Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
File: vhqIfnZTot5E8TFj4YcDcyaimgM.mft (raw, json)
Hash identifier: 91f5a1jbVUvZaNt9S2iSiYJLX4OmT9iuyeMMgihXQyo=
Subject key identifier: 94:9E:10:31:79:82:0D:6B:4C:C7:D1:FE:84:A4:89:BA:D8:F1:B1:E7
Authority key identifier: BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
Certificate issuer: /CN=be1a887e7653a2de44f13163e187037326a29a03
Certificate serial: 0199FBEB33C73F635F4A420AAA9320814681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 10:01:59 +0000
Manifest this update: Sun 19 Oct 2025 10:01:59 +0000
Manifest next update: Mon 20 Oct 2025 10:01:59 +0000
Files and hashes: 1: Ae-diP3rVk-4sa-PXAYgbcBanm4.roa (hash: u0iGxdBhci5JERVXq9GDeBfY++asc/728T5ZMln1pyE=)
2: Z9qZa3inYQ6MRNBOPIdAZNAoS4Y.roa (hash: hXK11vHnwMejj7JOnaAkUByhg12mm0SXJ7OP6kT8Ve8=)
3: vhqIfnZTot5E8TFj4YcDcyaimgM.crl (hash: NPCiO/z9jVrSPEUWxlelvhas4PIoS5UHr26Jx/oXqlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:33:c7:3f:63:5f:4a:42:0a:aa:93:20:81:46:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1a887e7653a2de44f13163e187037326a29a03
Validity
Not Before: Oct 19 10:01:59 2025 GMT
Not After : Oct 20 10:01:59 2025 GMT
Subject: CN=949e103179820d6b4cc7d1fe84a489bad8f1b1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:34:75:26:b4:9d:40:4c:7e:7d:89:35:57:
f4:23:72:68:2c:aa:41:ff:70:02:1b:4c:c7:4b:ab:
0f:83:42:5d:a1:d5:9a:ce:5f:c3:da:9c:7e:28:95:
57:98:2c:2e:c2:d6:d7:c9:8d:10:a7:7a:00:42:7e:
3e:77:38:b6:98:82:a9:b9:56:f3:af:ec:3a:3d:d6:
bf:5c:63:ac:29:75:27:3c:ae:6e:af:8f:81:98:45:
e8:9d:7a:91:2a:b7:83:da:06:94:46:1f:f0:ac:73:
14:fe:7e:4f:70:ae:79:85:00:7a:03:1f:a2:14:89:
39:fc:df:41:86:ea:ed:79:f1:7a:54:b6:3a:b9:9e:
9c:8c:d6:5f:3f:83:e5:22:e5:98:0b:55:75:77:e8:
2a:03:87:c2:48:d1:5f:94:d8:6e:e4:e1:1c:3d:8d:
75:ba:a6:6b:2d:4d:d9:5a:90:25:94:3f:af:55:0f:
26:8c:74:34:7c:a4:e3:cc:39:3a:d5:c8:89:c9:ce:
b2:a4:04:01:05:c3:2d:4a:0b:09:5d:83:8e:5b:ab:
d7:e8:c6:13:82:d3:c6:11:b1:56:31:3d:14:ee:3a:
71:d2:f8:69:59:73:12:cf:f9:34:a4:f3:20:76:7b:
a4:35:70:90:47:32:82:68:60:d2:6d:be:68:67:ee:
c0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9E:10:31:79:82:0D:6B:4C:C7:D1:FE:84:A4:89:BA:D8:F1:B1:E7
X509v3 Authority Key Identifier:
keyid:BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ad:16:e8:02:5f:2c:f4:5c:a8:67:0b:cb:ac:2d:3f:ed:b9:
8b:e6:98:a0:6c:21:da:c9:1f:5e:83:ee:04:6a:88:02:45:e4:
6e:b4:31:1e:ee:82:f3:64:bb:c2:ca:41:19:5e:f4:b6:77:d8:
bd:c7:2c:a3:71:d3:72:8e:c8:67:1f:8c:58:6e:b8:6d:18:05:
fa:46:5f:5d:ed:6a:f4:54:fb:18:2c:4c:4e:1b:f1:13:0d:c3:
ca:fd:c2:f3:1f:4a:85:7a:45:92:b2:18:1c:d6:d3:86:37:e2:
7f:91:93:f3:cc:62:42:e9:2f:4e:1a:de:34:7b:7f:35:e1:5e:
f1:e5:47:db:31:19:05:c1:4f:ca:58:7d:ab:93:e6:1b:13:3a:
60:43:d0:4f:11:70:fd:14:dd:a4:25:ee:2a:ee:0b:af:83:c3:
d8:8e:e0:6e:ed:2a:d7:30:4e:26:12:9c:a6:c6:07:f5:bd:f6:
20:aa:56:90:07:2d:a8:58:ee:9b:33:db:37:8d:08:dc:7f:69:
b0:60:45:95:b7:14:d6:b4:5e:c5:49:3b:6e:26:54:17:ff:85:
f2:8a:13:8c:f3:e0:0a:a7:f5:8e:04:8b:77:89:b7:25:b1:47:
fa:5e:37:da:49:0d:30:52:c4:f8:ae:97:0f:c3:3e:63:80:f8:
47:3d:8f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:23 2025 by rpki-client