Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
File: VChf_ulzEsUcOoBf-TQOvsM1JyA.mft (raw, json)
Hash identifier: WGGbC0jkKMByYZ3N3Hd4L3Zlr4cJrdN1kAqI1UVKczQ=
Subject key identifier: CF:71:5E:62:D5:6D:45:25:6A:18:0F:68:14:BF:0D:DF:F7:15:3D:AC
Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
Certificate issuer: /CN=54285ffee97312c51c3a805ff9340ebec3352720
Certificate serial: 0199FB7C7933564EED1F02110EAD0D90E28F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:02 +0000
Manifest this update: Sun 19 Oct 2025 08:01:02 +0000
Manifest next update: Mon 20 Oct 2025 08:01:02 +0000
Files and hashes: 1: Ca-8iz_zQCrKysmx5A1KTglY5iE.roa (hash: QQcsgeeci4CpJE1THj53EE0/b4qFL4RDwyCbpu7M9gI=)
2: VChf_ulzEsUcOoBf-TQOvsM1JyA.crl (hash: ALzv3WfsPUHkZ7r51jrtZpNig2aZ9pG0ltprow2+1Hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:79:33:56:4e:ed:1f:02:11:0e:ad:0d:90:e2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720
Validity
Not Before: Oct 19 08:01:02 2025 GMT
Not After : Oct 20 08:01:02 2025 GMT
Subject: CN=cf715e62d56d45256a180f6814bf0ddff7153dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6f:68:89:94:82:ca:8f:da:30:6e:eb:89:0e:
e2:cf:41:77:33:75:7b:9b:db:4a:b9:98:c5:59:f6:
fe:54:8b:df:39:2b:74:9c:4a:26:a6:4d:4e:d3:a1:
fa:d8:90:73:89:ef:8f:ef:f4:2c:04:cc:e7:ed:9b:
fb:0e:05:c3:33:77:c9:8b:3d:9a:ba:c7:2b:c2:2b:
32:e0:7b:26:e5:06:1b:32:4f:1e:15:f7:8f:c2:00:
bb:7e:7e:fa:e8:67:ab:70:c9:83:38:da:03:db:86:
48:9b:a6:40:7b:37:93:be:33:82:60:f2:c3:db:50:
95:2e:b6:33:45:cd:d4:82:9f:28:7e:2e:b8:29:09:
5d:93:d9:53:8d:f1:4b:37:ef:5e:7d:b3:80:3e:53:
dd:e4:f0:c2:6a:c9:d7:dd:ea:a8:da:84:32:1e:eb:
a3:ee:1c:d4:b4:db:15:77:1d:f8:46:4d:b6:d0:59:
27:32:dd:62:fc:69:6d:6d:e0:a5:3a:e0:9a:7a:50:
54:90:8d:de:b7:26:5a:b8:af:48:cc:5d:9d:9b:85:
47:60:04:36:4e:25:d8:be:1f:87:d9:b9:60:d5:91:
c3:9a:18:0a:23:ff:3e:07:29:d1:de:38:d7:5e:52:
0a:f5:e9:4f:c0:10:ae:db:d8:3b:06:a5:0a:21:ab:
c5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:71:5E:62:D5:6D:45:25:6A:18:0F:68:14:BF:0D:DF:F7:15:3D:AC
X509v3 Authority Key Identifier:
keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:11:9d:dd:67:4a:39:ef:1e:9d:e6:42:ab:28:d7:79:b1:08:
3c:34:bf:a8:8c:cd:ed:bf:c3:6b:e0:95:8e:b8:3e:67:52:df:
31:1a:57:fb:44:02:df:80:d5:b2:ad:48:af:0f:ba:26:97:68:
e2:2f:9b:9f:65:93:c7:5f:2c:2f:9d:b4:fa:23:33:ae:d4:c2:
e8:b3:5c:31:e5:44:c1:00:0d:56:5e:bc:cd:9a:db:6f:eb:7a:
31:72:72:84:12:df:38:f2:fb:11:67:57:00:74:9e:38:97:57:
bf:0f:d6:c5:1a:22:59:a9:57:f7:fd:a6:29:f3:3f:8c:6c:d2:
b2:e8:34:02:37:be:1c:6d:b6:c3:fb:31:27:06:91:83:d1:15:
ae:e5:50:1a:9c:c1:a2:b1:d0:0e:8e:75:0f:1e:94:39:f4:65:
f9:6e:4c:c6:f0:2a:e6:af:99:50:10:df:0b:85:a0:73:33:d3:
19:e9:6a:05:a4:13:06:ec:fc:9e:66:b8:3a:94:77:d0:67:39:
09:59:7f:8c:29:d3:3d:6a:4b:4d:ee:3a:a1:a3:24:df:b3:e8:
cc:4a:49:43:3b:12:a3:a0:d1:98:33:8a:74:89:44:c7:44:c8:
06:2a:3a:79:53:24:15:36:e5:81:15:a8:21:27:87:f0:38:58:
70:a3:96:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:48 2025 by rpki-client