Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
File: VuM1PV9COtQnHDJhyqVDFAUwvds.mft (raw, json)
Hash identifier: jK3O13mzBcvClrXZURmRNKp/XWgfZk4GGG7dVnaKbBM=
Subject key identifier: 3E:CF:F5:31:AA:6B:B5:2B:23:C8:9C:8D:90:64:2E:F6:79:EC:1C:74
Authority key identifier: 56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB
Certificate issuer: /CN=56e3353d5f423ad4271c3261caa543140530bddb
Certificate serial: 0199FF59B9AE5EE3CD00D44C6BAC75CBDADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
Manifest number: 16E9
Signing time: Mon 20 Oct 2025 02:01:34 +0000
Manifest this update: Mon 20 Oct 2025 02:01:34 +0000
Manifest next update: Tue 21 Oct 2025 02:01:34 +0000
Files and hashes: 1: 0mBk-YYEEcpS2EWe9JuL5ZU9Ozw.roa (hash: i+FX59/XtMW/8gmUH2jgeEyByOCXMI3eEtMtNI5KB4s=)
2: IIxDe4etQOd2xm05l7GIiAgVFRk.roa (hash: nufDyIWcCwbAJSpo3tAlQaolQXGlQowbBKacZpakYp0=)
3: IuLax30Qv5bBysnxO_6IznKsU-s.roa (hash: ufXvEjexbBOn5Icah6XFTBi5ev4De8imScoIa5ucSKg=)
4: U9LtbwPPB86BDhAy_rjEEanmBi4.roa (hash: n2f6ykIaBk67onFDxWMKqalYvlFCNkWOuJFN0Sesm0U=)
5: VuM1PV9COtQnHDJhyqVDFAUwvds.crl (hash: liORsYhVh+HsRpBBNGCr7kpJdWesa89P4ti2IWoVGuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:b9:ae:5e:e3:cd:00:d4:4c:6b:ac:75:cb:da:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e3353d5f423ad4271c3261caa543140530bddb
Validity
Not Before: Oct 20 02:01:34 2025 GMT
Not After : Oct 21 02:01:34 2025 GMT
Subject: CN=3ecff531aa6bb52b23c89c8d90642ef679ec1c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:82:ef:03:85:4b:fa:b6:e1:78:86:2b:64:
f3:75:37:de:75:6c:fd:8b:df:91:66:ec:9b:35:88:
1c:93:42:8a:2a:c7:a6:30:1c:5f:6a:f7:4d:83:23:
d6:31:66:7c:65:c9:e7:89:f8:ca:cb:42:08:6b:50:
e5:37:7a:ee:5c:7f:e5:55:63:b1:c4:3c:12:72:f5:
5f:d0:d3:89:c0:b0:c8:76:3b:f7:76:8a:52:45:88:
7e:0f:c3:65:c4:e0:e5:c0:4d:ce:12:0c:c5:1a:cf:
92:6d:ed:63:85:38:08:0d:80:ce:39:fc:f9:f0:d1:
13:98:5d:b6:b0:c9:be:00:1c:9a:34:dd:18:7f:67:
83:99:36:03:86:27:6d:7a:c4:1b:f4:ae:0c:3a:57:
ab:cb:70:f8:94:65:71:d4:0e:dd:50:54:7c:6a:4a:
30:b1:60:4f:7e:27:bd:bc:2b:fc:c1:b9:01:02:09:
1b:77:9c:8b:7e:3f:c7:c5:40:40:aa:52:17:77:09:
76:38:93:30:6c:34:f2:f3:7a:cb:51:09:4a:ad:3d:
b4:70:d4:6d:ae:69:5c:73:fa:87:3a:00:11:f5:58:
90:c4:48:25:b4:4a:65:1b:06:16:58:90:e3:ea:b4:
f9:18:30:f8:f8:23:2c:19:9c:97:d9:7b:58:b2:3c:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CF:F5:31:AA:6B:B5:2B:23:C8:9C:8D:90:64:2E:F6:79:EC:1C:74
X509v3 Authority Key Identifier:
keyid:56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:db:5e:f4:38:5e:92:21:16:32:cd:0d:c6:04:fd:62:41:7d:
b1:9c:a6:ad:ba:19:29:90:37:18:bb:c1:c2:7f:90:78:0a:1c:
23:a9:b5:8e:0e:35:45:39:4d:ec:c9:29:56:8f:80:0a:3c:0a:
93:71:6a:22:4b:9e:fa:83:60:3f:7f:7b:80:45:ca:ba:4d:23:
b6:68:7e:0a:6e:21:ec:7c:d6:04:0e:90:62:e8:31:c2:32:15:
8c:fc:77:e1:7e:a2:e3:70:d2:75:47:ef:66:51:9e:49:f1:18:
2f:a9:92:db:96:fd:eb:6d:55:2c:e2:ff:b4:e7:6c:15:1e:e5:
68:1b:ce:36:47:d3:5e:56:3b:0b:87:41:96:03:9f:67:f5:93:
c3:5b:aa:ca:38:4b:b8:f9:3f:17:ee:f3:9d:44:4c:58:28:7d:
65:bb:3a:ba:b5:7e:5a:3f:10:16:85:16:7c:71:56:bc:99:54:
4f:87:24:7c:c8:d5:13:d9:d8:b5:58:97:37:08:85:04:31:13:
2b:5e:73:ca:e5:17:39:78:ee:5a:6a:65:4c:e7:6f:53:be:33:
e9:8f:46:c4:96:bd:fa:0a:68:b4:9f:18:be:a4:34:d7:4a:a1:
a1:e2:4b:d6:4e:ac:36:75:82:cb:a7:d6:3e:37:a8:7d:a5:da:
08:59:9c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:43 2025 by rpki-client