de:f1:91:
53:0f:12:70:4a:dc:ed:04:c4:02:c6:e4:2f:80:ae:
20:d5:27:64:a8:80:a4:5b:6b:3c:c6:c5:0b:9f:b6:
76:f2:20:4d:c8:8c:b4:52:06:25:5d:e9:be:2c:f8:
9a:45:ca:ef:7f:4a:ee:a5:84:84:6f:8d:b8:b6:4b:
13:8c:ed:75:5e:8f:0b:0a:e4:e9:3c:77:a0:77:71:
87:4c:11:93:59:43:5d:d5:ba:7e:37:90:c2:50:8a:
26:94:19:8b:44:3d:89:43:6d:2d:29:06:b7:fd:53:
e9:a6:3c:5c:8e:35:78:d3:95:6b:1f:38:5c:7d:31:
32:77:ae:a6:85:7d:f7:12:ff:fc:55:a4:f3:0f:67:
cd:59:cb:16:3d:c0:9e:03:06:35:07:cb:4f:80:a2:
10:dc:32:a5:33:19:23:22:28:89:02:50:0a:c8:c9:
93:e3:7a:77:49:f6:18:c1:8d:7b:1f:a4:ac:9a:ad:
dc:d0:37:ac:bc:ff:b0:0f:26:b8:2a:96:41:6e:f7:
67:c9:e0:e6:51:fd:d5:08:62:c4:9d:14:28:3b:4e:
63:cd:aa:a1:51:90:1f:92:d8:9e:6e:70:78:9d:7f:
a5:7d:48:80:13:13:21:83:3c:df:e0:b0:07:8e:d1:
c5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2C:65:97:CF:7B:C6:5D:9A:60:B0:8F:AF:79:0E:9C:BD:84:6D:F1
X509v3 Authority Key Identifier:
keyid:57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f5:2c:d2:5c:07:23:fb:f2:59:02:39:41:75:f9:89:35:ba:
ea:cb:80:c8:91:bb:1d:11:0b:1e:a8:d5:be:26:a4:2f:7e:bd:
32:bd:0c:45:83:70:86:cd:65:78:28:f7:0a:6b:5e:99:64:d0:
81:86:ca:85:4a:c4:4a:c6:08:b8:9c:a1:11:40:5f:40:aa:59:
06:46:0e:da:79:40:8f:a8:29:fb:b8:48:82:86:81:03:bc:2e:
88:19:66:9b:68:ba:4c:17:69:d3:6b:2e:ee:73:ac:a1:32:ed:
26:89:83:85:91:32:2f:69:c8:93:dc:f6:70:96:e5:be:05:26:
20:11:46:1a:eb:bf:65:3b:5e:cb:9a:d7:da:6a:f3:15:b8:74:
12:f1:23:0c:78:86:3d:68:6e:2a:86:5f:66:c1:eb:51:ee:5b:
0c:a6:8e:fe:ab:6b:7a:29:54:94:9b:4b:5f:81:cc:6f:25:71:
23:ed:7e:70:f3:4a:62:cd:2a:1d:1a:1c:c8:d4:cd:06:2d:fc:
40:a3:ec:66:01:02:4f:03:4d:5f:f3:10:e0:f6:35:0c:af:0f:
4c:8b:12:1a:8a:e7:5d:6e:6c:8f:79:64:9b:70:bf:e2:4a:c2:
6a:3f:23:74:a9:43:99:3e:e3:8c:63:2b:37:d4:64:da:6d:62:
5f:1a:59:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:56:02 2025 by rpki-client