Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
File: VG3jJt6VIr0pa-1II4XJdpJY2PE.mft (raw, json)
Hash identifier: lEHbS2gSLXMnBnS3zUpBuRsbY3y8l/HHV6YCmb/TSk0=
Subject key identifier: EE:FA:AF:F2:B4:85:DC:83:FE:13:6B:D6:87:82:2F:35:5F:4C:E5:81
Authority key identifier: 54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
Certificate issuer: /CN=546de326de9522bd296bed482385c9769258d8f1
Certificate serial: 019A4EF5832BCC451E40F727CCB3E1418F8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
Manifest number: 0DF4
Signing time: Tue 04 Nov 2025 13:01:43 +0000
Manifest this update: Tue 04 Nov 2025 13:01:43 +0000
Manifest next update: Wed 05 Nov 2025 13:01:43 +0000
Files and hashes: 1: VG3jJt6VIr0pa-1II4XJdpJY2PE.crl (hash: 6vCFN9tRKF5Jq+GGj7R0+IZhD4BlAnp3yxKGpnt8lKE=)
2: XqfeZQF_1MV97o_zjJHjyzS8MaA.roa (hash: 7t9vzZ6FV6EcfJzjLHhMVS7Ff0/+2ubtRR3JHX0+dlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:83:2b:cc:45:1e:40:f7:27:cc:b3:e1:41:8f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546de326de9522bd296bed482385c9769258d8f1
Validity
Not Before: Nov 4 13:01:43 2025 GMT
Not After : Nov 5 13:01:43 2025 GMT
Subject: CN=eefaaff2b485dc83fe136bd687822f355f4ce581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0c:ba:cf:c3:b2:57:45:72:c1:34:e3:fb:27:
8e:1f:78:7d:6a:a9:b5:24:18:8f:63:88:97:e2:77:
99:dc:77:47:09:52:3c:04:91:54:b7:68:4c:be:a6:
fc:32:24:ea:bc:21:5d:65:bf:82:a3:fc:7a:5b:d2:
89:1f:fa:2c:4c:a7:6f:e5:ed:5a:5e:d8:d2:8d:6d:
77:7b:55:14:a9:5b:39:7f:07:11:58:f8:d0:2c:1c:
93:5f:6c:c2:1e:3d:08:1c:40:4d:68:90:c9:e7:4b:
eb:c8:78:bc:4b:c3:22:9d:b6:29:c6:b0:53:7d:92:
7f:a1:76:52:0b:10:91:85:0f:06:42:65:3a:c9:49:
0a:c8:e6:e8:09:86:a4:9a:f8:1f:c6:ee:b4:aa:44:
0f:96:5e:21:6a:b5:c6:40:b4:8b:ee:16:1a:9b:06:
58:8b:6e:91:26:9d:13:34:60:40:58:14:ae:a4:32:
07:40:9d:46:15:d2:06:71:b9:35:64:14:07:77:4a:
6e:38:4b:ed:14:70:ab:79:ba:3b:8c:87:dc:9c:10:
67:9a:87:7b:2b:24:e4:78:0a:93:8f:f2:6e:a4:40:
74:6e:e5:1f:e3:c8:f2:e5:35:a6:46:c2:aa:9f:31:
74:ea:8d:21:93:6e:07:2a:d1:47:8f:55:e4:be:de:
8f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FA:AF:F2:B4:85:DC:83:FE:13:6B:D6:87:82:2F:35:5F:4C:E5:81
X509v3 Authority Key Identifier:
keyid:54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c6:1d:69:95:74:5b:5d:d1:2b:01:92:a8:ec:71:8f:7d:07:
97:e3:e6:84:11:87:45:3c:23:d8:ef:d8:d7:22:0c:77:cb:58:
97:61:38:44:af:b2:4b:be:35:65:ca:cd:5e:e6:8b:a5:38:e2:
f8:f4:0a:fc:78:dd:18:51:be:d3:85:fd:95:b9:67:d4:26:22:
30:7c:aa:64:27:48:43:55:49:f2:da:06:ce:29:8b:fa:55:13:
c5:1e:df:73:be:50:b2:0a:35:9c:e7:60:1a:a7:1a:d7:f4:1e:
d0:08:af:73:90:5f:5a:8e:96:a8:17:7f:c2:a2:60:32:f8:5e:
55:aa:67:b7:1c:59:73:67:df:7f:22:9f:0d:12:9e:ca:97:4d:
3c:b2:4d:d9:45:11:7f:85:ed:98:d1:82:3a:a3:8e:34:48:a4:
f5:9c:3a:16:ef:30:05:6e:47:91:b5:ea:67:94:31:cc:f8:05:
11:fb:fb:b4:2b:97:a0:b2:50:ce:59:61:07:7f:09:88:56:61:
d1:03:67:21:7f:57:03:47:13:b0:c7:94:36:42:72:04:1d:ad:
b8:8d:e8:18:ba:47:f8:ab:ed:c3:a4:ef:73:e8:6a:4e:1a:11:
9d:ca:59:3a:04:ce:27:7e:d6:0e:fc:75:b3:52:44:a3:ac:5b:
32:71:1e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:05 2025 by rpki-client