Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
File: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft (raw, json)
Hash identifier: tP/9sga42QvM0Tlmv+XffvxwyBTmhidDpw42t5mMPuw=
Subject key identifier: DF:29:BD:6A:E2:1B:2F:36:B0:E4:BD:4C:77:98:7E:0E:68:2A:FE:8A
Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
Certificate issuer: /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Certificate serial: 019A4F62C0F5BE4208F2FCC3FAF885126570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
Manifest number: 0A5B
Signing time: Tue 04 Nov 2025 15:01:03 +0000
Manifest this update: Tue 04 Nov 2025 15:01:03 +0000
Manifest next update: Wed 05 Nov 2025 15:01:03 +0000
Files and hashes: 1: 7nuD8elhlIUxcTnbEPvLA6ZLn5I.roa (hash: 90o2vgvA2ZcVDu1EqRM6Q9Z2wROKMEItuuXmbaFjrpw=)
2: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl (hash: Kvto0BBA81Ib2wLm2JR9XV4J/VcoI/1uOecrwQmBpL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:c0:f5:be:42:08:f2:fc:c3:fa:f8:85:12:65:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Validity
Not Before: Nov 4 15:01:03 2025 GMT
Not After : Nov 5 15:01:03 2025 GMT
Subject: CN=df29bd6ae21b2f36b0e4bd4c77987e0e682afe8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b3:c6:74:0d:32:c9:5a:e7:61:fa:79:77:78:
cc:fb:31:ee:2a:ea:74:71:94:a2:77:8a:a3:75:c7:
56:7f:89:0d:21:89:45:8b:60:e7:05:64:e5:1f:b7:
6c:ba:7a:94:34:1e:91:87:b7:fd:51:00:e2:85:30:
6a:70:85:43:7a:3d:bc:cc:65:3a:1f:24:49:56:eb:
ca:fc:47:a1:7c:db:24:d6:e8:37:75:99:b3:df:d5:
64:c5:c5:8e:8d:b7:ae:07:4b:88:1f:1b:96:ef:0d:
74:56:14:e3:82:67:c4:84:dc:9d:9c:72:fc:ae:76:
3b:32:b9:cd:a4:88:b5:4b:e9:4c:1c:a0:43:a0:40:
2e:3f:7d:a4:9c:15:05:cb:66:21:00:e5:e7:9e:84:
17:4c:e5:ce:c7:7f:97:f7:26:71:e1:50:1e:d3:5e:
ab:94:b3:02:18:7b:6d:a4:8a:84:10:57:7f:7c:21:
f9:ed:16:0a:ec:42:b8:c5:9d:08:28:c7:f3:77:1b:
a8:61:4d:34:e4:c4:8a:6e:f0:7c:1a:51:33:17:76:
2c:67:e2:0e:fc:66:03:bc:db:3f:7f:8c:1b:07:bb:
a4:1c:5f:7f:61:eb:92:e7:16:5b:5b:f1:e6:af:a1:
0f:4b:bf:3c:75:bb:a0:7c:b1:a1:df:52:b2:ec:74:
30:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:29:BD:6A:E2:1B:2F:36:B0:E4:BD:4C:77:98:7E:0E:68:2A:FE:8A
X509v3 Authority Key Identifier:
keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d6:7f:61:c9:f4:f2:68:d1:e3:5d:6b:95:bc:30:77:d1:70:
ef:23:66:26:9f:5a:9a:fd:2c:a5:61:14:36:d7:14:88:28:1c:
5b:4b:f9:12:b7:b3:7c:b0:6d:07:ea:c0:aa:a8:9e:eb:62:27:
ec:a9:b1:a6:23:ca:31:13:8d:c3:41:b6:b8:5a:7b:f8:5c:70:
ef:d2:8f:31:ee:6a:7a:dd:49:90:67:a2:6f:cb:38:fc:c9:88:
2e:1a:3a:1c:29:66:a1:5f:84:f7:40:91:77:dc:cc:fe:c8:23:
2b:01:ac:32:7c:2a:04:43:78:9e:62:bb:bb:16:32:17:42:3c:
54:99:93:8f:99:1c:be:87:c4:19:d9:f4:cc:89:3d:26:51:e7:
1c:0a:65:4c:f5:94:81:6a:52:2d:e5:28:98:02:79:56:c9:32:
5a:7e:22:71:b4:50:6e:b3:c9:6a:30:a1:58:4a:ad:16:a5:88:
10:7a:1d:4f:19:22:57:2d:27:14:4f:2d:03:89:98:25:ed:37:
20:86:f2:af:c7:45:ee:e2:67:5b:73:6d:26:59:eb:4d:ee:a1:
9e:7c:d6:96:99:1a:30:77:32:1c:5c:5d:ac:92:fe:e6:dd:25:
4a:85:8b:60:12:23:7f:6c:60:db:4c:a7:bd:89:95:70:b9:c9:
29:29:fc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:26:07 2025 by rpki-client