Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
File: VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft (raw, json)
Hash identifier: msz78eOF/iyVjYvsU0yWO23YFmhSgEZEqKXeZj6Y9tU=
Subject key identifier: BA:85:33:1D:AB:EB:47:0E:16:43:13:27:1F:79:38:8C:51:F4:2D:B1
Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Certificate serial: 019A54C00C1902658B8023F9407BF5901B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
Manifest number: 0E19
Signing time: Wed 05 Nov 2025 16:01:03 +0000
Manifest this update: Wed 05 Nov 2025 16:01:03 +0000
Manifest next update: Thu 06 Nov 2025 16:01:03 +0000
Files and hashes: 1: 1evcMDo7pi-aA6SWjQJ5C1thyaU.roa (hash: xYDgN0KV8Q5QXfbFX/hw20fHK9cnWhX/isL2BXocmSw=)
2: BFOQ1xipYhPtnW3G70pfAnmzwzg.roa (hash: /+UHFdHIIgWbmriMU+n5ynXyWKvmniC4nJpXONs4/qY=)
3: ISS1nVoFj6vql40oL7xs039XkbE.roa (hash: Uj1JIR2yGWgQKTO1hh05hzaRctOY0c3hfi9SPLtZHjc=)
4: VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl (hash: J3WNqwIbM8+I6Fr+baKc2yfsm30A/MXH/7MGnApQ5hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:0c:19:02:65:8b:80:23:f9:40:7b:f5:90:1b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Validity
Not Before: Nov 5 16:01:03 2025 GMT
Not After : Nov 6 16:01:03 2025 GMT
Subject: CN=ba85331dabeb470e164313271f79388c51f42db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:70:e4:cc:55:f9:a1:e6:73:8e:dd:9b:20:ca:
ba:64:b0:ff:4d:ac:17:8f:98:c1:76:2d:74:f9:ee:
e1:74:8a:97:ce:38:bb:2e:3b:42:dd:30:e1:34:02:
8a:6a:e6:96:60:18:cf:e5:44:35:c6:30:33:db:f3:
49:3c:47:be:b2:a1:08:a1:98:1f:3b:6a:1a:81:9c:
e2:31:3d:7e:47:4d:07:08:3d:fd:90:77:16:b0:62:
24:a3:14:9d:3f:b7:20:e7:0d:14:57:7a:d8:62:dd:
fd:3d:73:e7:85:38:99:67:e3:51:aa:92:ac:7a:18:
05:3a:d2:e1:93:bb:95:22:12:f9:38:73:d4:63:f9:
a6:09:67:69:c7:90:1b:50:6d:c7:5a:6b:ef:33:70:
21:d7:31:4f:63:d3:28:0e:22:b4:08:f0:1d:05:5a:
d3:4c:58:b2:88:9c:f4:5c:dd:cb:86:a3:33:34:fc:
fa:21:2c:ce:11:4d:78:5b:3d:1a:6d:47:dd:d4:5f:
da:17:31:ec:04:c8:6a:7e:de:8f:dc:58:31:84:77:
d7:da:03:aa:11:b8:e1:aa:b1:cf:2d:ba:f4:e4:73:
f5:17:ca:19:22:85:7f:32:1f:4b:a7:eb:6b:e9:55:
11:11:0f:a2:28:e9:e3:7b:4a:55:17:b4:cc:c8:77:
e3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:85:33:1D:AB:EB:47:0E:16:43:13:27:1F:79:38:8C:51:F4:2D:B1
X509v3 Authority Key Identifier:
keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:06:b6:12:25:44:c8:05:4e:8f:f0:6f:a8:1a:3a:53:9a:58:
8f:d2:8a:03:c2:0b:3f:1b:f5:70:3b:87:46:af:9c:b4:e4:84:
93:7f:cf:fe:35:23:d4:0e:35:b7:59:77:69:dc:0b:d0:61:06:
57:36:36:0b:d0:34:1e:31:62:ee:28:01:ee:9d:78:d7:4c:9b:
8c:fb:aa:8c:74:ee:b8:22:4c:bd:31:d3:54:06:ad:ca:5e:20:
40:4c:cd:b5:e5:e2:18:cf:3b:db:d1:c3:3a:97:68:7c:7a:e8:
3e:1a:b8:6f:98:7c:b9:72:ba:36:25:56:84:62:17:7f:16:0f:
df:1b:ac:ae:1b:69:e0:ce:ff:06:16:94:73:39:bf:4a:22:d6:
06:17:bd:01:2e:bc:07:db:1c:0e:12:c6:de:e0:42:33:5f:94:
f1:7b:31:e7:62:78:ee:58:62:b9:aa:32:9e:c9:85:22:41:2d:
61:7b:89:95:ab:9d:b3:78:59:9f:42:7b:b2:1a:59:43:db:db:
a4:96:ed:bc:10:bd:57:c2:fd:62:6f:83:67:d2:13:49:fb:9d:
7b:25:86:2c:0c:60:1e:3b:e8:fd:b1:9c:1a:44:17:04:d9:41:
43:4d:4f:63:42:fe:93:f0:dd:09:da:a3:a2:8a:3e:68:f2:9c:
fc:93:ab:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:52:19 2025 by rpki-client