Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
File: VdBq_SbSUiNCenoNX54xWQY_vKM.mft (raw, json)
Hash identifier: 4BdDu58gS7LwwnsUqpogGkGxjuRTWVVnvIUsqOFgtlY=
Subject key identifier: C4:01:33:70:E7:5A:8A:70:9B:18:C8:AD:BB:DC:6E:6F:54:41:8A:8D
Authority key identifier: 55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3
Certificate issuer: /CN=55d06afd26d25223427a7a0d5f9e3159063fbca3
Certificate serial: 0199FB0EED3CFCDD951CAC8FCCE8D631F199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
Manifest number: 10DA
Signing time: Sun 19 Oct 2025 06:01:23 +0000
Manifest this update: Sun 19 Oct 2025 06:01:23 +0000
Manifest next update: Mon 20 Oct 2025 06:01:23 +0000
Files and hashes: 1: LGr3W12gg5B5iAQGS4LlAtKKquM.roa (hash: E6DrGRYtfy1QPOk4PfrfkhjZuBFDW5GfEmSOYSVlg/k=)
2: VdBq_SbSUiNCenoNX54xWQY_vKM.crl (hash: kv3AGLmajf7aW3vMsTrctQFos7ax8rf9wdTmw70lE+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:ed:3c:fc:dd:95:1c:ac:8f:cc:e8:d6:31:f1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d06afd26d25223427a7a0d5f9e3159063fbca3
Validity
Not Before: Oct 19 06:01:23 2025 GMT
Not After : Oct 20 06:01:23 2025 GMT
Subject: CN=c4013370e75a8a709b18c8adbbdc6e6f54418a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cc:52:33:2d:55:49:48:96:c4:30:1b:2d:a3:
97:77:b9:30:a9:ef:c8:df:56:47:01:c2:37:c8:8d:
3e:0a:ad:6a:0a:f1:cc:a5:59:65:27:d2:df:79:bb:
95:01:4f:ec:66:5f:cd:3b:f1:ae:5c:79:2f:3f:f3:
3b:9b:86:60:2a:31:c4:e1:96:c1:06:8d:20:b9:60:
de:3f:97:89:df:60:2c:d8:43:c1:fd:9a:b6:d5:d0:
0d:ae:06:da:ab:38:1e:57:43:f9:d0:a6:1c:4b:41:
a3:1c:94:18:6f:6b:ea:10:7a:cd:ac:c9:f1:ee:6b:
f4:73:92:d5:f6:7d:ad:d6:f4:93:b9:33:d3:f1:7e:
a4:03:2c:73:22:d8:d2:c0:36:bc:d5:f9:bd:19:db:
20:26:63:52:1f:4d:04:11:64:c7:bc:4e:86:d7:dc:
84:fa:48:d9:a8:31:c9:98:e2:8b:a8:7d:d7:60:61:
4f:23:b5:28:5e:2f:e1:0d:e1:63:00:5e:32:d7:9f:
1a:07:3c:5f:39:a1:6e:09:7c:53:a4:52:6f:5a:f4:
2f:a4:d7:57:b3:3b:43:a7:05:d6:c2:ad:87:9c:5f:
43:17:6f:ef:59:48:a9:2a:9c:9b:b1:14:e9:4a:c9:
14:ef:27:ba:8f:16:8c:bc:d3:63:94:86:f4:be:51:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:01:33:70:E7:5A:8A:70:9B:18:C8:AD:BB:DC:6E:6F:54:41:8A:8D
X509v3 Authority Key Identifier:
keyid:55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:3d:84:4e:32:4d:03:cb:eb:ac:e8:6a:a1:be:5a:c7:6c:13:
89:3f:e9:9e:ac:f3:7b:bb:62:dd:0b:9c:25:3b:41:4c:09:d7:
93:b9:b3:9f:81:3b:8a:7d:fc:03:0b:2e:8e:43:17:56:b9:e6:
d9:b8:53:61:f4:45:c6:11:3d:74:28:55:40:c1:c2:aa:39:fd:
f6:b1:a3:b2:0c:39:68:80:b4:dc:6d:c5:f5:70:67:04:97:ed:
18:4f:84:9b:91:ed:ce:2a:b0:ea:97:0e:19:57:e7:59:57:d5:
7d:00:bc:2d:8e:24:82:0b:2c:5b:1b:da:01:d7:94:c4:51:cf:
4c:1b:9f:ce:bb:b6:cb:00:a9:62:1a:e8:0d:24:ba:79:cf:21:
1d:2c:2a:84:2d:f4:7b:49:39:a9:e8:19:0c:b8:b6:2b:52:2d:
f0:1f:81:9d:23:08:7e:cc:39:59:c6:00:f8:fb:8a:3d:b7:d8:
6b:db:f7:07:87:18:65:eb:36:8c:e0:89:c0:49:3f:b0:25:8f:
d1:e7:41:91:51:e8:ac:f8:1a:0e:8d:3a:53:05:64:77:5c:fa:
13:7a:26:6d:63:0b:04:1a:c2:9e:3d:0f:bd:f7:f3:9b:30:56:
cd:60:1b:24:a3:2e:3d:a5:40:79:05:a9:ab:96:a1:42:07:e3:
b7:3d:2d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:22 2025 by rpki-client