Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json)
Hash identifier: N7lQiArz8tsOMUCk8RKG93Fj0W/oX3MYulnG+ouZySM=
Subject key identifier: 97:7B:76:96:62:74:05:4C:C0:07:BA:67:81:99:3F:4A:40:CC:DE:F1
Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Certificate serial: 019A4E18E142908CF5C267E403FBFC3E138A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 09:00:44 +0000
Manifest this update: Tue 04 Nov 2025 09:00:44 +0000
Manifest next update: Wed 05 Nov 2025 09:00:44 +0000
Files and hashes: 1: BF5uYM34somF3uKBjwVBv6TvSUc.roa (hash: LMQTKQzXnQ/SBYJGX5sPOQPjZo/gmRmiCPcpMivc64U=)
2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: R53dU3ZlIP96qW0cRhCgruFCOrHHq5KRNU0XcZzxc9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:e1:42:90:8c:f5:c2:67:e4:03:fb:fc:3e:13:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Validity
Not Before: Nov 4 09:00:44 2025 GMT
Not After : Nov 5 09:00:44 2025 GMT
Subject: CN=977b76966274054cc007ba6781993f4a40ccdef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:f5:4a:5f:be:1f:34:64:27:b7:c8:a4:97:
4d:ac:34:9a:e6:97:20:30:bf:d1:aa:22:fd:5a:43:
8a:f5:a0:66:cc:a8:e2:83:5c:27:4f:ad:66:94:00:
97:f9:41:1b:16:f9:57:cf:6b:52:5f:f1:25:8f:59:
6c:c1:62:5c:3f:8a:a0:2d:cc:e7:2e:45:7d:3f:3d:
5a:f1:bd:44:2b:2d:a4:98:08:05:7b:60:9c:40:3f:
c5:7b:df:c4:a4:a2:a3:93:8b:65:60:ea:a4:6a:2d:
46:5c:6a:e5:52:28:0b:d8:d4:58:2c:ab:7b:68:aa:
dd:8a:0e:c5:02:90:f6:00:38:9f:1b:59:cf:f9:d8:
a4:7c:ab:02:af:09:ad:4b:2f:ee:39:5f:e3:17:b9:
3a:ba:66:0d:50:7d:94:c7:66:4a:c4:6a:c2:d1:a5:
42:17:87:23:03:9a:3e:ba:4f:fc:19:bb:8c:e7:96:
10:1f:d7:11:ea:ea:d7:87:5f:2e:51:57:a4:1e:7a:
0a:89:0d:4d:da:0e:a4:50:12:a0:be:b0:ac:a1:49:
ec:8b:74:90:7a:2d:bc:de:23:3d:07:83:f0:b8:cb:
45:02:88:b2:76:da:f0:da:cc:41:e0:6a:a5:f9:51:
e2:39:38:38:44:1f:b2:e9:1d:d7:00:ba:46:f9:17:
26:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7B:76:96:62:74:05:4C:C0:07:BA:67:81:99:3F:4A:40:CC:DE:F1
X509v3 Authority Key Identifier:
keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1a:f1:e8:be:ba:34:1e:e7:a7:97:c6:76:f4:4c:fc:40:2b:
07:d3:80:53:b2:a2:3b:89:8e:65:dc:84:ff:80:1c:a9:20:31:
bb:7a:d3:68:1b:ba:32:f4:4a:6e:3f:e4:08:ab:4f:41:d0:af:
01:c3:63:87:5f:a8:54:ca:89:1f:a1:17:4d:d3:4e:99:43:54:
68:32:97:f9:39:59:80:8d:f1:ff:b1:71:6b:d1:c5:75:e9:60:
df:da:82:3b:19:a6:e8:45:9d:54:c5:f1:d1:7e:dd:21:c9:63:
bc:82:ed:84:07:fe:ee:c8:a8:34:f4:dc:75:29:1c:73:bf:2d:
04:a8:03:5d:44:ed:43:c1:44:00:04:94:aa:05:8e:ab:60:2b:
db:81:e5:18:f0:af:93:13:75:89:f9:27:cd:34:c4:65:95:42:
7f:b9:2b:8d:70:f9:06:90:34:b0:de:c1:7d:9d:a1:03:42:51:
67:cc:2d:43:fd:97:94:a5:c8:0a:6c:b7:5d:11:c9:c8:b2:05:
a4:64:c1:ea:7e:63:27:e7:45:d5:69:e7:29:c4:11:b6:64:9e:
47:da:3c:6e:34:dd:18:b0:01:8f:02:2a:96:3a:65:aa:2f:57:
ca:0d:b2:71:5c:97:b2:62:8a:82:37:e6:83:a4:77:76:59:13:
b8:89:82:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:47 2025 by rpki-client