Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
File: VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft (raw, json)
Hash identifier: fgPKQadyCpp3YVzzVtwm0Q9P6xuuKPVyCfdNpyLJ2ZE=
Subject key identifier: C6:72:4E:1D:E2:A0:AC:A8:76:16:12:46:E8:BF:7F:C0:44:DD:F5:5C
Authority key identifier: 57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
Certificate issuer: /CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Certificate serial: 0199FAD849B83AEEBB4606AA5319F74E1BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
Manifest number: 0E96
Signing time: Sun 19 Oct 2025 05:01:42 +0000
Manifest this update: Sun 19 Oct 2025 05:01:42 +0000
Manifest next update: Mon 20 Oct 2025 05:01:42 +0000
Files and hashes: 1: VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl (hash: eW/b1K+JvGap+kXpomTGuPiYmVgSQWpDJ5Az8ZfVR8c=)
2: q4OtYqQ5F8toaT0oHQfCemmVpFY.roa (hash: pSnKgnqoG1TyZ2WLGeGgthK4U38JeBxESDQq72YUX64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:49:b8:3a:ee:bb:46:06:aa:53:19:f7:4e:1b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Validity
Not Before: Oct 19 05:01:42 2025 GMT
Not After : Oct 20 05:01:42 2025 GMT
Subject: CN=c6724e1de2a0aca876161246e8bf7fc044ddf55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:04:38:3f:56:55:60:c1:bc:99:12:0a:c2:
dd:f1:b6:b7:ef:9d:56:d6:4a:7b:0a:e7:20:ef:8c:
c7:a3:b8:4c:c6:26:2f:a5:f0:f1:d5:41:3a:1f:39:
2f:4c:39:c8:de:d6:05:5b:d4:0f:7a:e5:d5:0a:5d:
72:27:d9:6a:3e:d8:7b:1b:58:b2:82:46:e8:fe:9c:
74:90:19:e8:0e:1f:4e:69:75:eb:12:69:1b:ab:d3:
d0:b7:4c:21:fa:8f:10:fb:0b:9b:3c:88:c0:e3:fb:
ea:2d:6b:24:d1:24:61:ab:de:fa:e2:65:1d:d7:fc:
63:83:67:c2:be:59:42:a1:ae:1a:96:c8:bf:1e:1e:
0d:01:51:c2:5a:63:0e:bb:ef:cb:41:3e:b0:7d:3f:
7a:5f:79:58:94:e9:5c:e0:ac:1a:df:a8:b4:83:6b:
c2:4d:6a:4c:e7:8a:c1:79:15:26:0f:9c:46:1a:5f:
90:80:23:e1:3c:8c:1b:4c:df:77:74:2f:43:09:e2:
f6:c3:59:00:d1:01:77:a5:af:38:c4:13:71:b7:17:
3d:4a:a9:f1:41:76:c4:98:3a:84:d8:6d:7a:63:86:
51:17:25:ea:90:ab:2d:a0:eb:70:cc:f9:7d:2a:c9:
c8:38:36:85:52:cb:c9:a4:59:22:59:ba:8f:a5:ab:
5e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:72:4E:1D:E2:A0:AC:A8:76:16:12:46:E8:BF:7F:C0:44:DD:F5:5C
X509v3 Authority Key Identifier:
keyid:57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:4d:2a:aa:7b:4a:f6:69:24:d1:fe:b2:ba:d4:f8:64:68:21:
36:02:d3:fb:a6:b0:be:75:b3:8c:35:77:cd:eb:07:3d:a8:31:
8e:a1:55:af:e5:50:4f:21:72:08:ef:bd:51:f7:45:3c:6d:7a:
8c:b9:e7:6d:20:3e:e5:f5:4b:6e:c9:54:32:f6:a7:8a:1c:c9:
a4:ce:aa:66:c6:88:fa:b6:b8:b9:cd:34:dc:4a:9e:73:e3:25:
d3:14:09:9d:59:27:69:bc:7f:48:8c:44:6d:7a:d2:9e:77:41:
07:c8:97:f5:a0:95:7f:64:59:22:80:42:6c:22:21:5f:03:b2:
d0:76:10:1d:66:c4:ab:6e:b9:e3:b6:2c:b7:26:85:7a:22:ae:
d4:8d:6c:a2:48:25:ec:92:85:28:64:c1:b8:96:2a:4f:94:c9:
e6:5d:95:98:a7:26:41:62:05:bb:11:23:15:9b:13:9a:da:9b:
a5:42:33:e2:2f:07:fb:3d:e8:98:b4:c0:2d:9f:80:d2:eb:7a:
a2:31:23:b7:b5:1e:65:b7:10:d8:3e:e1:87:2e:f2:d6:73:07:
13:06:31:29:65:97:86:dc:d3:a6:c8:ea:32:ee:9a:b4:6a:0a:
28:ea:10:63:81:f2:18:aa:cb:52:b9:0a:6d:88:26:8d:64:dd:
96:8c:69:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:10 2025 by rpki-client