Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
File: VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft (raw, json)
Hash identifier: c28di6y7PeZFeuDRGv0XaPgF8NLGD97cVJkWs3vOyQo=
Subject key identifier: AC:3A:06:59:1A:59:F5:A0:0F:B0:1A:2A:DD:CF:FA:58:48:3C:0D:4D
Authority key identifier: 54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E
Certificate issuer: /CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e
Certificate serial: 019A4F2B685F0F2498ED4ED59656FD43923F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
Manifest number: 137D
Signing time: Tue 04 Nov 2025 14:00:35 +0000
Manifest this update: Tue 04 Nov 2025 14:00:35 +0000
Manifest next update: Wed 05 Nov 2025 14:00:35 +0000
Files and hashes: 1: VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl (hash: k7BuuH2BTbRpHSG2rKjOOdXHtHyh0W+ruLDAamqmSrY=)
2: zAJ4z_rLfNTVDiMWL6ncN_yYa24.roa (hash: EtILhqnqDOPzVUQWUC5GlrRe7wnUPr/w8yX9c4PVZr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:68:5f:0f:24:98:ed:4e:d5:96:56:fd:43:92:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e
Validity
Not Before: Nov 4 14:00:35 2025 GMT
Not After : Nov 5 14:00:35 2025 GMT
Subject: CN=ac3a06591a59f5a00fb01a2addcffa58483c0d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a6:ed:9a:37:ae:65:6f:ee:71:12:af:42:54:
55:60:9d:23:02:70:ae:f2:5b:25:1a:a6:90:98:b8:
1f:bd:cb:a0:40:5a:52:65:9d:ad:8d:b2:1c:dc:2f:
40:5b:9f:de:e5:07:55:d8:d3:f6:af:41:85:a4:50:
1f:7c:16:4f:21:a8:4d:97:bd:b3:97:d5:3f:7e:12:
09:2b:8c:46:18:c1:cf:d6:cb:0d:29:c9:1b:05:1f:
de:11:da:75:cc:a3:a2:34:cf:a5:16:e6:57:02:ac:
50:8b:34:74:5e:75:27:9b:02:88:59:3d:79:b7:26:
85:de:0c:70:ad:d5:05:7a:01:d5:1c:79:08:63:45:
0e:90:ac:0e:5c:30:43:b2:03:bf:10:2d:7b:09:67:
f8:5c:45:55:ae:6e:c0:e7:8f:80:ad:1b:48:a7:bc:
56:d6:ae:67:6c:28:53:28:be:cd:9d:a3:76:bf:67:
44:da:63:e9:30:cd:28:a6:8d:27:aa:03:64:ce:c4:
e5:5c:4d:43:6f:f4:29:22:c1:60:df:6e:78:f1:90:
61:26:fd:a5:e1:82:9d:a9:cf:08:70:cc:47:ee:2c:
c7:41:f5:ce:0c:85:df:46:e0:b5:41:67:d2:23:99:
7d:67:25:38:87:b5:76:17:33:4b:19:1c:d5:e8:e3:
e9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3A:06:59:1A:59:F5:A0:0F:B0:1A:2A:DD:CF:FA:58:48:3C:0D:4D
X509v3 Authority Key Identifier:
keyid:54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:58:b2:20:b6:b5:4f:15:51:3f:da:c1:a1:9a:3d:45:00:af:
71:45:22:e6:50:8f:a9:b6:da:65:33:1f:44:fc:01:1c:35:84:
68:5f:7e:35:72:ff:eb:36:c0:1a:58:6e:f7:5e:51:8b:47:a8:
6d:dd:98:60:50:47:37:54:6f:65:a8:35:62:41:ea:9a:99:c0:
5f:2d:e0:b5:23:74:ec:e9:cc:9b:2c:28:3d:8f:7c:dd:1c:cb:
a3:f2:54:94:55:5d:c6:24:dd:77:36:0b:6d:d6:c8:76:2e:c0:
f6:80:75:c1:77:4c:35:4d:c7:c8:8c:c1:58:5b:60:8c:a6:6c:
e1:9b:a0:e7:e6:e7:8b:c0:3b:c4:9f:c0:f4:2c:b7:10:db:d4:
41:01:8a:ac:8a:90:b0:5d:3e:b4:4b:2d:7a:e6:e5:86:34:81:
aa:80:f7:ae:44:0a:1c:a4:6e:f5:1a:94:f0:d4:2d:b5:53:21:
aa:78:50:9c:f1:e8:f7:d3:60:2c:9d:46:66:89:e7:3c:69:35:
4d:3d:2c:eb:cc:e5:4f:a1:e1:f7:5d:da:86:54:fc:f7:fc:2c:
20:2c:1e:b0:e7:4d:8a:6b:00:34:95:86:ba:b1:a8:d8:7e:8f:
da:ab:c6:2c:88:78:42:7e:c0:6f:e8:9c:30:58:9f:37:5c:d6:
1d:c8:9d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:29 2025 by rpki-client