Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
File: Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft (raw, json)
Hash identifier: G/hLDPtybBGg5wuB/UGG+NJTB2Jl0uHjdQZP1/MM3Ls=
Subject key identifier: 95:AD:99:10:66:24:B6:F6:1F:15:A4:34:2D:0B:77:42:4D:FE:20:2C
Authority key identifier: 56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
Certificate issuer: /CN=56376def1224839a6113d1d0cdd398104faaf2fb
Certificate serial: 019A4EF436541C47DC013F13FAE6FFDED197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
Manifest number: 0587
Signing time: Tue 04 Nov 2025 13:00:18 +0000
Manifest this update: Tue 04 Nov 2025 13:00:18 +0000
Manifest next update: Wed 05 Nov 2025 13:00:18 +0000
Files and hashes: 1: 8YyDmxndvd6azClM9JTsxIv2kz0.roa (hash: 0fvpyn3lFxp2N7HhgqqjnRwit9mrT13M79B8b6kGTr4=)
2: Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl (hash: xlCkuBRHNwyqC9l7TJVvgI3bsVbhhgQbonSZ2SemEY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:36:54:1c:47:dc:01:3f:13:fa:e6:ff:de:d1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56376def1224839a6113d1d0cdd398104faaf2fb
Validity
Not Before: Nov 4 13:00:18 2025 GMT
Not After : Nov 5 13:00:18 2025 GMT
Subject: CN=95ad99106624b6f61f15a4342d0b77424dfe202c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2e:d8:c3:80:28:64:60:dd:ce:45:85:12:7d:
9c:51:e9:ab:f6:6e:75:78:80:dd:3e:49:ac:94:2e:
e0:1b:0b:85:be:d6:a4:d2:57:f2:78:0a:70:6c:b1:
fe:b6:81:63:36:6a:f7:af:ed:49:6c:f1:31:2d:8e:
07:4d:6b:4b:76:ae:8a:e6:df:6f:32:ff:6f:0a:1b:
4d:86:aa:b0:1d:ac:c0:2f:a5:75:3f:c1:dc:3d:1c:
9b:4d:62:0d:97:db:60:64:eb:3b:57:41:4e:5c:bd:
b4:27:b0:99:ef:63:19:e2:fa:17:08:96:b7:ec:fd:
9e:31:64:cb:4c:c2:a0:b6:05:f7:db:c8:93:09:7c:
9c:10:01:a4:4b:72:d9:14:91:82:7b:2f:15:f9:39:
cd:f8:da:f9:be:6d:17:24:5b:24:fd:73:a9:7b:e9:
bf:ba:eb:2b:b0:79:df:5e:42:c5:b2:97:74:dd:c8:
df:07:70:ea:c4:df:a0:da:56:25:d2:4a:f9:15:fa:
6b:64:cf:5f:40:5a:67:0d:64:3d:eb:82:16:d4:01:
1e:ce:92:1d:c2:b4:86:0f:50:67:35:29:34:c1:10:
20:da:2f:fb:a2:ed:0f:25:c2:9a:43:1d:7c:d0:36:
21:b4:d7:14:f7:ce:14:26:ab:77:4d:37:e5:1b:2e:
54:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AD:99:10:66:24:B6:F6:1F:15:A4:34:2D:0B:77:42:4D:FE:20:2C
X509v3 Authority Key Identifier:
keyid:56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8c:a0:ca:7d:68:4e:d5:7c:b4:01:3f:37:aa:17:8c:66:16:
58:67:cf:d9:a5:bf:38:73:3a:6b:5d:fa:e0:f9:47:67:c7:11:
e5:4b:49:0b:84:77:eb:f3:f9:c7:69:d4:a7:37:7a:a9:c1:95:
67:a8:56:18:b6:73:86:8f:5d:06:56:32:a6:95:52:67:f3:79:
18:94:fe:f7:33:5a:68:b3:a4:14:07:7c:1c:78:29:19:dc:62:
cf:0e:70:c8:d1:81:5c:84:95:bf:9b:a5:d6:1c:20:98:33:53:
59:75:2f:5e:bb:60:0f:38:c9:cf:fa:c4:20:92:e2:02:a3:1b:
77:4c:2f:db:60:ed:85:f5:8f:6e:50:63:e4:75:ff:aa:3d:46:
10:9e:7e:e9:8e:ff:dc:0e:e2:53:64:69:ec:f3:e8:8b:24:aa:
31:6b:9e:91:5e:ec:b8:59:9d:c3:b6:34:ca:1c:a3:7c:87:5a:
0d:bc:51:d8:2e:69:48:d8:d2:75:68:78:95:e6:e7:64:ba:76:
9e:80:e0:9f:cc:fc:26:9e:80:8e:ad:45:a8:37:fb:7b:bf:e5:
2a:4a:78:5d:a7:9b:7b:30:f7:df:67:f1:55:c5:e3:1a:55:bf:
30:87:f8:78:41:eb:aa:f2:a2:32:d8:ff:23:7e:b9:5d:87:95:
6b:f6:82:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:24 2025 by rpki-client