Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
File: vxtInm2bjH2Dyh5yelmE2-V3r7w.mft (raw, json)
Hash identifier: gFQRlQN7PjcDht/m7K0Y4eUNnmSJd34AaAlqbDyKIIU=
Subject key identifier: 53:55:C1:38:50:7C:49:81:1E:82:F6:BB:0A:ED:53:87:9E:A6:21:A3
Authority key identifier: BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
Certificate issuer: /CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Certificate serial: 019A5D1E1C60C66733490CFEE0522CCE9EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
Manifest number: 1E
Signing time: Fri 07 Nov 2025 07:00:45 +0000
Manifest this update: Fri 07 Nov 2025 07:00:45 +0000
Manifest next update: Sat 08 Nov 2025 07:00:45 +0000
Files and hashes: 1: 1-rB8XTQYqpP7MjgG7HR4P6rMeyU.roa (hash: o9F/zfrqIdfUaOEIn5d4Y/Rf/lN8VClY0SnZ+RAIGLc=)
2: vxtInm2bjH2Dyh5yelmE2-V3r7w.crl (hash: Ph7q8XbK+HtH4W7FxVajw1/qk9KKaSUgY/65pU5PWJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5d:1e:1c:60:c6:67:33:49:0c:fe:e0:52:2c:ce:9e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Validity
Not Before: Nov 7 07:00:45 2025 GMT
Not After : Nov 8 07:00:45 2025 GMT
Subject: CN=5355c138507c49811e82f6bb0aed53879ea621a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2b:f3:c2:0f:fb:01:87:21:f7:38:e1:3b:a2:
41:dc:43:cb:96:0a:d0:0c:0f:8e:63:39:8b:99:56:
2e:30:8c:5c:20:9b:02:ee:d7:bb:0b:06:bd:6f:61:
fc:71:22:a3:d6:08:0d:e0:76:83:6e:d2:75:e3:7e:
86:3b:78:4f:18:e1:24:d5:b7:9b:52:e8:0a:d2:9b:
e9:4f:8c:80:55:90:93:1b:00:d7:db:b9:d0:3f:95:
2c:09:2a:58:74:5f:f5:9e:ef:28:fc:c0:40:fc:51:
92:95:4c:9b:58:52:d2:17:3a:dc:10:77:37:7a:49:
38:93:85:ae:40:93:54:a3:54:97:de:16:d2:07:36:
fb:d7:4d:0b:81:d4:f6:a7:8c:bb:73:82:57:81:aa:
b6:ca:02:7c:e5:5f:6e:1a:df:b4:6a:ca:07:af:cd:
27:b7:85:68:eb:bf:63:10:58:10:65:ec:6d:f9:c1:
8c:6f:c1:79:16:3d:c9:33:6c:8d:de:c6:ed:3f:de:
1a:dc:88:d9:63:e7:55:db:88:29:87:d1:d0:50:2c:
e2:d1:81:99:d9:30:99:46:0c:d0:e3:8d:f5:79:21:
da:87:db:61:22:d4:e4:ba:b4:e1:b5:c9:11:af:f5:
e9:8e:92:b2:7a:4e:9e:41:25:f6:17:e9:96:61:26:
e2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:55:C1:38:50:7C:49:81:1E:82:F6:BB:0A:ED:53:87:9E:A6:21:A3
X509v3 Authority Key Identifier:
keyid:BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:04:8a:92:e4:67:2b:2c:e5:a6:a1:63:6e:9c:4e:b5:de:77:
49:3b:eb:8d:5e:a8:66:20:af:22:54:20:c0:f4:8b:67:34:89:
9b:10:56:10:be:75:3e:f7:cf:41:35:32:52:e1:f1:1b:2c:d7:
57:21:5a:7d:ac:c1:4e:80:c2:11:23:de:1c:9c:d1:8c:7b:3c:
5a:4a:45:0a:8c:72:8c:75:b5:cf:36:8c:c2:64:f0:60:4d:49:
b4:37:99:2d:91:73:07:24:61:6a:3b:6e:50:0d:da:0c:7e:9d:
93:fa:e5:97:c6:df:1e:d9:14:00:cd:25:a5:50:6f:cc:f6:c8:
a1:d6:f7:fd:8c:8c:28:74:41:78:74:3a:ec:90:03:e0:16:d6:
db:ee:c8:da:50:fd:96:5b:d0:d2:46:dc:4d:1e:65:ea:5a:3c:
a6:d3:4c:df:f4:b4:43:57:31:9c:04:a7:9f:b2:a8:db:35:15:
64:17:15:fd:bc:cb:c6:8f:b5:bd:a6:43:4d:30:e0:84:36:7d:
a6:f4:fd:5c:21:26:bd:16:eb:fc:e0:bc:49:78:6a:72:ca:4a:
89:cd:4e:72:0a:3b:01:9d:25:f4:32:72:2c:90:7c:95:89:78:
bd:4c:6c:7c:cf:e5:ee:76:75:f9:fd:ca:09:b6:fe:a2:28:f9:
d9:7a:9a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 12:54:22 2025 by rpki-client