Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
File: VyumSzqQYLRkM3rTCgK-xLEaVR8.mft (raw, json)
Hash identifier: vOHCFcNpOIfFs98zCAFiRsMjXaAuSJg73Vpdyxh1XGM=
Subject key identifier: 24:5C:95:07:2B:F1:8A:3B:C7:8A:50:C9:83:32:DF:15:95:DA:87:6A
Authority key identifier: 57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
Certificate issuer: /CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Certificate serial: 019A4EF41B69B89AD232164BE80A27E186B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
Manifest number: 13A2
Signing time: Tue 04 Nov 2025 13:00:11 +0000
Manifest this update: Tue 04 Nov 2025 13:00:11 +0000
Manifest next update: Wed 05 Nov 2025 13:00:11 +0000
Files and hashes: 1: VyumSzqQYLRkM3rTCgK-xLEaVR8.crl (hash: lZDNHgTvGi5gTmlEFrUQedPYd68SYpYa2Wi0Mmy2EHs=)
2: k3QEGek6OEeL5SsPbREF1e2K4Yk.roa (hash: NiaroSVfhsYQcW9nN+bvyMvN1j0QK242NmOTmwcSA2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:1b:69:b8:9a:d2:32:16:4b:e8:0a:27:e1:86:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Validity
Not Before: Nov 4 13:00:11 2025 GMT
Not After : Nov 5 13:00:11 2025 GMT
Subject: CN=245c95072bf18a3bc78a50c98332df1595da876a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:22:4b:6e:e5:19:36:01:37:f9:3d:e7:cb:dd:
2f:57:05:98:38:2a:d2:b5:7e:44:12:d4:b2:34:12:
51:76:11:51:b3:33:6a:b9:b2:bb:99:b6:36:b1:6d:
5b:72:6c:5e:25:94:cb:ca:81:e3:8f:18:2d:d0:75:
36:b8:c2:2a:01:d5:94:23:a9:c6:52:53:06:96:18:
ee:c1:01:04:63:d8:aa:e3:b5:fa:9d:d3:15:de:b4:
5e:59:a4:d5:2c:b1:d8:66:f4:05:00:19:99:5d:a1:
5c:89:dd:51:15:fd:25:88:e0:4c:d1:1d:82:63:62:
13:cc:6c:d3:f6:19:d2:b4:24:45:c8:5e:2b:dc:f2:
6e:2a:3c:c4:2d:8b:57:ee:7b:44:c9:de:6d:25:91:
a8:77:45:11:6c:19:87:76:88:bb:f5:8b:c8:e8:a8:
2c:ee:b3:b2:7e:7b:a5:af:b6:82:57:96:d8:74:d2:
4b:55:3e:44:d1:3c:5e:c6:00:f8:15:05:3f:0c:c1:
fa:e5:ef:c8:b0:16:8d:12:9a:fe:1a:5e:f1:eb:59:
47:ec:99:65:e2:7e:48:b1:eb:7b:cc:06:03:2f:67:
15:b9:ce:4c:a4:a1:ad:bb:24:1d:cf:bf:d8:3a:e8:
ef:73:d2:01:6d:a9:03:f8:45:d0:37:bd:51:75:81:
ab:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5C:95:07:2B:F1:8A:3B:C7:8A:50:C9:83:32:DF:15:95:DA:87:6A
X509v3 Authority Key Identifier:
keyid:57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7e:0f:86:85:34:fe:1f:8f:64:84:dc:7a:ab:e1:1d:40:53:
3f:a3:b9:96:83:c4:f9:95:07:e7:ad:3c:4a:ee:69:d0:5b:1c:
7b:eb:ea:55:71:e4:d2:43:d1:25:c3:d8:19:e3:98:26:90:98:
44:11:f1:e0:cb:d5:a3:53:41:80:f5:6a:fb:7b:46:80:97:bc:
5d:63:0b:cc:62:16:32:3e:fa:ac:c1:ef:19:4f:94:42:96:aa:
75:e6:5a:6f:00:f7:bc:f8:73:2c:c4:e1:f1:b2:0c:61:70:5b:
04:63:87:33:d6:5a:f1:a0:cc:6b:99:d4:00:0f:01:f3:96:43:
5d:66:c3:0d:ad:6a:54:43:ac:37:dc:4b:7d:d8:a5:40:53:2b:
e0:35:e2:c8:56:2d:17:e3:45:dc:79:da:73:73:09:b9:7d:91:
51:80:e6:72:58:1a:dc:0b:20:7c:d1:cc:b6:97:69:e5:45:7c:
47:ab:ff:6f:fd:48:f4:cc:43:da:12:72:92:9c:3f:89:bf:a8:
62:9a:cf:cd:a9:8b:06:4f:20:e1:6d:bc:ff:60:17:42:c8:05:
27:1b:3c:84:6f:15:5d:2f:64:83:c7:a1:34:c8:83:c2:c2:38:
6a:cc:f3:f8:21:70:ad:8c:9b:9b:28:a5:47:ce:8e:81:41:ab:
e7:f8:83:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:45:03 2025 by rpki-client