Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
File: VRGWi3l6ylfWEYAak6hcuGTkPnI.mft (raw, json)
Hash identifier: D6QKXxF7AxFn2q3Pxf+JZzNwqVMYMw4sBOYKxx8Isbg=
Subject key identifier: 11:F2:1C:FA:39:7D:C7:07:52:5C:DA:AF:E8:21:4C:99:30:FE:57:E4
Authority key identifier: 55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
Certificate issuer: /CN=5511968b797aca57d611801a93a85cb864e43e72
Certificate serial: 019A4DE1AF6F1B78CB451E0C4AD71A69CD5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
Manifest number: 0FE3
Signing time: Tue 04 Nov 2025 08:00:27 +0000
Manifest this update: Tue 04 Nov 2025 08:00:27 +0000
Manifest next update: Wed 05 Nov 2025 08:00:27 +0000
Files and hashes: 1: FkEK24gMOi9MxsRr642Srdl8lHQ.roa (hash: DtYbP2drcIzf0g2tEEsCLYpdXSaGIQ0MZgdI48xnP+Q=)
2: VRGWi3l6ylfWEYAak6hcuGTkPnI.crl (hash: cOx+Bxxed46/n+j+6Kob9sDr6UiUV8MrKzcGPUR/oWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:af:6f:1b:78:cb:45:1e:0c:4a:d7:1a:69:cd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511968b797aca57d611801a93a85cb864e43e72
Validity
Not Before: Nov 4 08:00:27 2025 GMT
Not After : Nov 5 08:00:27 2025 GMT
Subject: CN=11f21cfa397dc707525cdaafe8214c9930fe57e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:22:87:d0:cf:a4:9b:16:e7:f2:98:2a:50:c6:
87:a5:9a:eb:83:2a:f9:87:e2:36:c8:ab:2e:ff:cd:
4c:ff:d3:5f:65:1b:0f:6f:cf:9b:0b:01:88:45:b8:
47:81:aa:e0:a0:42:44:9b:13:81:45:2f:b3:3e:28:
c3:98:fe:5f:d8:4c:f8:fb:cd:e2:70:54:64:fe:23:
24:5e:d1:1c:78:8d:63:22:c2:41:dc:97:45:c0:29:
0a:73:74:5a:7c:84:7c:21:cb:44:01:94:26:6c:49:
f8:a6:9e:a4:e7:37:da:69:39:14:73:bb:72:c9:26:
80:48:82:06:14:72:3b:39:3b:89:ab:c0:64:b7:67:
73:eb:22:b3:f8:bd:f2:ff:e3:84:f9:fd:63:be:2e:
78:de:17:3d:c1:a2:2e:b9:7e:1f:d1:65:30:64:c8:
52:18:75:3d:ec:34:77:3c:df:15:5f:27:d0:8e:26:
7c:38:b7:ae:5d:9e:08:1c:8e:01:48:04:d2:0a:f6:
e4:e2:57:8f:c7:39:24:58:be:59:43:a6:e9:dd:14:
51:87:ed:3a:4b:7b:c0:2d:9a:36:a6:ac:3c:05:89:
d0:4f:97:4a:21:d9:77:4c:c5:d7:54:bf:72:09:11:
81:58:2f:95:91:79:8c:7f:ad:d9:60:1c:54:b3:bd:
c5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F2:1C:FA:39:7D:C7:07:52:5C:DA:AF:E8:21:4C:99:30:FE:57:E4
X509v3 Authority Key Identifier:
keyid:55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:51:06:5a:1a:7c:4e:fe:21:f2:22:3f:c3:bf:71:42:6a:47:
50:cd:dc:76:80:33:c2:78:37:9a:c9:49:6d:96:22:55:1f:11:
68:02:2d:f0:69:2b:e7:b0:8c:cc:19:e0:4d:2b:a6:fb:ef:ca:
25:48:40:15:4f:82:7d:00:4e:0b:88:d1:51:89:31:a5:dc:26:
99:8e:19:85:94:75:bd:35:b4:98:55:15:49:c1:ac:0f:9e:d6:
72:85:a8:94:b0:26:6a:e3:be:7f:4b:52:4f:9e:69:32:17:98:
f4:00:86:d9:62:c9:60:32:c6:1b:12:a5:73:d6:01:e3:78:30:
e2:17:90:45:98:a3:a8:ed:e2:2a:05:f0:82:c5:e4:c8:bf:06:
43:19:58:08:c3:4d:99:be:8d:c5:04:65:94:01:c0:bc:59:42:
af:b1:2e:96:a6:4a:36:73:fb:be:b2:26:50:36:e2:ed:bf:07:
f4:1d:8c:08:4b:d6:82:ec:af:98:11:73:4e:2b:fd:a0:67:ae:
0b:2a:f5:a9:7c:36:94:c6:00:f5:f3:5c:61:42:17:6a:a8:bc:
8d:4d:2a:be:68:0c:5d:2b:25:09:c2:10:da:06:8e:71:fc:2a:
b0:de:05:32:4d:d3:d0:b3:68:d4:b4:c2:eb:9e:d9:7a:65:2c:
f1:37:4b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:33 2025 by rpki-client