Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
File: VAPl-EBdYIW430v84d2bs-eMIZk.mft (raw, json)
Hash identifier: TIiaPXXEWSQ/AUvtIfSSi/8AFfwH/MI3o45Nqg4yGzQ=
Subject key identifier: 5B:AE:6C:F1:D7:DB:1B:48:A3:79:08:B0:07:63:18:BE:24:AB:11:6A
Authority key identifier: 54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
Certificate issuer: /CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Certificate serial: 019A4E86ADAC0A1BE1255B86F29D38843465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 11:00:40 +0000
Manifest this update: Tue 04 Nov 2025 11:00:40 +0000
Manifest next update: Wed 05 Nov 2025 11:00:40 +0000
Files and hashes: 1: 4DbDI_EnOkcmLXrBG5jeHwTwt2c.roa (hash: mJ/2UVoGEpFQIaST8cEuCkebUiYaaorOEoL9AoSGYIQ=)
2: Ss9eeiCVuWCNJmImGff-1n45lWA.roa (hash: zlpeAvdqJBpxOyHRcrVmcRB4NLd3aJqqYyX9zP43hIU=)
3: VAPl-EBdYIW430v84d2bs-eMIZk.crl (hash: gb1jwnhLew6/fk/3Fa5qI0+9iR1Ahmsh6INdqzX1CdQ=)
4: ruhiE5esObX6k_stPvNx29ymlOA.roa (hash: duE/abl8UVh1pAMXzNt/4RzR850s83vyhbN8tnQtp3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:ad:ac:0a:1b:e1:25:5b:86:f2:9d:38:84:34:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Validity
Not Before: Nov 4 11:00:40 2025 GMT
Not After : Nov 5 11:00:40 2025 GMT
Subject: CN=5bae6cf1d7db1b48a37908b0076318be24ab116a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:29:d6:e1:eb:0a:7c:d4:23:9e:a1:1c:c9:0d:
72:0d:03:43:f5:00:93:8c:7a:b6:10:31:3f:5b:34:
af:cb:9c:45:e0:fb:0f:46:d8:47:f4:fd:a7:15:f8:
9d:98:08:94:b3:f0:53:a0:cb:04:f2:86:0d:17:e0:
ce:e0:e0:bf:ef:3d:ed:09:11:88:be:bf:5d:4b:4f:
bb:e4:c1:92:2c:96:2e:bd:f4:8b:bf:a3:09:82:b2:
ad:74:06:4f:83:fc:bc:21:93:56:36:1f:57:cb:95:
a7:75:4b:44:07:57:75:5a:52:0a:3d:08:cc:7f:f3:
a9:10:11:a3:8e:04:9f:90:02:15:87:5a:cf:37:37:
d9:39:20:a2:8a:76:fe:06:01:c7:5d:5b:8d:0e:e5:
bc:71:be:cb:39:16:6c:af:47:94:0c:a4:bc:37:a1:
be:26:a8:aa:d7:63:e9:ba:df:af:5b:4a:93:69:8a:
99:a0:48:90:c3:ee:02:af:42:5d:15:1f:c4:a7:f5:
3c:0d:df:0c:7b:ec:45:ea:18:7c:43:d9:f4:08:d2:
30:f4:93:21:26:0f:a5:12:d9:58:dc:f4:d8:e0:35:
71:33:a4:1d:16:72:cc:b6:a1:0f:60:53:49:1a:ce:
d8:72:29:7b:e1:f7:0d:7a:94:e4:18:63:21:82:75:
27:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AE:6C:F1:D7:DB:1B:48:A3:79:08:B0:07:63:18:BE:24:AB:11:6A
X509v3 Authority Key Identifier:
keyid:54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0f:42:be:d8:73:52:2a:7b:7e:d5:2c:ab:a4:8e:4b:41:09:
b4:92:49:7c:8a:92:23:57:5e:f6:8a:63:44:50:bb:f4:71:83:
eb:6c:2a:2f:c3:e6:bf:b9:6b:5f:21:bd:e2:69:cf:1a:5c:89:
36:f3:27:c8:1f:8a:cb:ca:33:b0:6e:1f:e2:5c:fb:d3:30:b4:
a2:22:e0:93:25:21:c1:65:f3:b9:a9:43:11:01:6d:85:2e:be:
da:f8:3c:fd:cf:d3:86:24:df:6f:cf:53:cd:4f:ca:6b:b6:11:
45:f2:6a:6a:39:f8:39:99:ae:19:49:ee:97:f3:0e:69:c9:7f:
e4:b3:65:82:1c:c1:27:95:f5:90:e2:df:0a:d0:9f:ec:5a:1d:
a8:90:3f:1e:b4:bb:94:1c:65:04:03:64:b1:d5:79:5a:c6:8c:
fa:77:a1:bb:93:5a:cb:c9:64:e4:ca:35:82:9e:83:92:54:5a:
10:ee:5a:7d:ab:91:24:cb:36:27:b5:a5:00:20:fc:ec:ac:4e:
62:07:c7:6b:74:99:74:d9:c1:89:9f:bb:c7:5b:33:b3:fd:38:
00:d0:ae:c1:29:f6:9a:4f:64:e7:88:73:4e:c1:53:22:64:54:
df:ed:34:5c:1e:0e:59:07:2f:45:12:a4:6a:b3:89:26:4c:15:
ae:1b:47:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:39 2025 by rpki-client