Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
File: VKwN3sMOJORX4W5lB9IZcoMQiT0.mft (raw, json)
Hash identifier: Ne2qixjyKq/7ZEi+EyTYyhDTo/SoJTNvmEF0Gu5rROM=
Subject key identifier: 89:14:1C:68:02:AA:9F:08:2C:5D:17:F5:B6:96:F9:70:AD:49:5C:E9
Authority key identifier: 54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
Certificate issuer: /CN=54ac0ddec30e24e457e16e6507d219728310893d
Certificate serial: 0199FBEACE7770854108E7C79D4520620977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
Manifest number: 024A
Signing time: Sun 19 Oct 2025 10:01:33 +0000
Manifest this update: Sun 19 Oct 2025 10:01:33 +0000
Manifest next update: Mon 20 Oct 2025 10:01:33 +0000
Files and hashes: 1: 3gl-l3qU8MpI3MVFIGvCINJyADE.roa (hash: utYF7PoXBqNr3o1w6VDP9HkMKeBzXvpa+DHx3iRNsmk=)
2: VKwN3sMOJORX4W5lB9IZcoMQiT0.crl (hash: SAUipXs47WqeYGh1z7OzqEn8jsFnPMaK/KjssioUivQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ce:77:70:85:41:08:e7:c7:9d:45:20:62:09:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac0ddec30e24e457e16e6507d219728310893d
Validity
Not Before: Oct 19 10:01:33 2025 GMT
Not After : Oct 20 10:01:33 2025 GMT
Subject: CN=89141c6802aa9f082c5d17f5b696f970ad495ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:64:f8:1f:92:2f:c3:d3:e3:b7:c7:cb:80:25:
61:bc:6f:71:7c:cc:4d:11:02:44:b4:81:c9:75:ad:
b0:97:cf:79:8f:0a:49:6d:2a:67:62:74:ad:67:88:
da:a6:8b:4b:cc:c4:03:db:98:36:fd:45:53:27:f5:
bf:55:ee:b3:71:5f:9f:7f:5c:13:7e:bb:76:1c:20:
80:b3:25:68:53:f1:6d:43:82:06:31:a4:78:76:06:
13:ea:0e:9c:7b:1b:f8:8b:df:51:83:9e:28:2f:e9:
b7:b8:3c:1d:b0:3e:35:be:1f:42:97:f7:6b:6b:98:
46:1e:67:5c:c1:e7:8a:48:6c:e2:1e:09:d6:be:95:
46:18:03:ba:8f:e0:85:1e:7e:aa:14:bf:20:b7:4d:
5c:e2:e0:e0:8b:bf:51:48:0e:2b:e4:12:08:f4:ae:
c0:04:b1:e6:b4:70:49:0b:a4:b3:0e:1c:49:24:28:
c5:05:7f:7d:6b:06:df:42:fd:be:3e:51:af:38:49:
b2:b8:f6:c5:e8:61:53:b1:18:43:30:ab:22:5e:6d:
18:28:e2:f9:f6:e7:37:0c:50:72:e0:92:51:0d:b4:
c3:d7:eb:3d:5f:d4:be:5d:d6:d3:cb:57:85:f7:3e:
c1:6a:cf:4d:9e:89:46:9b:10:c6:d9:a2:ce:e4:e1:
f1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:14:1C:68:02:AA:9F:08:2C:5D:17:F5:B6:96:F9:70:AD:49:5C:E9
X509v3 Authority Key Identifier:
keyid:54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5f:23:1d:db:b7:27:3f:6d:fd:f0:49:c2:a9:26:a0:24:02:
ca:38:af:d0:57:ee:c5:e6:8e:2f:65:8d:5b:5f:ed:20:3f:14:
22:b6:f5:ae:f7:ab:2c:aa:04:26:10:52:c7:72:02:69:80:4b:
11:a7:5e:e0:e8:d7:b7:4e:b0:4d:47:75:7a:fa:03:e1:c6:0a:
a8:5a:53:2b:ce:62:33:14:c5:5b:43:dd:21:ff:fd:5b:46:37:
f7:a9:82:0d:55:91:41:83:17:7c:b3:1d:09:dc:eb:bd:82:6b:
62:03:c6:3f:74:90:6f:1a:7e:b6:ce:88:10:8e:7b:2f:2c:bc:
04:a4:5b:4d:a0:cd:50:a2:19:bb:e8:d7:43:bf:3f:97:04:a2:
3f:f3:d0:06:9c:db:21:3a:58:c9:62:0b:42:12:0d:83:a5:e9:
bf:26:25:c9:24:f6:c2:1d:9a:b6:f1:47:4e:39:e3:46:ce:60:
38:1d:d0:02:6c:a3:23:7f:aa:8a:a8:d9:1a:e8:28:7e:a6:1a:
9b:76:4e:c7:b5:1f:95:ea:0a:8b:98:e2:26:ab:5e:e9:ba:80:
3c:25:2b:f7:fa:ac:e6:89:c8:e9:04:44:e5:5a:6c:88:06:4d:
1e:dd:53:30:26:65:a4:b3:ee:1f:a4:af:a2:72:5a:64:03:3d:
eb:2d:4e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:40 2025 by rpki-client