Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/_VPDr_MeJ9KhvE2bPudbuKm1eDg.mft
File: _VPDr_MeJ9KhvE2bPudbuKm1eDg.mft (raw, json)
Hash identifier: C0Jr2Ue/SVFtc3mvj1vwPige5aLo7hS165UxtD2VWCo=
Subject key identifier: 03:1B:08:90:67:BD:71:72:43:95:43:88:41:CF:A6:E4:D6:AB:7F:E9
Authority key identifier: FD:53:C3:AF:F3:1E:27:D2:A1:BC:4D:9B:3E:E7:5B:B8:A9:B5:78:38
Certificate issuer: /CN=fd53c3aff31e27d2a1bc4d9b3ee75bb8a9b57838
Certificate serial: 019A4C60D83A822D4E5610CBACBE209A49AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VPDr_MeJ9KhvE2bPudbuKm1eDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/_VPDr_MeJ9KhvE2bPudbuKm1eDg.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 01:00:06 +0000
Manifest this update: Tue 04 Nov 2025 01:00:06 +0000
Manifest next update: Wed 05 Nov 2025 01:00:06 +0000
Files and hashes: 1: VMGZvIIUss5Ve2mGDXunD7HdEJs.roa (hash: bbDq804eTxYilw+nJ5y9e4tqkryqldjqvyQs2qpxXbA=)
2: _VPDr_MeJ9KhvE2bPudbuKm1eDg.crl (hash: k4+otgnsXaUKulIMjyCyM8Hvi61BVd/kR723b6QRwA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/_VPDr_MeJ9KhvE2bPudbuKm1eDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/_VPDr_MeJ9KhvE2bPudbuKm1eDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_VPDr_MeJ9KhvE2bPudbuKm1eDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:60:d8:3a:82:2d:4e:56:10:cb:ac:be:20:9a:49:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd53c3aff31e27d2a1bc4d9b3ee75bb8a9b57838
Validity
Not Before: Nov 4 01:00:06 2025 GMT
Not After : Nov 5 01:00:06 2025 GMT
Subject: CN=031b089067bd71724395438841cfa6e4d6ab7fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:ed:45:c1:7d:d6:99:b8:58:12:73:3b:32:
d5:35:1a:ca:ab:ff:63:b1:ce:98:8c:80:18:73:2f:
d7:55:70:cd:95:35:cc:f8:02:8d:79:89:a4:e1:da:
a8:ca:c2:2e:0e:b0:eb:a3:1c:43:72:47:3f:c2:c7:
5d:00:ff:f6:45:3f:66:d9:22:53:43:f1:5f:0c:a4:
4a:df:3c:c2:9c:21:ec:f1:d7:ff:d6:65:5d:87:81:
a0:82:3f:96:53:c8:27:72:ea:6d:19:4d:46:6f:32:
cc:d2:f9:d2:8c:7f:06:2b:ba:33:0e:d9:bf:cb:7b:
07:82:38:64:b4:ee:6b:dc:c4:5b:e5:34:fa:74:31:
02:56:a0:a8:d9:3e:81:7c:11:ab:22:d3:11:36:2a:
ff:46:10:e2:aa:3a:72:2b:08:1a:cf:5f:c1:44:47:
ff:65:a4:82:61:6f:2c:2a:c6:72:36:b8:4e:e8:68:
56:f0:4e:f3:3b:18:e3:dc:11:cb:d9:b5:6f:5f:85:
a7:f1:58:65:66:24:45:d1:18:97:9d:63:0c:fe:f7:
14:31:e8:e9:f1:82:b2:3c:f9:37:31:23:3b:41:b4:
f4:8a:ae:18:fa:31:53:a8:55:b0:df:9a:17:70:46:
c6:7a:f8:06:f8:c9:99:42:81:f2:64:98:ff:0e:21:
8c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1B:08:90:67:BD:71:72:43:95:43:88:41:CF:A6:E4:D6:AB:7F:E9
X509v3 Authority Key Identifier:
keyid:FD:53:C3:AF:F3:1E:27:D2:A1:BC:4D:9B:3E:E7:5B:B8:A9:B5:78:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VPDr_MeJ9KhvE2bPudbuKm1eDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/_VPDr_MeJ9KhvE2bPudbuKm1eDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/_VPDr_MeJ9KhvE2bPudbuKm1eDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:eb:81:63:3e:45:c9:d2:c5:88:84:e2:5f:82:ac:ad:72:53:
12:b8:c2:22:11:a2:85:af:8b:04:1d:1d:8d:98:48:0c:47:22:
bf:b5:1b:16:f3:3f:7c:aa:f4:7b:88:50:d1:ee:26:a1:28:dd:
17:47:c2:6a:78:65:f2:a9:04:66:90:b2:a2:c9:23:ec:d6:dd:
96:62:df:3d:75:46:6f:3a:45:f8:6e:d8:ad:4a:2b:20:dc:a9:
a4:f5:b0:4c:05:91:87:a3:c5:c2:de:16:70:56:dc:af:ae:8f:
eb:bb:0f:53:4b:8f:13:7c:48:9a:c5:19:65:bb:f8:96:8b:6c:
60:33:63:d9:bb:ea:41:1d:66:da:23:73:1d:63:4e:0a:e8:5a:
63:6f:9f:82:ed:d9:16:cb:9e:8a:a9:d4:ae:17:54:93:5b:c0:
c7:22:7a:d5:d8:df:7e:ff:60:44:af:99:e8:e2:f7:a2:de:3c:
d0:ba:47:e0:43:3b:bf:2a:f4:8c:b0:3c:c2:6e:e0:cb:96:38:
e7:33:2e:e5:4e:8b:ad:97:c7:f9:f7:25:f7:a7:cd:06:88:27:
2a:47:ed:43:e4:00:e8:71:fc:c8:03:75:f5:32:d8:df:54:7d:
59:3b:91:ba:dc:f9:85:7e:a5:eb:1c:57:66:3d:f0:ec:73:10:
37:78:9d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:10 2025 by rpki-client