Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
File: VPQtulHsKDXT5NCj2MSL8yL2vbU.mft (raw, json)
Hash identifier: NsSfa2gH/0ZamuXw4x/eXPdYdbMxZ7U8dFhTVR7wkG4=
Subject key identifier: 35:6B:B0:CE:9B:8E:B9:C5:7E:21:D3:C6:18:F9:AF:C8:2D:12:DE:D5
Authority key identifier: 54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5
Certificate issuer: /CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
Certificate serial: 019A4D05F26D8517B905B6BE69B4F29768F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
Manifest number: 0B8D
Signing time: Tue 04 Nov 2025 04:00:26 +0000
Manifest this update: Tue 04 Nov 2025 04:00:26 +0000
Manifest next update: Wed 05 Nov 2025 04:00:26 +0000
Files and hashes: 1: VPQtulHsKDXT5NCj2MSL8yL2vbU.crl (hash: Qb/7pg+mwesaqBjmb212/gfhrw9ivOPQbcuKIvbCpvQ=)
2: mUHt0oKQoXS4NriBI7EGKLoM09o.roa (hash: SD6es8T2Vz3P454Q+Wryhaz45Qcvfh6pBeSnz1RWRNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:f2:6d:85:17:b9:05:b6:be:69:b4:f2:97:68:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
Validity
Not Before: Nov 4 04:00:26 2025 GMT
Not After : Nov 5 04:00:26 2025 GMT
Subject: CN=356bb0ce9b8eb9c57e21d3c618f9afc82d12ded5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cb:35:87:c0:8b:f1:7a:a3:b6:16:76:16:9f:
46:d3:51:4c:74:db:22:8c:39:18:7a:d8:d7:81:d0:
7b:26:ba:c0:d9:61:77:66:ff:52:e5:fd:11:41:41:
5a:df:91:d4:ec:f1:d3:c0:dc:3c:02:7f:bb:c2:55:
0b:b4:a7:86:10:29:ab:c9:34:1b:7a:9b:7a:2f:76:
a7:c6:b4:66:bc:86:3b:bd:ee:d3:9b:3a:19:da:81:
50:8f:cc:ac:fa:4b:3d:9c:5e:2a:b3:cc:3e:e5:9b:
71:3c:43:3a:d1:a1:0a:f9:9d:31:2e:c2:3a:3b:10:
61:2e:ba:4f:52:eb:9e:07:c5:10:b9:73:fd:8d:a5:
23:52:46:54:ac:f5:96:17:ad:91:24:09:5c:56:07:
21:4b:3f:30:8b:98:95:8b:36:7d:b7:c9:56:7a:8c:
d3:e3:bb:50:3a:96:89:23:d7:94:e3:1c:6f:9b:49:
83:15:ec:01:3b:b8:7c:1f:3e:3a:f4:2d:4b:2b:9d:
2f:04:0b:ec:3b:72:9b:23:7f:c1:82:06:0c:50:e5:
b0:ae:ac:00:79:f4:d0:79:cb:54:bc:eb:d9:28:3a:
d7:b5:72:de:77:c2:05:1e:ce:81:13:b6:8b:77:1e:
e0:35:93:4f:a6:c3:da:42:6b:89:1f:67:4f:f5:eb:
01:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6B:B0:CE:9B:8E:B9:C5:7E:21:D3:C6:18:F9:AF:C8:2D:12:DE:D5
X509v3 Authority Key Identifier:
keyid:54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:33:34:d7:c3:37:6e:09:1b:8b:70:d0:d1:aa:78:0d:87:42:
db:a0:f6:bf:f9:8f:59:e6:b0:f4:07:85:a8:ea:52:2b:5e:db:
19:32:e5:1a:c8:a6:d6:4e:31:84:58:97:62:2a:b7:e5:85:c7:
6e:ac:47:7a:54:cc:33:ac:a6:9a:e3:d8:cd:c1:ad:ea:bb:3d:
d6:81:f8:f2:36:86:7a:6e:44:22:3b:22:74:56:fe:89:fb:74:
d8:d0:35:b5:82:0e:97:7d:22:7d:4b:21:3f:0a:45:5b:4f:99:
e1:e7:a9:87:0e:aa:2b:8a:17:a1:23:b3:00:99:9d:b6:a8:52:
4e:2a:a6:1d:b0:c4:de:b8:58:95:70:c0:0e:8e:f7:14:a5:19:
68:8e:3d:c3:5d:43:d6:03:4c:04:fa:c9:4c:bf:91:68:3e:5d:
33:ee:b8:eb:9b:a1:a4:fb:98:c4:77:1f:32:4e:b0:11:ab:fb:
ce:48:5d:ed:83:1e:88:05:f1:a4:fc:c7:d6:2a:8c:d7:4e:57:
fe:67:fd:22:28:09:d1:ed:07:e5:cd:60:20:7d:1c:24:e6:55:
e0:54:e0:71:f4:7f:f9:86:00:51:ff:84:d1:63:e0:b0:a0:76:
84:de:06:2c:6e:1e:65:de:ec:78:1c:39:82:34:38:e5:bb:b1:
67:0b:24:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:20 2025 by rpki-client