Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
File: VCG6S1ORYtfvGRpWYgSeUf3DYis.mft (raw, json)
Hash identifier: tZuuZIT8noBKzZCsBN7tvWLNJg61mozXH607UdhMo0g=
Subject key identifier: 40:69:8C:90:F0:DD:73:61:5E:C0:E1:D7:DE:C5:85:A0:48:36:6B:BD
Authority key identifier: 54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
Certificate issuer: /CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Certificate serial: 019A4FD07FE3352438A15BDE62B7791C1A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 17:00:55 +0000
Manifest this update: Tue 04 Nov 2025 17:00:55 +0000
Manifest next update: Wed 05 Nov 2025 17:00:55 +0000
Files and hashes: 1: QA9NVOBnP4tDAeAGKeBBrJK6jXk.roa (hash: /S3zUwTrf17IztbM7bS/w8GxX/h5PWsNVviHHhl5zF8=)
2: VCG6S1ORYtfvGRpWYgSeUf3DYis.crl (hash: XzNFpOb4eRypIskUh7jczQ8Q0bCpqDpRK+MMZiPeQ7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:7f:e3:35:24:38:a1:5b:de:62:b7:79:1c:1a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Validity
Not Before: Nov 4 17:00:55 2025 GMT
Not After : Nov 5 17:00:55 2025 GMT
Subject: CN=40698c90f0dd73615ec0e1d7dec585a048366bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0b:72:45:da:9e:c0:8c:22:eb:43:43:70:e2:
3c:d3:10:e2:2e:21:27:cf:ca:b4:6e:e9:09:85:c6:
4e:53:d3:ba:d5:0a:97:a2:97:2d:b4:58:bc:20:a9:
85:91:50:af:45:25:95:0f:f4:4c:60:a8:6a:b5:9e:
6a:98:4a:ed:3f:65:68:a1:83:f7:97:0d:f0:af:a5:
d6:21:46:78:b0:b1:41:a8:ac:71:be:90:f7:88:d6:
11:51:5f:27:f0:cc:bd:fd:7b:2d:20:02:1f:95:2a:
32:5b:65:2d:ce:66:b4:a9:70:eb:cb:ed:1b:d2:c1:
07:d4:fa:7e:da:49:4a:30:68:a8:82:52:4f:89:d8:
51:8c:a3:a7:01:3d:73:31:ac:4a:c7:2e:91:9d:9e:
52:1a:5c:31:ef:23:f3:cc:47:eb:60:83:4c:54:7d:
db:67:13:bb:d6:8a:a5:3a:0f:2f:4a:08:da:21:92:
2c:f3:0d:4e:89:51:e5:17:84:bc:6e:e9:0a:5e:f8:
f7:32:a5:de:46:25:a0:1a:47:24:a8:55:db:3a:3b:
2c:c5:51:9e:d2:dd:23:ef:8e:04:5d:90:b6:1a:b2:
e4:18:0b:3d:56:31:0e:85:97:2a:ef:c1:89:24:e1:
d8:f2:4c:66:a6:e0:5e:7a:14:2e:02:73:71:9d:aa:
4f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:69:8C:90:F0:DD:73:61:5E:C0:E1:D7:DE:C5:85:A0:48:36:6B:BD
X509v3 Authority Key Identifier:
keyid:54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f7:9a:a2:80:63:56:ab:fb:6a:b2:ad:31:e5:26:0b:9d:88:
a2:06:4c:f8:53:31:df:d1:df:0a:65:73:ea:ba:04:5d:79:32:
b1:a0:ce:ec:6d:b9:72:d2:13:46:b6:5c:8b:e3:2f:60:2e:06:
88:e1:07:5e:eb:cf:be:03:c4:42:ba:c9:92:ce:17:8a:89:ff:
6b:b8:09:b4:11:23:19:b4:4d:82:5c:db:29:20:16:33:cd:a8:
85:cd:c7:37:69:0e:84:25:ea:b7:73:bb:e8:7d:ce:56:5d:7a:
41:da:c0:fb:c7:d1:0e:1b:e1:25:81:d9:92:30:18:37:16:b0:
e4:4a:65:b0:dd:ec:15:2a:70:ed:47:46:0c:21:32:14:6c:f0:
ad:ae:9a:b6:cf:c8:f3:4e:98:9e:5f:8c:2d:65:b4:cf:41:ac:
c4:8e:7f:08:e8:66:a5:23:fe:0d:e2:bf:cc:35:81:98:91:8f:
1a:0d:5f:78:2f:5f:bc:87:c4:47:3f:59:95:1a:b0:97:37:e0:
72:1b:cb:13:74:90:88:ff:43:32:38:87:91:63:02:2f:3f:44:
7e:20:27:5f:bc:44:de:46:cc:c6:c5:47:0b:99:7c:a5:fe:9e:
3d:64:cb:2e:3a:d1:9a:78:95:f5:17:09:ba:fe:b5:ef:16:f9:
ca:73:f6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:39:11 2025 by rpki-client