Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
File: vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft (raw, json)
Hash identifier: aNE0Fx9prslZ28CmzrOupgOv1stG8QaLsjCop1vrL70=
Subject key identifier: 55:17:FB:59:C8:EB:F4:36:6C:21:88:80:55:9C:DC:30:A6:6E:A9:84
Authority key identifier: BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54
Certificate issuer: /CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
Certificate serial: 019A4E187AA05E99B3F7850FA6E9353F3977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
Manifest number: 0D12
Signing time: Tue 04 Nov 2025 09:00:18 +0000
Manifest this update: Tue 04 Nov 2025 09:00:18 +0000
Manifest next update: Wed 05 Nov 2025 09:00:18 +0000
Files and hashes: 1: Z6Q9yfl3feHtt8qjeJosNh_6sQk.roa (hash: GwOmbcb5vlCx0Hzj3NGEHPu2R7jhNAhkCt0fTS4A/18=)
2: vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl (hash: fFSJS4PoAX5fdZa3tw3HKUtJTSWOisdm5NILaXv53sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:7a:a0:5e:99:b3:f7:85:0f:a6:e9:35:3f:39:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
Validity
Not Before: Nov 4 09:00:18 2025 GMT
Not After : Nov 5 09:00:18 2025 GMT
Subject: CN=5517fb59c8ebf4366c218880559cdc30a66ea984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:0a:ff:d7:0c:47:a8:6e:91:0c:b5:63:82:
13:e5:ec:ef:4e:b1:5b:87:78:99:c0:23:cf:39:98:
d5:ee:2d:2b:a9:ff:01:3b:39:e4:b3:dc:02:4e:61:
c5:38:65:06:5d:6d:88:08:b1:39:58:c8:8b:73:28:
c0:dd:64:d5:d1:42:ce:d4:67:46:bc:a8:10:16:b1:
94:eb:8c:42:a6:e1:bb:1a:0c:0f:f9:29:50:1a:df:
42:4f:d6:f6:0c:1f:38:81:67:9e:5a:6c:ff:86:90:
36:3a:5c:be:b3:11:5a:61:7c:1d:42:c1:54:e6:56:
c4:29:b6:53:1d:ae:30:3a:2c:83:ad:33:26:b0:4e:
0a:0a:f9:6a:d8:fa:2c:d2:0c:ea:56:e7:cb:b2:12:
f2:a4:52:85:5d:a1:e7:df:c9:9c:56:24:61:cd:69:
79:8a:f6:8f:7f:40:95:2c:39:5f:4c:2f:76:81:50:
98:54:fb:cf:d4:ad:b4:41:37:8e:86:14:e4:86:3c:
f5:d5:d4:87:fb:c2:f1:56:52:19:22:50:32:0c:58:
01:3d:c6:e6:2d:a4:df:b2:be:b2:45:a9:98:0a:f3:
1d:a4:11:d5:fc:b8:13:57:a9:da:eb:b7:34:4a:0a:
30:f5:3d:b2:12:c9:34:a1:d2:9c:39:98:00:cb:7d:
a8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:17:FB:59:C8:EB:F4:36:6C:21:88:80:55:9C:DC:30:A6:6E:A9:84
X509v3 Authority Key Identifier:
keyid:BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:53:ac:a3:fd:fe:8d:46:14:c2:d4:d1:ab:2d:b3:ae:25:63:
ea:04:6b:9f:2d:fd:2b:ac:d9:b1:86:47:46:e2:7d:cd:e9:2f:
bf:0f:8a:a9:5a:0b:23:b9:7f:1f:82:b8:92:f6:c2:99:80:e4:
e4:86:43:ce:e5:6d:3a:b7:e5:9a:99:35:f1:87:2f:c2:15:ac:
84:39:5c:67:7e:d3:5e:15:9d:de:5d:21:38:ad:0b:b0:94:82:
52:4e:45:fa:e1:39:bd:d9:af:81:ef:33:ee:ee:68:b1:c2:23:
5b:d1:3d:79:b9:5d:f1:15:e0:d5:53:ce:60:80:83:0b:b2:cd:
d8:cf:65:28:dd:d2:91:34:b7:6b:58:6a:81:4a:78:e4:48:07:
f4:e9:e7:1e:c0:7c:29:89:b6:9d:9c:28:39:96:9c:b5:b3:8b:
5b:a5:6e:4b:bc:7d:be:ce:d7:80:48:c3:68:06:ea:89:08:d9:
56:f8:8e:16:06:e1:54:f4:09:e7:e0:16:ff:79:51:72:bc:70:
ed:75:2c:dd:48:14:f7:21:12:b8:05:f9:1e:b9:22:9b:28:98:
eb:3e:50:31:1a:b4:3c:d0:b2:28:79:44:d2:12:8e:29:dd:1d:
05:f1:03:ac:4e:40:6d:da:10:9e:1b:39:74:9d:47:1d:cd:da:
0d:cc:69:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:32:16 2025 by rpki-client