
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
File: vSX3G6QTFIO7m4I92IZR06_UTns.mft (raw, json)
Hash identifier: zY9w1j62nKtZ0sy9IbrbCDUamlDYgLdtIx8muRxr1+w=
Subject key identifier: 20:54:F7:CC:B9:50:D9:AC:C6:B3:A8:15:F6:E5:FC:28:65:C8:13:81
Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
Certificate issuer: /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Certificate serial: 0199FAD7F79EA93181E71C46DA7960DEF26A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
Manifest number: 13B3
Signing time: Sun 19 Oct 2025 05:01:21 +0000
Manifest this update: Sun 19 Oct 2025 05:01:21 +0000
Manifest next update: Mon 20 Oct 2025 05:01:21 +0000
Files and hashes: 1: VTzQEre1LOW5un0PlYn-CvmDAKI.roa (hash: fUzpWZIo72ujZLDiYOULGotM+6e+u6e7TR9QhDLmQyE=)
2: uOlfWw_ot1GNz-xDs0HfE8f0GXg.roa (hash: p6HLTz97eUfObx31ZQ7fD3+tg4SDQ5VAA/i07H3/8o4=)
3: vSX3G6QTFIO7m4I92IZR06_UTns.crl (hash: JPNXdC9hbjmVh9tohhjYRTd1ILv0e+eYmOsrZretqLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:f7:9e:a9:31:81:e7:1c:46:da:79:60:de:f2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Validity
Not Before: Oct 19 05:01:21 2025 GMT
Not After : Oct 20 05:01:21 2025 GMT
Subject: CN=2054f7ccb950d9acc6b3a815f6e5fc2865c81381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:24:bf:01:33:0f:68:6e:86:8e:87:91:21:
c2:c2:ca:2a:f1:b5:d5:6f:72:92:d4:25:84:f9:d2:
36:4e:27:80:2c:72:cd:1c:7d:cf:57:36:90:d1:e6:
a9:a6:d0:24:e6:9c:f4:8d:cb:49:a7:15:5e:c1:17:
2d:64:87:ef:59:9c:76:6f:de:16:24:d6:54:ea:5f:
b1:93:4f:b4:65:b4:2e:fa:fb:7d:bb:02:75:44:73:
69:6d:0f:50:9e:6b:b7:c0:61:0b:39:c2:c1:4c:d6:
0c:b6:60:cb:ea:80:c4:a5:83:d9:55:33:fb:29:d7:
9b:87:9b:74:8b:6a:b9:bd:43:6f:6f:02:ab:3a:e3:
dd:30:da:00:e5:6f:87:04:82:38:5c:65:e3:6b:3d:
cf:9f:f4:89:31:82:c0:e4:e4:0e:e3:27:39:04:68:
09:09:ef:e7:a5:a5:0f:c2:97:11:ef:d7:de:bf:53:
aa:bc:e2:4d:1f:e3:37:75:c8:03:84:72:9e:e6:c0:
27:91:59:fd:04:c1:eb:8f:73:6f:fc:4a:cf:58:d9:
26:8b:ec:3e:ef:00:6d:74:2b:4e:fc:30:67:05:59:
bb:a6:05:3a:30:c5:ba:ef:03:8a:89:f0:f9:1e:18:
4b:d8:79:f4:6c:9a:fb:6f:26:b5:9a:74:e8:e5:a4:
36:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:54:F7:CC:B9:50:D9:AC:C6:B3:A8:15:F6:E5:FC:28:65:C8:13:81
X509v3 Authority Key Identifier:
keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:75:15:c3:eb:29:59:d0:b0:b9:2b:28:2c:c1:fe:91:f0:19:
de:b8:1f:dd:e5:76:2e:f3:9b:f8:80:62:fe:81:a3:d2:51:e6:
6d:4c:42:be:ef:39:fa:aa:eb:01:3f:1f:fe:61:48:46:b9:08:
00:5a:ae:b2:76:91:97:c9:b6:00:62:8b:8d:a4:41:af:81:53:
1d:c5:f3:91:88:e4:c2:40:e3:79:61:5e:2f:42:d6:fc:95:d4:
f4:07:22:6b:4a:bf:f8:c0:26:77:e3:f4:95:47:af:ac:a1:eb:
ec:cf:1f:a5:36:22:8e:5d:0f:02:85:43:ef:c8:15:ab:13:f5:
e9:17:89:4a:17:4a:5f:77:40:15:2c:16:e3:f9:d0:45:8f:b3:
c1:5d:b5:a7:9e:1b:ab:39:b2:39:d3:ab:b6:54:4d:58:54:97:
5a:ec:bb:87:39:dd:49:5f:a7:96:4f:53:7b:b6:5d:7b:ef:41:
a4:01:cf:d1:36:96:f7:b7:6d:f9:4f:39:5a:45:a7:bb:45:db:
de:fe:b9:d3:c9:5a:c2:dd:05:25:c7:89:44:d1:bc:97:6b:1c:
6f:73:6c:3e:0f:ac:d7:19:90:c4:85:15:54:76:1f:e5:fa:2b:
e2:da:36:4e:dc:17:74:f0:6c:ae:91:12:da:96:ac:aa:b4:89:
3f:4c:8e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:11 2025 by rpki-client