Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
File: VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft (raw, json)
Hash identifier: /nOD9iWaVRo/92tPJU+Si2TjGVyf9AUaGes41HMKlCY=
Subject key identifier: 0B:B5:03:FE:95:E2:07:1E:A2:EE:1E:EC:44:C6:84:4A:CA:40:70:9D
Authority key identifier: 56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
Certificate issuer: /CN=567190854786a16afa6b0ec78dfb0620abaacfef
Certificate serial: 0199FC5903E3302D502A303D229BBEB5C5BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 12:01:56 +0000
Manifest this update: Sun 19 Oct 2025 12:01:56 +0000
Manifest next update: Mon 20 Oct 2025 12:01:56 +0000
Files and hashes: 1: GQ1DSO1of_qyrqxkPQTC0ENKnfg.roa (hash: nTd0zjLE6XtOMPZyttCDWktzUnkCfLfuxFOPmZBOHEs=)
2: VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl (hash: WglEXrqXOpRqmE/l0oKsfMXskaz0P8XyKtN7Wcifs2s=)
3: qdba9XlB-cPjFIeLPK89fH4z7YE.roa (hash: 1JK31mC2SxxDKOuDPCP+7Ar2oTz/PPCsc7D4ztv27uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:03:e3:30:2d:50:2a:30:3d:22:9b:be:b5:c5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567190854786a16afa6b0ec78dfb0620abaacfef
Validity
Not Before: Oct 19 12:01:56 2025 GMT
Not After : Oct 20 12:01:56 2025 GMT
Subject: CN=0bb503fe95e2071ea2ee1eec44c6844aca40709d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:31:00:1a:0a:85:fe:37:cb:ff:52:68:3c:be:
cc:e3:bf:40:ec:34:04:78:0b:3b:10:9d:c1:1f:26:
4b:27:2c:2a:38:0d:ab:48:54:64:cd:79:d4:b7:fc:
d6:a0:c9:1c:79:89:ef:9a:16:b9:50:cf:e5:74:76:
2e:bc:0c:b8:95:72:9c:67:c4:d1:58:db:fd:a1:9f:
18:0c:a9:93:b5:af:71:36:b1:92:ae:e6:ac:00:c3:
63:34:90:dd:54:5b:4b:cc:6f:17:f3:34:bf:e0:37:
7b:a3:e6:6a:bd:6f:d8:c9:94:e1:a9:63:82:9f:f5:
a7:6e:86:3b:53:08:cf:17:4d:9b:ee:3a:23:4a:d8:
cb:f2:b6:b0:88:af:3f:34:9d:74:d4:26:3f:6d:4c:
1f:a0:7d:13:b2:5b:cd:16:9f:bb:c7:d0:97:84:ba:
f7:ca:57:a6:ed:d7:98:b4:34:16:e6:c1:70:bd:c2:
68:45:89:0a:29:29:3e:d6:ca:87:03:4d:50:5a:08:
be:19:f8:bf:eb:54:d3:21:a3:3a:a6:d7:69:79:16:
cb:b2:9a:61:6a:b1:41:17:7f:ad:39:b5:82:70:ab:
3e:0e:61:d7:54:96:16:9d:b2:39:09:b5:f5:bb:b7:
82:7b:4e:61:e3:5c:fa:43:e8:d2:93:a5:de:dd:11:
44:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B5:03:FE:95:E2:07:1E:A2:EE:1E:EC:44:C6:84:4A:CA:40:70:9D
X509v3 Authority Key Identifier:
keyid:56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1f:35:43:3d:10:b8:bc:30:72:83:c9:52:81:fb:a2:2a:c6:
e3:73:17:0e:4a:1f:b8:ac:65:5e:d1:04:a7:67:b1:5d:a2:f6:
fd:96:aa:24:77:0a:f7:61:b1:3e:f6:2c:7d:60:58:dc:2f:30:
18:5a:1b:a4:ee:9f:c7:7d:af:8e:1c:65:63:b3:c9:ce:b7:f3:
e2:e6:99:3b:c4:fb:24:0d:c1:d2:94:f2:45:fe:e3:a8:f2:c1:
21:e7:5e:37:36:af:34:93:a5:c7:64:e8:9a:1e:d4:9c:2e:e3:
0d:12:bd:20:ad:bf:5e:0a:7e:98:bf:a5:03:c6:d8:9d:0e:52:
d4:c9:a9:54:61:22:82:32:28:b3:17:8e:35:0a:82:b7:89:7e:
7a:c7:e6:c3:52:bc:98:0e:c5:61:fe:06:21:56:7a:10:02:7a:
cf:0e:11:35:32:b2:23:b7:7b:45:a3:80:62:2d:b8:bc:14:e4:
70:9f:67:76:47:7a:10:fd:a7:25:d4:43:16:37:19:7e:9a:68:
40:66:4f:06:31:10:00:6d:7f:bd:1a:13:66:07:83:c3:94:44:
f3:06:91:a0:47:5a:63:d5:03:cc:a5:d1:16:1b:a9:d2:c2:8f:
19:5a:f6:c3:05:1d:3d:07:6c:61:2a:fa:65:1c:66:97:2c:a3:
9a:76:9b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:44 2025 by rpki-client