Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
File: VFhKIZ9vUGbYSO0quWTaiWbUCio.mft (raw, json)
Hash identifier: KL5ZlgvyA22GiV53cWXdYwVHTEkTUhsfFw9akeLl4eY=
Subject key identifier: 41:D8:2D:3F:EA:72:23:D1:E1:79:11:03:A8:79:A3:A4:2A:FA:E8:2B
Authority key identifier: 54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A
Certificate issuer: /CN=54584a219f6f5066d848ed2ab964da8966d40a2a
Certificate serial: 0199FB0EE72ED7C61E29F4DD3595CB964DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 06:01:21 +0000
Manifest this update: Sun 19 Oct 2025 06:01:21 +0000
Manifest next update: Mon 20 Oct 2025 06:01:21 +0000
Files and hashes: 1: VFhKIZ9vUGbYSO0quWTaiWbUCio.crl (hash: rdH0dRa0nyyt+5UbQdXQfjvTEwTQpGWHvEqm7SIWmLs=)
2: yO-xzrVzP9w-99d-1MgI3akuEEw.roa (hash: /wfJmKbrJk5HLRMl66b8UyeroQ01b/DROieeTJUHsw8=)
3: ykuZpqMlHSUIWtYa1mPsmyPe9Ho.roa (hash: yZcmu9TrDVEdaIS3LL1L046LUfG1VEvG/7HySIUseIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:e7:2e:d7:c6:1e:29:f4:dd:35:95:cb:96:4d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54584a219f6f5066d848ed2ab964da8966d40a2a
Validity
Not Before: Oct 19 06:01:21 2025 GMT
Not After : Oct 20 06:01:21 2025 GMT
Subject: CN=41d82d3fea7223d1e1791103a879a3a42afae82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:3b:20:c0:95:3c:63:8c:87:93:3d:54:24:1b:
31:b8:ec:1d:5a:4e:6c:98:a4:38:43:f0:38:3f:11:
c8:7d:83:50:f5:56:77:31:70:8a:42:18:63:d9:bd:
9f:8b:a1:6f:bc:b1:0c:79:2c:b1:07:60:d9:cc:6a:
6d:8d:2e:2f:c3:98:d3:b7:17:81:21:05:59:63:34:
de:8e:11:dc:1f:87:6f:e5:f9:79:6c:4a:87:2f:ea:
3d:ad:50:43:19:3a:56:51:1c:eb:00:71:f7:91:ae:
20:59:76:b0:fa:fb:6d:ca:4e:6d:56:bd:d6:9a:d6:
a6:0f:ea:e8:20:e4:9f:78:19:a4:bb:b2:95:8b:fb:
cd:38:de:7b:d4:4c:3d:23:9a:57:dc:1a:72:a7:0b:
c1:51:47:62:bc:41:d2:38:df:dc:8b:09:5a:47:a8:
c4:b9:03:d8:39:9b:e7:04:98:6c:50:76:3f:92:06:
5f:ba:f7:e8:e5:47:93:ec:9e:66:12:e6:ce:df:9f:
6a:51:51:a7:be:c9:3c:b4:38:e8:a3:a3:80:23:65:
28:a9:c5:1d:3c:d3:1a:07:cc:bf:80:18:3c:18:9b:
85:a2:5f:89:aa:03:7b:32:5b:e4:72:65:ad:84:9e:
37:db:ce:ca:b7:db:28:d4:38:2b:bd:de:b9:53:b9:
30:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D8:2D:3F:EA:72:23:D1:E1:79:11:03:A8:79:A3:A4:2A:FA:E8:2B
X509v3 Authority Key Identifier:
keyid:54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2e:89:ef:5d:7d:94:cc:f2:41:b4:d0:a9:a9:42:a3:b2:27:
4a:67:e0:5e:c2:bb:e6:bb:a5:3c:3c:dd:3a:14:0c:99:ce:97:
29:d1:6d:4b:85:52:83:bd:4f:27:38:56:0e:f6:02:d1:11:e0:
d4:a3:aa:4e:03:61:54:d2:5a:49:e3:27:c7:87:ac:4b:98:23:
c8:8a:99:77:2a:e9:6e:76:1f:cf:ae:9a:3c:3d:5f:f7:32:2d:
f3:47:33:6f:ed:23:89:90:f0:4f:0a:01:12:14:01:d4:9c:92:
4f:eb:53:fa:2d:06:11:6b:62:92:5d:dc:33:06:0f:ec:93:20:
d4:60:c1:90:a8:ad:34:b9:3a:87:00:ac:51:28:f0:50:0c:c5:
af:fb:ab:7e:36:41:c5:ae:09:75:37:61:d5:5a:74:f5:0d:a7:
17:da:6c:7b:21:2b:f4:b3:0b:25:ad:e3:24:ca:84:00:ec:0b:
b9:21:26:0e:b5:c2:60:7f:17:d3:60:98:f9:18:c6:c1:c3:ac:
e8:a3:e8:8b:a2:81:de:56:36:de:c8:9c:4f:2a:76:bf:1c:02:
04:d3:42:a5:1f:af:1e:bd:ed:e5:8e:e3:9e:0a:92:39:81:1a:
db:e9:6c:93:53:c1:9f:78:00:f3:16:b2:21:7a:8d:74:48:4e:
0c:3c:40:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:22 2025 by rpki-client