Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.mft
File: 92_VaGdIVkFeseITQqrzI7N7ei4.mft (raw, json)
Hash identifier: pLNQXkndHtwYodBKb0su/QSpyF0h27G7HmDTNxr0MKM=
Subject key identifier: EF:F9:D1:C0:AC:0D:C3:CA:AB:66:A8:D0:81:11:FC:FB:27:FC:88:C4
Authority key identifier: F7:6F:D5:68:67:48:56:41:5E:B1:E2:13:42:AA:F3:23:B3:7B:7A:2E
Certificate issuer: /CN=f76fd568674856415eb1e21342aaf323b37b7a2e
Certificate serial: 019A4EF5066242CB4F60E14C0C6905125472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.mft
Manifest number: 085A
Signing time: Tue 04 Nov 2025 13:01:11 +0000
Manifest this update: Tue 04 Nov 2025 13:01:11 +0000
Manifest next update: Wed 05 Nov 2025 13:01:11 +0000
Files and hashes: 1: 92_VaGdIVkFeseITQqrzI7N7ei4.crl (hash: 0Ar8RfXt8kczZbqsF2TV/EREVU+DpKduF2YHNev64aw=)
2: OPqqFqqV-JrWbYss9QbQxTdrKKA.roa (hash: hghe6z1NjfdWOVEuMaQtAPQZcmsET9fhQeAJCEDcWYc=)
3: XpHeTFY2mYYnagfXksXKRRYL9eo.roa (hash: zfpzXDwMseOkymUIjByr6+zStQyrXd89cMIv7XGG4KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.mft
rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:06:62:42:cb:4f:60:e1:4c:0c:69:05:12:54:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f76fd568674856415eb1e21342aaf323b37b7a2e
Validity
Not Before: Nov 4 13:01:11 2025 GMT
Not After : Nov 5 13:01:11 2025 GMT
Subject: CN=eff9d1c0ac0dc3caab66a8d08111fcfb27fc88c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:85:cc:cd:7d:d4:17:d3:14:ec:30:50:7d:d8:
b2:d7:83:1f:76:16:0c:5e:1c:51:49:a4:91:a8:54:
2e:c3:cc:bc:38:bd:ed:db:19:45:52:a9:54:04:7b:
f2:74:53:8d:66:f7:10:52:25:28:de:56:78:60:a1:
c7:05:c6:90:59:d4:62:99:32:88:a3:dd:1d:b3:53:
92:fa:74:69:0d:53:e8:72:21:01:2e:12:76:59:ef:
3c:78:32:20:9b:42:99:ae:13:a5:ad:70:3d:b0:c3:
23:bb:33:35:f0:9e:6f:a0:bb:d3:9f:74:fa:99:c7:
84:8c:31:b4:4d:7a:d4:14:a9:b7:33:9a:58:ad:3f:
bd:46:4b:ca:47:78:9a:39:e4:55:a2:aa:df:80:f0:
ee:1d:e8:d4:4a:d9:dd:24:e0:00:3f:bd:dc:ca:39:
b9:c2:c1:e4:c7:62:48:2f:8a:44:9c:aa:c8:9e:dd:
64:db:0f:38:83:09:ed:48:a0:be:fa:45:c6:9a:1a:
c4:2a:0f:6c:d5:01:1d:e2:19:61:32:dd:0c:64:33:
5a:54:e4:10:3e:51:7f:39:c3:14:09:fb:ab:81:3f:
15:ec:26:75:bc:76:01:31:16:2e:61:27:50:fe:b6:
4f:d1:cd:ad:13:a9:2d:08:9f:03:9c:60:5e:56:8c:
40:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F9:D1:C0:AC:0D:C3:CA:AB:66:A8:D0:81:11:FC:FB:27:FC:88:C4
X509v3 Authority Key Identifier:
keyid:F7:6F:D5:68:67:48:56:41:5E:B1:E2:13:42:AA:F3:23:B3:7B:7A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8e:23:e0:30:17:ef:0f:bf:91:f1:3c:cf:ba:e0:19:e5:4d:
5f:c3:4b:6f:3d:3c:70:c0:5f:39:6d:0c:da:f6:5c:99:80:95:
a0:87:53:64:cb:1f:55:72:75:30:9c:e5:e3:aa:93:ef:a7:a5:
29:1f:52:d6:3c:f0:38:f6:bc:4d:7e:0f:c9:84:2a:99:94:3c:
96:76:5d:fa:5e:01:52:f5:6c:87:89:26:73:2e:14:46:51:52:
45:b4:e7:1a:0a:21:6c:39:02:02:5d:47:63:86:30:9c:d0:6b:
03:dc:18:69:69:4a:f9:c8:21:c0:e5:b2:ce:7e:d7:f0:01:1d:
c9:44:08:d4:26:1f:97:86:19:f4:01:58:f1:42:ec:60:66:b9:
12:c7:63:54:91:6e:8a:87:bb:35:ee:0b:b9:b9:82:82:0a:41:
2d:d8:31:9e:94:e8:a9:a7:b4:9a:9c:fb:04:8d:0e:19:79:03:
87:fa:64:8a:40:3c:50:2f:02:f7:04:b2:f7:9a:d2:6c:9c:5c:
16:a1:ab:ab:af:ac:2e:3a:0f:13:34:d0:94:c6:f7:e1:40:64:
6d:05:98:0b:46:18:d2:c0:8f:10:11:17:09:4c:fb:a8:ad:ab:
de:08:04:94:1d:a3:43:b5:b1:c5:e6:a4:d3:9c:e6:2e:c6:c4:
e3:1e:80:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:16:41 2025 by rpki-client