Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
File: VBfj2w0cLPwitL6HTiWY3QmSlO0.mft (raw, json)
Hash identifier: B96O8bRU8sBhaOkBdVfri7B3PwD80lW+bJDfeNfQ16A=
Subject key identifier: ED:33:1E:DC:82:8F:B2:60:79:BA:21:F6:87:DA:8A:BA:D7:AE:D9:1E
Authority key identifier: 54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED
Certificate issuer: /CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
Certificate serial: 019A011103A728B05B939EC5B1507CE2B3F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 10:01:23 +0000
Manifest this update: Mon 20 Oct 2025 10:01:23 +0000
Manifest next update: Tue 21 Oct 2025 10:01:23 +0000
Files and hashes: 1: VBfj2w0cLPwitL6HTiWY3QmSlO0.crl (hash: qTrXqxETlF3wi+wjrb9QQlEzPzEKCHqy98ZtJV1XlLM=)
2: Xon3ZRUmiHyafmwSbpFGnaeltWw.roa (hash: M4Nh/8K2vjAav0TbJZxKf47ENVLTCLivupIBPIaomOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:03:a7:28:b0:5b:93:9e:c5:b1:50:7c:e2:b3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
Validity
Not Before: Oct 20 10:01:23 2025 GMT
Not After : Oct 21 10:01:23 2025 GMT
Subject: CN=ed331edc828fb26079ba21f687da8abad7aed91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d3:c2:6a:62:45:b6:e8:93:b2:d0:da:8a:38:
63:cc:c8:f8:ef:2a:78:10:fc:e9:d4:3f:a8:23:fe:
87:7b:9f:67:a3:b5:55:48:9d:e0:37:22:4b:07:3a:
d3:fc:2a:ec:80:ec:25:4d:b1:90:54:38:43:33:53:
1f:be:4f:7f:47:f8:2c:49:b4:53:08:f8:18:be:8e:
be:b9:d7:17:e6:41:05:23:2e:36:c7:b2:44:cc:8a:
19:76:0e:93:a5:4a:97:fe:ba:aa:25:20:a6:cc:ae:
4d:7c:4e:25:6f:4f:f5:49:df:a5:93:09:85:db:af:
8d:77:a2:ad:08:c2:2b:48:b6:4b:45:7a:52:b9:2b:
a3:0a:d3:40:c0:f7:5b:7f:e0:d2:c7:03:f3:3c:0d:
d8:fc:3b:2e:d9:de:7c:42:89:6e:07:df:32:cd:e6:
1c:39:88:f4:06:52:0f:0f:33:83:e9:3e:df:4b:ae:
39:a8:91:c1:9f:e6:5d:1f:a7:49:cb:72:1d:a6:23:
e0:09:8c:45:2b:ed:c0:f2:88:47:e6:51:ab:df:dd:
d5:3b:85:f7:bf:42:6c:38:c8:7a:06:50:7b:ec:15:
b5:46:74:4d:0d:9a:93:2e:f3:e8:07:2d:ac:0d:92:
6b:01:e1:ff:fe:33:84:d1:c8:e8:33:3a:78:b7:57:
95:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:33:1E:DC:82:8F:B2:60:79:BA:21:F6:87:DA:8A:BA:D7:AE:D9:1E
X509v3 Authority Key Identifier:
keyid:54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ed:6f:aa:01:bb:f5:ef:14:26:0f:53:8e:26:92:f6:09:bb:
e5:b5:79:e8:4c:0a:09:b0:38:59:68:f6:a6:b1:95:08:a7:fe:
d8:53:03:d1:70:54:c7:2c:dc:e3:19:96:80:5c:07:88:d0:45:
ef:ac:4c:d7:27:57:0a:7f:72:80:02:ba:cb:a6:d6:b7:e9:33:
b0:cd:30:eb:3b:4c:96:b8:c1:76:f2:7b:86:8f:e0:17:13:63:
af:bf:50:da:b0:9b:ce:ce:60:b7:4b:46:22:69:06:36:e1:c9:
ec:47:4f:fe:3c:f0:f5:3b:ad:77:f1:95:e5:10:8d:18:74:91:
b4:f5:89:df:1f:6a:ec:6f:fe:a0:f9:46:f9:29:57:04:b9:1a:
37:cb:ab:51:41:43:34:91:b0:41:06:47:e3:49:e4:ef:a5:f3:
a3:63:f5:77:11:d3:95:29:68:41:cf:f0:53:72:38:96:dd:78:
90:91:9d:e0:39:a6:94:0a:36:80:c0:62:ab:06:b5:fc:82:7d:
48:d2:a4:27:6a:c2:9c:f3:e4:6b:87:02:46:34:18:c3:ea:35:
bc:cb:6e:7e:91:d1:b8:82:58:6b:7d:f3:5d:1f:7f:65:0d:10:
bc:16:aa:24:91:dc:59:e4:6d:37:c4:6f:27:2f:b3:a7:22:51:
62:22:88:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:32:20 2025 by rpki-client