Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
File: VAQZQbFFDWuVtYyj8HfOII39-0s.mft (raw, json)
Hash identifier: rpypP8Bo2vncAKRqF97fiw3erhEk22YUG6IX98iIAGw=
Subject key identifier: 77:D8:A6:D8:0D:DC:B1:9E:7C:A6:4F:A8:7F:E1:2D:3F:F3:D5:4C:A7
Authority key identifier: 54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
Certificate issuer: /CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Certificate serial: 019A5006F0557CF39EA4D986A1046A371225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
Manifest number: 07B3
Signing time: Tue 04 Nov 2025 18:00:23 +0000
Manifest this update: Tue 04 Nov 2025 18:00:23 +0000
Manifest next update: Wed 05 Nov 2025 18:00:23 +0000
Files and hashes: 1: VAQZQbFFDWuVtYyj8HfOII39-0s.crl (hash: /aDdxfvPfTF+9GIHsN8TCNayQOGnVlggqan+WUgl6UU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:f0:55:7c:f3:9e:a4:d9:86:a1:04:6a:37:12:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Validity
Not Before: Nov 4 18:00:23 2025 GMT
Not After : Nov 5 18:00:23 2025 GMT
Subject: CN=77d8a6d80ddcb19e7ca64fa87fe12d3ff3d54ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4e:3d:5e:c9:f0:a7:03:aa:4a:97:ec:eb:2e:
63:db:9e:2a:bb:72:3b:96:5a:e3:89:2a:5c:bb:cb:
eb:87:36:a3:eb:f8:71:d3:37:54:f3:b9:82:f2:b0:
fc:87:58:06:89:1e:5e:0d:a9:84:48:cf:ad:ef:e6:
95:15:df:98:02:63:ae:a2:6d:18:ab:bf:73:4a:41:
90:b3:8d:51:b7:1f:02:3f:1a:b3:3a:3c:38:0a:2d:
6f:d7:a8:fe:af:e7:a5:6e:81:18:d3:23:2d:03:48:
0e:02:b9:cb:06:a2:61:81:37:79:85:a6:ad:37:4f:
82:0d:71:83:a5:6f:cd:38:65:4a:19:05:29:78:8c:
90:44:82:e9:a0:26:42:af:fd:87:95:02:ac:75:2d:
4d:b2:2d:b5:c7:c5:45:bc:5a:b6:04:fd:b2:3d:06:
3a:5c:38:11:c5:9d:04:2f:03:12:12:40:06:20:75:
ec:72:b7:22:11:ad:f3:78:81:03:95:c1:fe:b6:b8:
e6:cb:01:7e:0b:55:69:de:83:c5:ee:37:b5:02:07:
16:df:9f:cd:0f:a2:e3:a1:8d:79:9f:b0:00:23:a5:
97:21:22:ba:36:eb:05:94:88:da:62:6f:ae:45:1d:
de:2c:2a:80:40:8d:8c:5b:9b:1c:91:e4:25:a1:3b:
c9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D8:A6:D8:0D:DC:B1:9E:7C:A6:4F:A8:7F:E1:2D:3F:F3:D5:4C:A7
X509v3 Authority Key Identifier:
keyid:54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d9:41:aa:11:a3:19:cb:3d:3c:4f:10:b8:47:8a:cf:84:b5:
01:57:fe:84:6e:1a:aa:7e:06:e3:af:5e:4e:f9:ed:b2:b1:1b:
b1:6c:8c:1a:4e:e3:c5:56:f9:97:43:d0:a8:1f:b4:1f:1c:8e:
45:ef:db:e4:cb:a4:09:7e:1b:ae:22:a4:71:b5:73:e5:6a:33:
8b:b7:b0:73:08:94:be:ac:41:16:92:27:c0:fd:f6:b9:67:ed:
58:a8:b0:31:e4:42:75:85:ff:e8:54:68:dd:8a:fb:d1:a1:4e:
17:a4:52:cc:a4:b7:11:7a:62:2c:b4:c8:c5:a4:75:40:e8:a2:
46:77:f7:80:7b:9a:ed:d8:05:81:1b:74:f4:ed:eb:ac:f4:a6:
59:3b:df:40:96:c0:dd:4b:34:28:25:e5:4f:f9:d3:7a:33:21:
bb:c5:a0:11:05:0b:f0:43:65:b4:c3:5d:46:3d:65:22:7e:eb:
af:f8:15:d9:72:1c:59:81:26:10:42:f9:35:7e:69:48:e1:15:
5c:ff:c9:90:33:c5:f0:2c:25:b0:5e:6a:89:fd:58:fa:55:db:
25:c5:df:3a:7c:ef:3b:32:4f:ab:88:8e:3f:12:3b:04:f5:0a:
f7:1b:cd:83:db:06:08:c9:f2:29:23:54:cb:91:59:56:ea:9a:
eb:04:74:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:01:50 2025 by rpki-client