Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft
File: VB_cei8RpXZtOte99iXOXhGaj98.mft (raw, json)
Hash identifier: 61j9qQz+srWEd/oUhzVQG3p5ddDY9YY3Wy9r733z9+U=
Subject key identifier: AC:BF:EA:10:A8:44:D5:41:02:37:18:80:EF:3F:2A:32:ED:BF:30:11
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 0199FDD9F5BDBC35795A1CEC092ADBACF5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft
Manifest number: 14DE
Signing time: Sun 19 Oct 2025 19:02:23 +0000
Manifest this update: Sun 19 Oct 2025 19:02:23 +0000
Manifest next update: Mon 20 Oct 2025 19:02:23 +0000
Files and hashes: 1: 7ksjm8HRjbK8Xa3kYQyBwHRt850.roa (hash: XJ/0D2qapy/GZTvclk6xwBlsvUF2Ej9o4SsIbQdnohY=)
2: VB_cei8RpXZtOte99iXOXhGaj98.crl (hash: w1bbrlqnrFhyE/Ss72P/MMI8P13L6poOlTVJ9KU6fAI=)
3: _O08NAMTRYiI66s3j5CAN1Tnfbs.roa (hash: tT0fH123IaRd9D3zuV26RbVwu75ai0sfSAd21oMJcLM=)
4: hBVN65EbayKmtq0nf_DrOmp4TK4.roa (hash: 8Z/abmaZZr7+4cnbsbtuQNaeAvpkyIfevg6c5+wi6wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft
rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:f5:bd:bc:35:79:5a:1c:ec:09:2a:db:ac:f5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Oct 19 19:02:23 2025 GMT
Not After : Oct 20 19:02:23 2025 GMT
Subject: CN=acbfea10a844d54102371880ef3f2a32edbf3011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:a1:98:bc:55:6d:fd:18:39:b5:f7:1b:76:
57:25:25:07:39:be:d6:c2:73:e5:4d:e5:c9:5d:99:
8b:94:ba:e5:e3:07:f5:fe:41:26:54:89:29:e6:48:
7f:42:0f:80:5c:fb:cf:78:fc:32:86:84:d2:1f:b2:
e7:19:9a:0a:89:50:f8:a4:6e:57:b2:67:eb:21:f6:
45:c3:5c:62:cf:ea:ae:27:79:21:60:33:a7:0c:eb:
64:07:be:c9:4d:84:a0:17:db:d0:d7:b1:a0:0b:27:
79:94:28:7d:8c:09:86:f8:fd:2a:84:f4:ef:80:3b:
b6:95:6e:f8:a2:87:ca:10:37:8a:fa:7a:ee:37:28:
7f:30:8f:1f:85:d3:32:c5:96:e5:67:54:c3:77:55:
d5:26:6d:64:bf:86:94:80:12:5b:ab:d4:25:2b:24:
41:9a:67:3a:9d:80:4a:44:1e:9a:a5:ed:bd:96:27:
3f:93:fb:58:41:58:4d:cd:ce:1f:af:f6:0d:16:a6:
e8:19:ed:39:32:cf:03:49:d2:ba:25:20:3b:00:9c:
0e:35:74:1b:b0:37:91:79:6d:01:40:f5:70:cd:fe:
12:47:a1:0b:c3:37:8b:ed:49:27:8a:3f:b9:d0:81:
9e:76:30:c2:88:a4:9d:f9:62:51:20:90:89:55:5b:
6c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BF:EA:10:A8:44:D5:41:02:37:18:80:EF:3F:2A:32:ED:BF:30:11
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f6:35:ad:fa:35:29:7f:97:37:3e:59:87:7e:6b:cd:c9:55:
97:f3:df:4b:f8:49:b9:4c:70:a4:ea:de:ab:29:3c:c4:d6:af:
c2:f5:37:ed:e5:aa:6c:b2:3f:e6:a2:5e:5d:5b:ff:b4:ad:55:
69:81:40:30:ba:5f:b4:26:53:43:4f:e3:6e:bf:69:82:88:f0:
26:8e:12:7e:e3:f8:66:13:75:40:7e:99:75:b1:e7:ed:d8:c2:
30:2f:71:1d:98:66:34:b7:43:0a:84:0f:b3:09:18:a1:dc:11:
b7:2d:d4:1b:51:4f:56:59:66:54:5f:f2:4f:25:32:fa:13:af:
ad:8d:ca:6a:51:0b:c2:cd:15:80:20:76:0d:75:85:8a:c9:18:
ae:35:67:24:81:f5:6c:32:3a:8b:c7:ef:8f:3b:14:b6:cd:7f:
20:91:da:bc:5a:30:7d:1c:b6:65:39:69:49:56:f9:92:2e:60:
38:f3:7a:43:f6:01:9a:ab:73:9d:b8:5f:f5:0e:ac:bb:7e:97:
6a:7a:b1:94:9b:b0:16:ea:4f:3d:2e:64:a0:d0:83:4f:a9:9c:
2a:c6:fe:71:f4:f4:9c:8f:4e:0c:fe:18:93:51:41:25:d8:c1:
02:9b:35:c1:b7:be:5a:41:6d:9f:12:5a:bf:0d:06:3b:a5:2c:
e4:4a:84:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:42 2025 by rpki-client