Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
File: VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft (raw, json)
Hash identifier: +1JRTbZRK5uVxuPTB62lexoos4FsEwWm+8qbeLcutuk=
Subject key identifier: 96:C9:4C:6E:57:45:AD:72:C5:1C:21:0C:BF:02:0B:0A:52:FB:F0:4D
Authority key identifier: 54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
Certificate issuer: /CN=543c54067385a765b1d5617c43331956fb208e89
Certificate serial: 019A5307E26C9FACA1DBD7A6BA535AA70EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 08:00:16 +0000
Manifest this update: Wed 05 Nov 2025 08:00:16 +0000
Manifest next update: Thu 06 Nov 2025 08:00:16 +0000
Files and hashes: 1: VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl (hash: ZKooN6TlY9T/THMuC+RkURRR/vcislg4oi74TbWD82M=)
2: z735G_UD7XSfWpNDTnzeaf_tL4w.roa (hash: DkYxS6x4qA1lOII9eThmWP47P9TbdKeyTU6VofiN3dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:e2:6c:9f:ac:a1:db:d7:a6:ba:53:5a:a7:0e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c54067385a765b1d5617c43331956fb208e89
Validity
Not Before: Nov 5 08:00:16 2025 GMT
Not After : Nov 6 08:00:16 2025 GMT
Subject: CN=96c94c6e5745ad72c51c210cbf020b0a52fbf04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:e8:6e:16:02:84:5d:16:fe:59:6a:86:78:
51:1a:88:ce:88:57:33:9e:28:4e:d0:ed:86:bf:20:
d9:32:50:4d:1e:3f:6e:f0:13:5e:8d:ed:4f:a9:4c:
74:23:39:08:26:59:77:c5:7b:0b:ac:9c:b5:06:af:
48:c2:ec:b9:8e:8c:02:14:ef:4a:69:12:01:be:55:
0c:3d:59:c6:47:73:f9:51:9c:96:03:b1:f6:55:a5:
84:50:63:ac:8b:6a:a1:6a:a1:f9:59:42:23:65:46:
27:a4:38:65:0d:32:46:6f:39:b6:7b:25:f1:fb:39:
9c:3e:df:6b:44:de:36:22:97:21:c1:d3:4e:5c:f5:
ea:a4:82:a2:12:e3:31:31:6b:ee:23:c5:f3:ca:71:
64:f4:33:df:ad:07:b2:90:58:9c:ca:80:7d:e9:25:
6c:3a:9f:27:a5:6f:5c:fc:c7:16:10:fa:5c:80:c0:
72:8b:10:5b:fb:6b:ff:27:62:a7:db:b4:d9:13:98:
58:9f:74:97:b8:8a:ff:47:2a:64:59:6a:a0:25:9b:
76:99:9b:f0:ff:df:85:f2:d7:7b:93:5b:90:39:ec:
0d:33:dc:40:ea:12:ed:41:b7:88:09:6b:8c:3e:76:
da:4c:a9:c8:be:7a:aa:b5:a0:2b:63:81:2e:91:ae:
d6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C9:4C:6E:57:45:AD:72:C5:1C:21:0C:BF:02:0B:0A:52:FB:F0:4D
X509v3 Authority Key Identifier:
keyid:54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:62:65:c4:e2:ae:f0:c2:f6:5b:a9:69:82:56:34:97:22:63:
65:fe:b1:40:87:21:8e:30:09:5b:9a:9f:d2:d4:d2:65:fe:c0:
43:94:f3:c7:21:fd:62:b1:d7:c8:cc:bd:df:76:cb:ca:57:c4:
8e:28:50:9a:94:22:58:e5:d4:b4:13:db:2d:b5:81:63:f1:86:
ca:48:58:47:b3:87:2c:33:c9:f7:34:21:c3:95:62:29:3c:50:
f2:17:2f:e4:fc:05:23:33:94:57:c5:94:2e:7c:64:52:90:96:
d4:50:44:06:3d:54:19:26:5f:09:f2:65:7c:16:05:b5:b0:93:
ce:63:b5:71:94:4b:ce:d7:39:69:64:6e:e8:67:00:1f:f4:77:
be:49:6d:0a:a2:c0:a5:03:52:53:1b:3b:d9:ef:ec:f4:0d:4f:
9f:fe:97:9d:19:e2:60:b4:aa:67:4d:af:59:68:58:55:2a:ba:
28:89:38:9d:b0:7e:a3:95:0e:6a:03:8a:1c:e1:b9:e0:73:00:
0d:38:0a:a6:92:ae:54:74:bc:77:d4:45:1e:1d:4b:49:69:25:
4c:1f:70:df:1e:4b:c7:3b:72:e4:5b:45:9d:10:f3:7e:1c:f3:
28:4b:ff:d1:71:94:31:74:68:da:08:b4:2d:71:cc:e7:48:f1:
bd:bd:f6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:35:56 2025 by rpki-client