Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
File: VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft (raw, json)
Hash identifier: sYbzzoQb3v4cX+m300zbUVIkhmzo7G7TOhpPcYU/xiI=
Subject key identifier: 09:6D:58:7C:38:B1:62:1E:B3:BB:9A:B8:37:44:FA:00:98:CB:19:07
Authority key identifier: 54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9
Certificate issuer: /CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
Certificate serial: 019A4D3CC252F34B15CBDE2C114312C0801B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
Manifest number: 13A0
Signing time: Tue 04 Nov 2025 05:00:18 +0000
Manifest this update: Tue 04 Nov 2025 05:00:18 +0000
Manifest next update: Wed 05 Nov 2025 05:00:18 +0000
Files and hashes: 1: OUuP-6YCe14zgkfTQMdJLc2r9MQ.roa (hash: Aex7iaImK8VF1F7ddVhsOVcjsTFE1aBCNKfli39IJNE=)
2: VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl (hash: rOA/nZQjOUogkSM1gaJffiw+3rrUhF5DMo7d6DN/jaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:c2:52:f3:4b:15:cb:de:2c:11:43:12:c0:80:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
Validity
Not Before: Nov 4 05:00:18 2025 GMT
Not After : Nov 5 05:00:18 2025 GMT
Subject: CN=096d587c38b1621eb3bb9ab83744fa0098cb1907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:96:14:a4:9b:f8:44:23:08:56:f6:9f:76:
64:c2:8e:4c:67:65:b8:59:50:f3:15:f7:13:e7:61:
2d:70:74:4d:46:4c:bb:b0:16:3d:bc:ac:10:11:2b:
99:c0:f8:14:d2:01:0c:36:7d:00:8d:71:13:6d:27:
3c:40:33:a5:6b:3e:ff:85:9c:82:47:77:50:af:57:
f3:98:ab:18:9a:e0:78:e9:56:47:37:27:dc:1c:cd:
b7:fa:e7:70:42:5a:65:b0:54:91:e0:2f:32:a5:cd:
38:e3:d0:27:de:88:49:d9:49:40:aa:fd:13:4f:6e:
08:bd:aa:40:a9:57:e8:4b:35:eb:a7:2f:81:02:d1:
d1:5c:d9:6a:0b:f2:14:48:4d:90:d1:e1:91:ad:71:
ce:44:c5:24:1d:97:70:e4:28:67:ca:bd:fc:6c:b9:
1c:82:04:d8:79:4a:4f:f0:20:c6:67:72:f7:8e:81:
64:e5:ba:04:75:08:28:16:30:46:0b:f6:7d:90:9c:
57:da:fe:22:28:98:51:99:77:7a:bb:c4:fd:b5:81:
f4:f3:df:0d:df:23:96:ba:69:24:e7:0f:6f:75:c2:
d8:a3:90:b2:5d:45:b2:d9:15:8b:ab:55:dc:d1:ba:
d8:8d:c0:97:e6:4c:90:f1:62:18:38:3e:25:8c:f7:
c0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6D:58:7C:38:B1:62:1E:B3:BB:9A:B8:37:44:FA:00:98:CB:19:07
X509v3 Authority Key Identifier:
keyid:54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8a:86:92:ea:42:1d:a5:e3:94:be:d9:64:20:56:97:aa:bb:
d2:91:ee:81:f2:d7:f0:80:29:33:88:ea:4a:59:ac:f8:bd:65:
82:8b:02:4b:0f:7c:ea:73:02:1c:bd:66:34:f8:4c:83:fc:42:
6e:ec:58:b0:47:73:1f:f3:88:6d:24:55:0f:83:73:83:ee:4e:
7c:98:05:d6:4d:66:4a:42:73:fd:6c:ad:be:f4:9f:ee:7c:75:
60:6e:f1:63:cd:a8:d0:c0:ac:51:e3:da:c7:25:e5:9a:50:8d:
23:7f:ac:99:c5:fd:65:23:77:a4:0b:e5:a7:25:df:4a:a5:2a:
2b:3c:13:2e:94:ee:bd:dc:84:bb:68:4c:2f:42:70:98:30:ac:
32:ae:bc:e3:5a:20:b6:b4:a3:f5:8b:1f:1f:41:08:d4:f3:59:
3f:fc:09:69:46:a9:2b:18:3f:88:52:2e:9f:61:e7:f5:da:34:
3d:4c:a5:5a:86:f0:b0:e9:05:ad:3d:73:96:40:f1:9e:4f:e9:
53:c8:03:07:cf:a1:a3:b3:8c:59:da:02:90:76:e9:9c:34:94:
9a:dc:01:ec:23:12:b4:c4:06:e7:a9:97:b5:74:48:d1:8f:3f:
9c:19:3b:24:c4:7d:5f:81:82:78:0a:20:8f:1a:29:e7:15:85:
05:98:4b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:29 2025 by rpki-client