Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
File: pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft (raw, json)
Hash identifier: AcfoqG6VufdwuQ0kPFr+Z/FeU8NBS8K8Sk4o9sCSJvw=
Subject key identifier: 3F:20:61:C3:0C:98:5C:71:68:4C:AF:04:FC:C4:9B:4B:DB:C5:45:FB
Authority key identifier: A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
Certificate issuer: /CN=a5541609cd947bedfc99125840030108a3f141c1
Certificate serial: 0199FB7CD744DBDDF7625A6BC9CE1EBA254C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
Manifest number: 57
Signing time: Sun 19 Oct 2025 08:01:26 +0000
Manifest this update: Sun 19 Oct 2025 08:01:26 +0000
Manifest next update: Mon 20 Oct 2025 08:01:26 +0000
Files and hashes: 1: iLByoUx0bSCHlK7naUf7Pjeg10s.roa (hash: p3s+AOmmmdMwW9p+y2A48IFtADeAkvA1dJFhumD2cdE=)
2: pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl (hash: CuKgrj2aKI0mmgyCEi25ozMCVuHIsexMfeqA9GMUG10=)
3: r_gNy_NosPTOUZDPM9v1Nr4pMtI.roa (hash: rrscO3NmKjsybDb1fyB6oQll5WC+7i7OHcmPMCVOfDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d7:44:db:dd:f7:62:5a:6b:c9:ce:1e:ba:25:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5541609cd947bedfc99125840030108a3f141c1
Validity
Not Before: Oct 19 08:01:26 2025 GMT
Not After : Oct 20 08:01:26 2025 GMT
Subject: CN=3f2061c30c985c71684caf04fcc49b4bdbc545fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f8:2c:72:69:d9:9e:a5:f8:91:3a:74:d8:86:
28:af:89:76:66:0a:51:cb:e5:63:2f:e6:cc:b4:3f:
f1:46:9e:ad:0b:6f:fe:fb:6f:4f:34:05:6a:bd:25:
66:f8:47:00:07:54:3b:65:42:88:80:d8:33:6f:9a:
9a:0d:f7:6b:ea:fd:85:aa:c5:34:43:8a:db:f2:a2:
8f:80:c4:0e:39:55:3c:fa:d9:28:03:b4:bb:66:54:
ad:a0:68:28:66:7f:af:9e:4e:1c:ce:20:fe:dd:97:
67:f1:a9:f0:a2:03:1c:12:78:6f:39:4e:0b:4a:fe:
6d:cd:9a:21:d2:cf:aa:ca:1f:0f:29:cc:5d:b5:8b:
25:e7:04:73:fd:59:33:bd:bd:09:4e:12:68:18:90:
7a:8c:46:24:6e:4a:17:c2:45:47:74:d8:9e:ef:15:
89:a0:4c:bb:56:4c:08:2c:2c:8d:22:27:e3:4c:85:
51:0c:b5:91:3b:60:29:4e:e1:12:0a:1e:64:30:1d:
40:d0:22:db:67:18:34:bb:c5:2a:f3:f1:c0:08:a5:
b8:dc:2c:eb:2a:5c:21:36:e3:d6:19:f5:b2:da:82:
fd:42:67:7e:2e:76:19:fc:0e:ca:3b:f8:1e:58:6b:
2f:c9:35:f3:95:92:64:1b:0e:de:75:41:9b:a6:ad:
5c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:20:61:C3:0C:98:5C:71:68:4C:AF:04:FC:C4:9B:4B:DB:C5:45:FB
X509v3 Authority Key Identifier:
keyid:A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c6:ae:20:41:6a:89:73:d8:bd:71:6a:b5:85:55:44:4b:0c:
93:5e:8d:d0:5b:9b:9e:dd:80:d2:f1:2a:f9:da:d8:ba:6a:e7:
93:00:ad:e6:ed:c1:43:9b:18:c0:0c:bf:53:da:63:38:3a:73:
c8:4c:26:8b:c8:1b:a2:72:91:8f:08:47:cd:37:26:c6:d6:13:
a4:83:3d:ec:1e:e6:ec:f3:32:9a:1b:a2:b5:3e:3c:00:28:2f:
fc:c3:58:4b:94:2d:e4:66:a9:bc:24:c4:d7:2a:44:1d:77:95:
ae:47:77:34:04:dc:e8:92:2b:33:26:20:50:11:89:a7:97:1e:
a1:44:81:43:1c:ba:3e:d3:70:36:76:80:98:9f:e0:be:fd:c8:
25:de:26:b7:8f:f5:76:15:6d:13:e4:e7:e2:81:de:62:11:c6:
6f:4f:41:22:88:5f:de:aa:51:29:2d:f7:63:89:38:3b:56:83:
3c:6e:68:88:b0:99:48:ce:79:fe:34:84:e3:ad:ed:c5:a4:e6:
2a:80:47:c5:90:a5:d0:08:96:7c:5f:36:90:fb:9f:6e:55:8f:
3a:a7:67:70:68:dd:88:91:87:1f:0b:5e:73:e6:a5:50:5f:47:
77:4a:79:5b:03:85:c1:09:7a:98:0d:2c:11:09:68:5b:3a:cf:
6b:4f:16:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:34 2025 by rpki-client