Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
File: vhji2fUJydO0VREqoojTNhhYAaA.mft (raw, json)
Hash identifier: 0hpELOqUU2r89KUyP8oKJOzzo2KNL+Y1veNP8F+FEuo=
Subject key identifier: 7C:72:3E:95:0E:45:FE:A9:AD:32:A0:E3:2C:FF:2C:D6:86:EC:A3:B1
Authority key identifier: BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
Certificate issuer: /CN=be18e2d9f509c9d3b455112aa288d336185801a0
Certificate serial: 019A4DE18C26FF09D6FA1296D6205F088134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
Manifest number: 10EF
Signing time: Tue 04 Nov 2025 08:00:18 +0000
Manifest this update: Tue 04 Nov 2025 08:00:18 +0000
Manifest next update: Wed 05 Nov 2025 08:00:18 +0000
Files and hashes: 1: K7bdbq2NQi5Og3pBR0VNiKqzF3o.roa (hash: Y5TCg/QVPxm4ctwH0Vu0TBEdMj0uZUrfAJN0ICvLjOc=)
2: vhji2fUJydO0VREqoojTNhhYAaA.crl (hash: OKK3pfFb8VDExSyZVyOmFK974UrStEDWJGZILJPpf0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:8c:26:ff:09:d6:fa:12:96:d6:20:5f:08:81:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be18e2d9f509c9d3b455112aa288d336185801a0
Validity
Not Before: Nov 4 08:00:18 2025 GMT
Not After : Nov 5 08:00:18 2025 GMT
Subject: CN=7c723e950e45fea9ad32a0e32cff2cd686eca3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:00:de:33:6b:4f:53:e4:86:98:ef:a1:74:
10:12:bd:55:15:b1:cf:53:f8:9f:8f:a1:81:f2:3a:
08:9e:90:3c:26:89:e2:26:7d:d0:91:3a:07:d7:2d:
95:73:e6:b9:ec:fc:84:57:5d:e7:4a:12:48:05:b0:
81:dc:db:2e:64:dc:3b:dc:a0:79:eb:5f:9c:a2:d0:
1c:9e:5d:bd:f1:c8:06:a7:56:c0:f2:59:16:88:9d:
83:e1:aa:e0:9b:97:d1:e4:50:5e:5c:f3:8e:6d:7f:
b2:5a:54:ba:cd:45:9a:cb:8a:b7:e0:0c:94:59:88:
6d:e2:74:63:d7:03:fb:91:61:e8:8d:f9:17:77:d4:
72:96:9b:17:ef:43:ed:0b:5a:69:bd:80:3f:9d:5c:
f0:35:c0:42:c9:03:cf:5e:06:da:5a:58:bf:77:5b:
98:9f:35:83:69:81:e0:b3:d4:87:e8:8e:94:8d:f3:
77:11:3e:b3:90:cc:b9:1c:fa:29:4b:86:91:32:b3:
d6:5d:ac:54:11:d7:92:93:37:c9:1e:40:4a:59:d2:
ef:c4:6a:66:88:11:e1:21:2a:c5:e2:4b:da:57:d7:
25:c7:31:a3:82:bf:f2:77:5a:c8:8c:f9:fb:a6:23:
ef:a8:66:6e:72:3b:30:05:ab:59:ac:cf:84:b5:15:
0d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:72:3E:95:0E:45:FE:A9:AD:32:A0:E3:2C:FF:2C:D6:86:EC:A3:B1
X509v3 Authority Key Identifier:
keyid:BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f1:b9:e0:83:b1:f7:44:ff:5b:46:b3:2b:de:c4:41:35:92:
3d:61:de:ce:98:08:c8:12:47:00:2b:2e:11:19:37:dd:9f:bb:
1c:f2:40:15:cf:15:69:dc:2b:95:66:f5:0c:a4:66:d1:9e:27:
2d:6a:75:fb:cf:d7:ae:d1:d8:47:81:0b:6c:d6:89:78:22:36:
f8:bb:ce:12:1b:3a:13:d0:05:6a:ab:1d:c6:f7:43:a7:df:29:
1b:6e:fe:c9:35:7f:85:b2:d6:38:03:fc:65:8f:12:49:f8:c0:
91:c2:18:cb:13:15:27:60:0d:80:8a:df:36:25:c0:2f:77:f7:
74:1a:64:84:d0:83:e4:0c:00:da:6e:e2:bf:ff:59:da:45:49:
aa:f2:ee:72:c4:9c:ee:e7:9a:ef:d3:ca:6e:5d:9c:da:4b:73:
21:a6:f7:26:cc:e7:cc:b0:ca:65:0b:41:5c:2f:55:2f:df:6c:
68:fa:0c:51:7e:e7:2f:63:9b:29:b6:a9:80:8e:cc:8a:d1:43:
d9:04:09:68:cb:39:8f:74:91:d7:0e:c5:d2:70:72:9f:5a:7e:
09:f8:72:4c:18:20:eb:a3:db:d3:e3:84:1b:49:31:5e:41:ca:
5d:80:1b:ae:22:b4:c6:4f:10:29:da:4a:a1:24:57:73:20:a6:
f5:9d:48:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:48 2025 by rpki-client