Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
File: VXe0uHq4aspXflbjjVuKWBPMzD0.mft (raw, json)
Hash identifier: mlez88NmroYcDazMqQsWFDAzJQNjJQt4wD8/C0nKSHY=
Subject key identifier: B4:27:CE:7C:0C:48:8F:74:16:B6:11:B1:3B:F8:5B:B5:58:14:51:8C
Authority key identifier: 55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D
Certificate issuer: /CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d
Certificate serial: 0199FB7CFAF2B81D17EE18CAC342F63BED58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
Manifest number: 1214
Signing time: Sun 19 Oct 2025 08:01:35 +0000
Manifest this update: Sun 19 Oct 2025 08:01:35 +0000
Manifest next update: Mon 20 Oct 2025 08:01:35 +0000
Files and hashes: 1: P9bs-w5DkWpu1aBuTV3PHAzvH6Q.roa (hash: oAepJ4+j0gmtz7XxqoB+yGPsz6tmKuFLhq6h9fcVyTY=)
2: VXe0uHq4aspXflbjjVuKWBPMzD0.crl (hash: yLTArMhgktB9MarycXyEPHxMSSpjC3wUZAGlfOcPq3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:fa:f2:b8:1d:17:ee:18:ca:c3:42:f6:3b:ed:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d
Validity
Not Before: Oct 19 08:01:35 2025 GMT
Not After : Oct 20 08:01:35 2025 GMT
Subject: CN=b427ce7c0c488f7416b611b13bf85bb55814518c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:45:55:3e:3b:dd:ba:8d:6a:ca:0b:41:4e:c9:
51:60:ef:ad:28:7e:b4:40:45:d5:ec:87:10:d6:ff:
3d:9f:6b:7e:a5:32:1c:06:b3:0f:ca:b3:29:97:a9:
b2:4b:b5:a4:3f:b9:02:1f:a5:14:6c:83:f3:e8:17:
35:d6:3c:00:9e:58:17:e2:a3:db:54:31:14:7c:24:
ec:18:f4:c2:15:0d:7e:e5:f9:87:ac:c7:6b:a8:5a:
89:b8:39:f4:2c:ab:35:10:35:72:3c:0f:63:72:35:
40:07:43:7d:50:d7:79:1a:2f:85:51:db:78:d0:95:
ce:c3:fc:22:6f:8f:fb:c8:5f:47:eb:13:da:0a:c2:
5c:2f:dd:de:9d:4d:e5:91:f4:af:02:2b:f0:bc:e2:
33:e9:3d:20:ef:52:b0:a0:08:d7:e0:94:30:f1:0d:
ab:63:5e:74:3d:9c:76:f8:67:7e:06:38:1f:0b:00:
2b:06:ee:77:11:db:de:e3:55:2a:d6:0a:7f:6c:29:
3d:ab:37:25:96:86:76:eb:00:fb:f2:d9:1a:a4:f8:
85:3b:23:0e:83:0d:3a:e3:d1:ed:c1:22:72:0a:94:
97:3d:21:d1:b8:90:6b:d4:82:fb:92:5e:da:84:81:
f7:23:77:cf:89:98:d5:88:9a:77:d8:9b:1e:2f:4b:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:27:CE:7C:0C:48:8F:74:16:B6:11:B1:3B:F8:5B:B5:58:14:51:8C
X509v3 Authority Key Identifier:
keyid:55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:68:78:a5:51:21:f6:2e:9d:17:0f:91:02:f3:43:b5:b0:91:
73:e4:dd:d4:a3:a5:5c:2c:1f:37:32:5e:43:e1:4a:10:19:03:
f7:6f:9f:9c:a1:5e:36:f9:fd:b5:09:aa:52:d6:07:05:6a:2c:
3a:1c:c7:d3:e3:aa:3a:4a:25:07:cc:70:d1:ca:d8:88:8c:c6:
4d:3a:3f:88:27:23:f6:ca:e3:15:2b:e6:cf:01:c1:a2:53:0a:
9d:0f:4d:95:2e:0b:58:61:2d:9d:a9:1d:82:77:ba:6c:66:a6:
d8:25:69:84:56:f2:3d:d4:8a:a2:3f:11:de:39:5b:a7:fb:f9:
c1:45:f3:2f:e4:fb:7f:ee:cb:35:a1:46:50:ab:e1:58:1a:eb:
15:89:c6:7f:46:33:e8:5d:5a:5f:9e:d5:62:13:2b:dd:d9:93:
07:0c:37:e2:fa:98:84:b6:a5:b8:2e:7b:c7:fa:67:0f:04:fd:
eb:a4:b3:0a:88:66:1c:0a:50:fc:c7:e0:fd:9e:35:e0:8f:37:
44:de:0a:bc:18:4e:2e:21:cd:43:e3:57:64:7c:5f:30:52:c0:
80:30:ee:44:33:3b:7d:b3:3b:36:44:12:5d:12:61:70:ff:69:
54:b1:ed:62:c1:ac:61:2a:b8:c4:ee:dc:1f:fe:10:1f:83:a6:
8a:19:d4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:52 2025 by rpki-client