Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
File: VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json)
Hash identifier: lQHybSPBgZwG6Dataes+td8hjfBurPGPEmfW9dJgMVo=
Subject key identifier: 3D:CF:2E:CC:DF:56:56:8A:DF:C5:1E:98:57:08:65:0F:87:2C:67:38
Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
Certificate issuer: /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Certificate serial: 019A006C806653C6E40D2C8F2BDE7DBFCD3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
Manifest number: 10D8
Signing time: Mon 20 Oct 2025 07:01:41 +0000
Manifest this update: Mon 20 Oct 2025 07:01:41 +0000
Manifest next update: Tue 21 Oct 2025 07:01:41 +0000
Files and hashes: 1: 6hSnRR0poSKLkgYbDLBwSreCHXw.roa (hash: 2LSwLZwlqMozkmvNpXnEPuZJylqRvk5GNtgnCAWWf9Y=)
2: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: 4ls8iMiiscxU+ovOiZyssxnLDL4sauOidBpmtKixrRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:80:66:53:c6:e4:0d:2c:8f:2b:de:7d:bf:cd:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Validity
Not Before: Oct 20 07:01:41 2025 GMT
Not After : Oct 21 07:01:41 2025 GMT
Subject: CN=3dcf2eccdf56568adfc51e985708650f872c6738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5b:e4:21:30:9e:a1:09:d5:e0:51:8d:bf:3f:
7e:b2:72:c3:e3:f8:cf:05:2b:70:5c:a6:1b:66:f6:
33:23:7c:cf:6f:87:55:b9:9d:50:db:1a:30:8c:67:
92:53:a3:8e:4f:8d:eb:03:35:d5:f8:d0:ff:a9:a3:
ba:88:85:00:3c:1c:3e:e8:25:7a:08:03:1d:7c:0b:
96:a3:86:45:88:08:60:d3:37:81:91:cd:7a:28:b1:
73:9e:94:5b:40:7f:36:b3:7a:70:35:12:40:44:81:
20:18:47:0a:d9:88:25:89:7a:3e:a2:e0:5d:b8:57:
06:48:77:b1:e9:ba:98:70:34:9a:65:dd:d8:d5:4e:
52:87:67:77:d0:f1:62:d9:be:9f:9b:d8:ed:59:15:
b7:af:db:64:4e:cd:02:fe:d1:f0:9e:14:2e:64:b8:
3e:ec:f0:8c:80:97:02:34:85:e5:5a:92:93:ac:83:
5c:cb:f3:4b:3c:ef:2f:d6:e9:e8:7b:59:18:87:af:
79:a2:ad:ba:10:90:2e:30:c3:a6:ed:8d:df:a9:4e:
94:ac:91:1b:08:f3:96:c4:01:c9:9d:78:a2:9e:fb:
1c:1c:7a:7f:5f:89:ea:f1:11:f2:ed:01:0a:ab:29:
c0:02:bb:d1:3c:d8:96:84:48:ae:58:f9:1c:59:8d:
58:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CF:2E:CC:DF:56:56:8A:DF:C5:1E:98:57:08:65:0F:87:2C:67:38
X509v3 Authority Key Identifier:
keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:fb:39:b9:33:ff:b0:21:b8:40:c3:35:17:ed:62:0e:73:43:
5d:d8:78:61:83:1f:c6:1f:3f:6f:b0:8c:32:b2:a1:fc:76:b8:
19:39:ee:42:21:cc:8e:4c:60:6e:cc:cf:cb:ed:9c:6f:31:f3:
6e:05:c7:08:63:7a:9b:4a:34:d8:b2:9d:e1:fd:9c:e7:f6:15:
0a:ed:b3:12:eb:d6:06:44:f3:6f:b8:34:dd:8f:2e:c5:0b:26:
c5:63:7e:e3:f8:02:9d:9e:15:87:e1:8c:89:a4:7e:50:5f:99:
d4:33:bf:35:46:99:cd:17:92:2d:5a:2b:07:ea:5e:ae:57:8c:
fb:85:04:5e:14:64:22:21:34:ae:86:c8:97:8a:99:53:4d:81:
2c:06:1a:c1:ce:c8:ce:f4:48:d8:7a:8e:76:f3:df:cb:56:b3:
67:05:6d:07:8c:ff:ce:06:85:c0:96:be:1d:f2:19:5f:a4:7b:
79:6e:b8:8e:82:f3:32:ce:65:22:c0:5c:01:9a:9c:6a:05:c5:
73:64:87:29:d0:84:40:52:b4:8c:f1:5e:e7:38:7e:72:26:26:
13:0f:c9:05:19:94:ff:6b:9a:19:39:f2:a3:b1:55:ef:cc:b2:
6f:8f:d3:ff:23:f7:32:ad:f7:bd:3c:83:19:dc:86:6c:c3:74:
28:de:39:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAbIBmU8bkDSyPK959v809MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MGM0Zjc0MmZkMzI5YTM2ZmNkMjljNGViOTg0ZTVmNDk1
MTVkOTkwHhcNMjUxMDIwMDcwMTQxWhcNMjUxMDIxMDcwMTQxWjAzMTEwLwYDVQQD
EygzZGNmMmVjY2RmNTY1NjhhZGZjNTFlOTg1NzA4NjUwZjg3MmM2NzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1vkITCeoQnV4FGNvz9+snLD4/jP
BStwXKYbZvYzI3zPb4dVuZ1Q2xowjGeSU6OOT43rAzXV+ND/qaO6iIUAPBw+6CV6
CAMdfAuWo4ZFiAhg0zeBkc16KLFznpRbQH82s3pwNRJARIEgGEcK2YgliXo+ouBd
uFcGSHex6bqYcDSaZd3Y1U5Sh2d30PFi2b6fm9jtWRW3r9tkTs0C/tHwnhQuZLg+
7PCMgJcCNIXlWpKTrINcy/NLPO8v1unoe1kYh695oq26EJAuMMOm7Y3fqU6UrJEb
CPOWxAHJnXiinvscHHp/X4nq8RHy7QEKqynAArvRPNiWhEiuWPkcWY1YgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3PLszfVlaK38UemFcIZQ+HLGc4MB8GA1UdIwQY
MBaAFFQMT3Qv0ymjb80pxOuYTl9JUV2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9iZTY4MTktODNiYi00MGUwLTlkNzQt
Y2ZiMGQwNDkzYzNhLzEvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9iZTY4MTktODNiYi00MGUwLTlkNzQtY2ZiMGQwNDkzYzNh
LzEvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePs5uTP/
sCG4QMM1F+1iDnNDXdh4YYMfxh8/b7CMMrKh/Ha4GTnuQiHMjkxgbszPy+2cbzHz
bgXHCGN6m0o02LKd4f2c5/YVCu2zEuvWBkTzb7g03Y8uxQsmxWN+4/gCnZ4Vh+GM
iaR+UF+Z1DO/NUaZzReSLVorB+perleM+4UEXhRkIiE0robIl4qZU02BLAYawc7I
zvRI2HqOdvPfy1azZwVtB4z/zgaFwJa+HfIZX6R7eW64joLzMs5lIsBcAZqcagXF
c2SHKdCEQFK0jPFe5zh+ciYmEw/JBRmU/2uaGTnyo7FV78yyb4/T/yP3Mq33vTyD
GdyGbMN0KN45zA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:07:14 2025 by rpki-client