Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
File: VbU-iTBDTHKlgHoFUIK5hZmycH8.mft (raw, json)
Hash identifier: m4a3xMFrOzf/EcOM7fA/B6UlqOcrDbPbET4haZ3FHTM=
Subject key identifier: 7A:F5:95:CE:54:C5:08:A4:57:1D:92:C0:29:58:13:79:54:6B:DA:F7
Authority key identifier: 55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
Certificate issuer: /CN=55b53e8930434c72a5807a055082b98599b2707f
Certificate serial: 0199FC591A351EA829DEB79D9559A2136046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
Manifest number: 0263
Signing time: Sun 19 Oct 2025 12:02:01 +0000
Manifest this update: Sun 19 Oct 2025 12:02:01 +0000
Manifest next update: Mon 20 Oct 2025 12:02:01 +0000
Files and hashes: 1: UfsWVLXlKS-YeedBQ6KLEcHVpj4.roa (hash: boZrSX+IxVlQdGAIp3Em+CvprqHqmfbsNvAMqDk06S4=)
2: VbU-iTBDTHKlgHoFUIK5hZmycH8.crl (hash: iNMxHQDQsy4bxceWy4hMOUh+KII/qBvVhoB8rIxnpLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:1a:35:1e:a8:29:de:b7:9d:95:59:a2:13:60:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b53e8930434c72a5807a055082b98599b2707f
Validity
Not Before: Oct 19 12:02:01 2025 GMT
Not After : Oct 20 12:02:01 2025 GMT
Subject: CN=7af595ce54c508a4571d92c029581379546bdaf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:c4:5c:68:01:7c:45:c6:bb:a2:cf:bb:e4:
35:6e:ea:8e:f1:23:1a:3e:5b:97:c3:ba:cc:47:70:
3f:92:79:14:7c:ca:2a:3b:26:16:d2:96:9d:2c:df:
a8:ca:72:4d:11:f3:3f:df:54:d4:2e:ad:e4:c4:e0:
e6:47:47:8e:7d:af:66:43:65:bd:9b:b7:ed:a6:75:
58:ad:84:d6:bf:d1:56:5c:0b:0d:7e:a6:15:e0:8d:
6b:b2:99:58:34:74:d5:58:34:9a:ef:34:f3:ed:97:
d3:71:3a:3f:9d:01:1c:79:91:cc:fe:31:02:14:d2:
e5:0e:41:7a:12:d8:ca:2b:68:47:be:46:5c:96:91:
5e:b8:38:f6:25:e1:f2:75:a8:d5:38:c4:da:78:38:
1b:ac:64:7d:67:eb:f8:16:16:38:6e:5c:00:48:fb:
c2:0e:47:35:21:17:fe:cd:ba:4e:0d:4e:88:9d:16:
e1:37:1f:64:86:24:76:72:53:98:79:fe:7c:22:bc:
81:e5:54:69:5c:e1:c6:a8:54:18:85:54:69:b6:73:
26:df:f2:37:50:c8:90:df:91:9d:23:4c:9c:a3:5d:
09:a7:2f:40:41:84:6c:9d:07:1f:dc:bf:de:a1:21:
aa:b9:c9:fd:e2:74:6c:0b:fe:e1:b8:71:b8:79:2f:
9b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F5:95:CE:54:C5:08:A4:57:1D:92:C0:29:58:13:79:54:6B:DA:F7
X509v3 Authority Key Identifier:
keyid:55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8e:0b:32:46:6d:73:a3:4d:4a:bc:ed:20:67:3b:56:7d:c4:
69:2e:56:fe:2e:7a:13:0b:56:9f:bb:04:59:0e:64:11:62:d0:
70:a8:a9:7f:be:de:ce:63:88:74:18:43:a9:b6:af:55:f6:56:
50:5d:5f:0f:47:fb:71:c4:04:1b:8a:0a:47:52:96:41:58:e5:
22:7a:c2:a3:31:ed:a9:96:b1:41:fc:82:62:97:21:4b:13:1c:
ee:52:de:41:fa:c0:cb:c7:32:ac:d2:64:4d:8b:81:df:ca:47:
bf:90:dd:2d:6a:2e:d7:a9:24:fd:b9:98:08:53:95:79:4a:af:
6c:78:67:c2:3b:4a:3a:3e:a7:b8:45:36:20:c7:20:cf:61:1a:
3c:21:4e:48:ed:f9:3b:ba:e9:8f:4a:df:4a:d9:e2:59:45:ba:
07:20:6f:56:14:bf:1c:47:41:d0:f9:2f:ed:03:3b:1b:08:b3:
e5:7d:b3:0a:99:6d:87:89:7c:a3:9f:4f:f7:f2:29:68:4f:fc:
63:b6:e2:54:4a:ad:78:ef:1f:e3:a4:6d:25:b2:d9:58:d4:23:
29:f3:19:e2:9b:ec:00:a4:d2:76:29:70:7d:4e:81:e1:06:b5:
36:ff:f2:9f:05:67:c2:34:37:9d:66:97:64:6a:56:6e:e8:6c:
1b:bb:9d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:20 2025 by rpki-client