Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
File: vrfYT-FaMkPBAANHsJkLpGuzrkI.mft (raw, json)
Hash identifier: y1NFuNBWQTgL+snu42CEvC3qJ4PoMWY6b82R4SX8AdY=
Subject key identifier: D9:5F:96:C5:6F:43:A0:CF:80:BA:15:F5:36:60:46:A7:31:FA:F2:EA
Authority key identifier: BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
Certificate issuer: /CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Certificate serial: 019A4EF5B2CE3212C6AE119AD3BEE43F5C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
Manifest number: 073E
Signing time: Tue 04 Nov 2025 13:01:56 +0000
Manifest this update: Tue 04 Nov 2025 13:01:56 +0000
Manifest next update: Wed 05 Nov 2025 13:01:56 +0000
Files and hashes: 1: 4JbsqghTrIDqYvxRn3KkEBvNEXw.roa (hash: tPrE7VB6YTkQk/rEZVSQYz48H4Rfa9ADrk+TF9kaYiY=)
2: vrfYT-FaMkPBAANHsJkLpGuzrkI.crl (hash: /bMhWwx3awebTOx0erwmNm4Xe5qaI1Wyj3C3VTsIIXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:b2:ce:32:12:c6:ae:11:9a:d3:be:e4:3f:5c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Validity
Not Before: Nov 4 13:01:56 2025 GMT
Not After : Nov 5 13:01:56 2025 GMT
Subject: CN=d95f96c56f43a0cf80ba15f5366046a731faf2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c8:50:1f:36:62:bc:47:48:30:35:d3:40:ec:
48:37:28:77:23:74:20:f4:32:92:4e:c9:62:21:db:
1c:57:c5:bc:4a:97:3c:4a:3f:e3:4f:55:7f:32:4f:
87:45:00:2c:27:ff:9f:46:75:dd:98:74:c2:4a:e8:
54:3e:99:41:44:62:82:25:95:02:94:58:f5:52:a6:
96:ac:11:da:38:63:b6:59:68:e6:11:12:6e:9c:6b:
4e:7f:d0:dd:8c:c4:b1:3d:21:74:08:70:c4:91:b7:
7e:ad:19:f1:9f:51:26:83:08:46:15:9f:5b:44:26:
7d:94:7c:dc:4e:f1:14:f1:c0:9c:99:1e:7a:68:59:
9c:29:04:0b:21:d5:39:3a:50:1c:c1:a1:5a:c0:8d:
c6:5d:1a:94:4c:cc:99:11:9d:2a:7c:00:ed:39:33:
4a:6e:df:e3:65:6e:60:4a:37:db:50:36:0e:0d:37:
b2:e5:81:24:45:12:a5:e8:3f:c9:b8:ab:27:be:dc:
79:cc:73:6b:06:dc:be:4d:4e:be:06:45:60:d4:c6:
14:9a:59:7c:5b:a0:71:57:e5:46:80:5d:ed:ee:cf:
77:f6:01:0f:38:71:2f:8c:cc:92:23:67:31:a9:64:
84:2f:a0:43:e0:d4:f3:2f:e7:c2:80:f8:ad:63:1e:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5F:96:C5:6F:43:A0:CF:80:BA:15:F5:36:60:46:A7:31:FA:F2:EA
X509v3 Authority Key Identifier:
keyid:BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:83:14:9b:51:a1:5c:4b:63:08:9c:be:35:fc:23:d7:46:44:
cd:b2:3e:a9:41:2e:06:47:99:1a:37:77:b1:09:54:88:46:a8:
ff:b7:40:ef:27:6e:89:33:09:36:bc:9a:30:d2:91:02:11:02:
a3:c3:21:1f:85:80:e3:b8:a8:9e:b0:c2:d8:b6:4b:b5:33:70:
33:e6:1e:7b:b6:ab:bc:f8:65:3a:24:70:d9:0a:c2:85:4b:a6:
5a:fb:9b:9e:1e:fa:76:02:c1:af:52:40:39:57:ef:d6:43:45:
c9:6a:4d:11:cc:df:f2:51:53:f5:18:52:5a:30:d6:5c:30:c2:
df:5c:f1:5c:1b:7d:39:31:2c:de:34:3f:9f:d7:6f:ab:7b:7d:
91:8e:35:c0:65:0c:af:d7:25:25:de:da:7c:c9:79:a6:59:5f:
46:6c:b3:54:5f:0e:5b:a3:ee:33:6f:32:5e:4f:17:7c:dc:98:
6b:64:c2:cf:06:ee:67:13:43:e0:3e:e9:1d:95:e2:6c:49:fa:
3a:ae:ce:cf:38:1a:3c:a0:d6:76:1a:b6:3a:62:06:c5:66:a6:
f5:21:d3:bf:ab:b4:f2:56:16:d0:a0:88:d8:60:1c:67:10:cc:
9a:0c:7c:24:2d:2b:f2:49:82:0c:e5:f4:6b:c9:fe:e3:9a:de:
f1:7e:8e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:44 2025 by rpki-client