Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
File: vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft (raw, json)
Hash identifier: /cmcErlKeBknnQfnZ68vZCt32fcG1rTZomnlN8QBHc0=
Subject key identifier: 57:C6:FF:B5:79:0E:1E:4A:C7:AB:E0:87:F0:68:B1:DA:C6:C5:B9:42
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Certificate issuer: /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial: 019A4E189CAAEB455B0455DAEABFE72403C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
Manifest number: 152A
Signing time: Tue 04 Nov 2025 09:00:27 +0000
Manifest this update: Tue 04 Nov 2025 09:00:27 +0000
Manifest next update: Wed 05 Nov 2025 09:00:27 +0000
Files and hashes: 1: Ghw61h9q0dZx9p33fCHZwLJ--4g.roa (hash: XENiDzusC8HHdBPr6eoujfkQa5XCC/wJpP0SovK6s5s=)
2: W-gPHpmpBiVpNwoTM89LZF-6eKQ.roa (hash: 1KJlUjxdJ+ruVUfDwdtSoFOvk+NECBzB6oYJ432Oeqo=)
3: gNsZz63lZz-xYYJApJes6zZtWTc.roa (hash: oq/U8u4Y8U1JtfeAS0wF/F6M4QBJJs7QTcA9o7FJ9go=)
4: l-fA27baArnfz8uDdDUN4TrASTU.roa (hash: mDdwZSps/Tm3oeaUYl4v4D4Q07yFttXjrmZKf1wuoqE=)
5: uPPM1c3qaDPcgQcMOMUY1UnD8bw.roa (hash: TZFGaoE1GRn/2zGm9yP4VVapPA1t9azRKGFIQqjd5T4=)
6: vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl (hash: NDBIOCG+bht1RMYDPf9XIgrsQJbrHEMtsPF1m6prTVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:9c:aa:eb:45:5b:04:55:da:ea:bf:e7:24:03:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Validity
Not Before: Nov 4 09:00:27 2025 GMT
Not After : Nov 5 09:00:27 2025 GMT
Subject: CN=57c6ffb5790e1e4ac7abe087f068b1dac6c5b942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:c9:44:0d:6e:6d:7e:c6:d4:a8:8d:df:2f:
dd:55:c8:b8:1b:3a:79:a3:fb:19:90:b5:93:b6:29:
d1:bc:fc:a7:22:72:6f:d1:71:d8:85:6d:f0:1b:df:
98:df:75:90:57:1a:7c:64:70:dd:20:81:ec:c5:60:
0c:fe:06:b6:4b:69:94:d3:b8:b1:f2:41:9b:75:c4:
c1:a8:01:30:a8:89:8b:c5:ef:a5:69:6f:65:89:d1:
43:bb:94:8e:e4:23:c3:40:ff:85:73:ff:bc:0f:63:
13:c8:04:24:ec:c8:5e:df:c7:95:85:11:ed:89:48:
1b:f4:2d:63:5f:16:7a:e4:5e:b3:ac:06:5e:b4:ff:
38:60:e9:81:69:d6:e1:6f:74:de:17:ed:6d:8c:53:
33:d8:ed:6b:02:29:d2:6b:7d:76:d7:23:3f:f1:d5:
ab:46:55:d6:d2:f6:08:c9:88:01:a6:42:65:7c:e3:
d9:86:0d:67:fa:10:db:f2:56:bc:34:a8:34:0a:f7:
ff:df:38:9d:3c:15:02:cf:44:c8:4d:be:d0:cf:c1:
95:87:51:91:db:51:e8:a8:66:2d:82:4d:6e:f0:22:
de:2d:d6:b5:d1:89:01:54:89:e1:09:ed:ed:d8:ec:
7e:31:14:8a:15:18:13:88:43:8a:22:e1:92:8d:bd:
ec:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C6:FF:B5:79:0E:1E:4A:C7:AB:E0:87:F0:68:B1:DA:C6:C5:B9:42
X509v3 Authority Key Identifier:
keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:19:46:3c:8b:9e:48:bc:3f:9a:fd:e7:54:83:ae:08:59:a7:
57:04:85:df:31:de:f3:94:89:bf:1c:a0:1e:5c:1f:28:c3:ee:
5a:19:ce:8a:4d:d3:b9:9d:37:08:18:dc:b3:00:e3:b8:18:07:
e1:56:a0:9f:31:3f:74:25:0b:74:b4:87:1f:20:08:1d:5f:4e:
99:e2:a2:a9:38:bc:01:93:03:85:92:f3:b1:af:a6:55:f8:cb:
de:2e:d2:6d:3f:1f:ca:59:e1:15:be:d8:03:95:36:26:84:61:
4b:62:4e:36:47:d6:4e:75:70:fc:31:ef:9c:aa:5e:f9:53:9a:
8b:bd:f4:00:f9:fb:6c:84:f0:8f:b8:64:07:eb:b9:95:33:53:
59:15:5e:3c:53:d7:f0:7e:d1:a7:b7:67:72:c6:de:29:73:56:
79:25:97:b4:ea:13:69:7d:a2:5e:fc:ee:b5:60:c2:65:bf:83:
c0:a9:29:db:c8:d3:fb:20:24:79:56:70:50:b6:73:5d:ee:74:
df:cf:ef:ab:ea:96:60:16:40:87:ef:af:e1:6f:01:53:c2:2b:
bc:9d:ee:58:80:0f:6a:a8:af:74:46:2b:bb:75:71:28:86:94:
3d:33:db:d8:cb:41:48:1f:5e:79:57:f5:e8:ee:06:71:ce:68:
5c:b2:2a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:54:57 2025 by rpki-client