Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
File: VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft (raw, json)
Hash identifier: CBYkJF35UoJWwJkm81HaIl9CjzNPtGuiaMTvTSp3pM0=
Subject key identifier: 5B:64:7B:C7:59:3A:4B:2B:23:68:24:3B:8D:0E:EB:CD:62:23:3F:BF
Authority key identifier: 55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6
Certificate issuer: /CN=552986484ecd015857ebf61dc4b361302c7916c6
Certificate serial: 0199FC58E990A22D8B7C5775E19A77D1C342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
Manifest number: 0516
Signing time: Sun 19 Oct 2025 12:01:49 +0000
Manifest this update: Sun 19 Oct 2025 12:01:49 +0000
Manifest next update: Mon 20 Oct 2025 12:01:49 +0000
Files and hashes: 1: VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl (hash: IqeHqA6FeLrp02WOHJlj4oA6oNIHV5Nr9Y1Af1AFmHM=)
2: mpGMS7GoniScCIZ1yKqQ67UbO7w.roa (hash: cqVoNWXcKz6tLYUP/1j67v5QSUFr9HoUVD319m1SaB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e9:90:a2:2d:8b:7c:57:75:e1:9a:77:d1:c3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552986484ecd015857ebf61dc4b361302c7916c6
Validity
Not Before: Oct 19 12:01:49 2025 GMT
Not After : Oct 20 12:01:49 2025 GMT
Subject: CN=5b647bc7593a4b2b2368243b8d0eebcd62233fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:13:3e:1d:3d:a2:31:ca:7d:d8:a1:4a:3c:
01:82:c1:a4:ce:92:b2:d1:76:6e:d6:2a:2f:64:b3:
ca:85:46:37:ff:28:63:2a:fc:83:c2:a7:79:92:00:
7e:33:75:1b:ed:8b:19:31:5c:ef:9a:ee:98:ae:2c:
68:8e:8f:67:cb:fe:5e:0e:2f:35:61:fe:71:38:91:
5e:1c:73:67:ba:40:36:c1:0a:14:1b:ea:9a:bf:97:
25:c0:0c:3c:07:e3:97:08:86:8c:22:4f:f2:a7:37:
2f:f7:20:bc:1b:63:d6:75:ac:36:c0:bf:16:77:24:
a8:2c:9d:a8:ea:f8:da:74:d8:e1:90:a8:8c:9c:79:
9e:5d:21:51:16:af:fc:d8:1d:4e:0f:0d:ec:f2:62:
39:50:9f:80:75:ee:8c:17:5f:e3:46:26:6b:e9:8f:
05:ed:79:9c:49:52:48:c2:65:9a:2e:d4:8a:71:f6:
35:3c:4a:ba:f3:ef:a8:bb:fa:7c:58:e4:74:3b:6e:
75:9d:3d:b8:ec:0a:68:0c:9e:f7:9b:4d:af:e8:b3:
43:20:ef:97:e5:db:d0:6c:86:a0:e6:46:9f:7a:a9:
ff:3d:3d:89:72:67:4a:8a:8a:74:65:98:16:7b:27:
53:61:e5:eb:e1:2f:14:a3:26:72:38:95:ce:43:14:
04:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:64:7B:C7:59:3A:4B:2B:23:68:24:3B:8D:0E:EB:CD:62:23:3F:BF
X509v3 Authority Key Identifier:
keyid:55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:06:4d:2a:67:fa:bf:91:94:81:c3:b4:d5:69:5b:92:54:d4:
fc:31:79:68:71:5b:17:f1:a5:88:3d:5e:93:c4:a0:04:57:ab:
52:c1:c9:0b:79:59:86:d0:be:84:5c:f7:12:10:7b:6b:4d:bb:
3d:f5:ce:b1:aa:5e:71:97:9a:69:58:c9:8b:85:fa:eb:cc:5a:
55:2e:43:db:ae:ab:ad:fc:fc:58:2c:f4:a6:86:e3:1c:d9:6d:
53:56:82:29:db:a9:87:64:63:d6:f5:81:18:d5:99:2e:91:75:
7b:40:67:b2:88:ff:13:ed:cc:11:08:eb:56:c4:94:cf:a3:0d:
1b:66:34:14:d6:37:4a:d1:ba:91:17:7e:e4:2b:41:f9:3d:27:
62:f2:bf:39:91:43:4c:f7:35:96:f4:8a:4c:ca:49:24:5c:a8:
71:80:05:e0:c8:32:40:67:aa:bc:85:c5:e9:1a:26:cd:ae:53:
49:ba:17:6e:6b:a5:a8:d4:df:d4:e8:68:f8:8f:e6:a8:3b:66:
0a:2e:d3:ee:34:f6:18:ac:e1:11:90:5f:09:73:bb:0c:23:72:
60:7e:ac:7a:ba:06:24:7c:1a:a8:79:54:36:d9:e4:ac:48:29:
44:7b:cb:5c:cf:c3:51:b9:ae:0d:58:24:14:31:99:eb:a4:72:
35:95:26:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:25:54 2025 by rpki-client