Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
File: vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft (raw, json)
Hash identifier: Qzhdy3YbcohUS6MV17zDZ8mbUpgZdWWo2+zz8ykt1XE=
Subject key identifier: E1:EC:DB:74:B6:47:34:88:5F:01:67:05:B3:3C:BC:1C:85:52:E5:1F
Authority key identifier: BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
Certificate issuer: /CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Certificate serial: 0199FBEB553A2671CEFE3C092171BCFA6BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
Manifest number: 0F22
Signing time: Sun 19 Oct 2025 10:02:07 +0000
Manifest this update: Sun 19 Oct 2025 10:02:07 +0000
Manifest next update: Mon 20 Oct 2025 10:02:07 +0000
Files and hashes: 1: kwNFG0wAspm4fsxR2YrPKVGk1Ig.roa (hash: Mk2aoCm4frK824+nr9MmscS3ypVOVo2+1jHAmjQT/qI=)
2: vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl (hash: MXoY+e4d16h62pVwQNtDY8dGDXM+mwL9QN0OGSAGHmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:55:3a:26:71:ce:fe:3c:09:21:71:bc:fa:6b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Validity
Not Before: Oct 19 10:02:07 2025 GMT
Not After : Oct 20 10:02:07 2025 GMT
Subject: CN=e1ecdb74b64734885f016705b33cbc1c8552e51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2c:9b:1d:20:38:f0:0c:43:4b:22:f0:fc:64:
b2:53:e7:71:f5:aa:fe:24:6d:28:9e:d9:3e:f1:58:
96:f7:32:78:d1:75:5c:92:c8:17:20:6d:e3:a5:df:
0c:91:fc:95:8a:e3:63:71:af:9a:30:94:a1:7e:ab:
a1:9a:d9:2c:48:b8:fd:c9:50:31:db:e3:7f:72:0e:
4c:d7:2c:ad:92:46:e9:29:32:33:3e:8c:dd:12:12:
a5:6d:b1:d7:25:e2:44:27:4e:c4:c5:53:da:41:38:
30:70:49:d3:38:75:be:d3:fd:4e:35:fa:87:29:e5:
f7:79:d9:9f:d5:c8:16:38:73:bf:43:3a:db:4c:b2:
19:a7:f1:0d:67:63:1b:4b:a6:4f:27:7c:6b:b3:e7:
c6:fd:be:e4:47:5a:c5:3b:81:29:05:8a:2f:75:2b:
6b:01:83:bb:66:cd:02:3a:86:8b:41:17:13:3a:8c:
8e:1b:a2:63:87:b0:cb:f1:b9:df:93:c8:8c:04:4e:
c2:17:95:0f:ab:0d:f0:58:c3:92:fd:1f:45:10:9d:
f3:21:88:c2:86:28:d2:b1:2e:0c:49:c0:a5:c3:c5:
82:6d:07:3c:07:6c:5e:46:89:f2:31:d0:01:f5:9f:
11:f1:ae:df:9d:4c:7a:ee:96:83:08:33:aa:cb:5f:
c3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EC:DB:74:B6:47:34:88:5F:01:67:05:B3:3C:BC:1C:85:52:E5:1F
X509v3 Authority Key Identifier:
keyid:BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ca:d8:5d:ae:ad:5b:f1:ea:09:fa:ec:1f:6a:c1:26:14:ee:
88:b7:2f:08:09:57:83:a0:00:2f:72:ae:ed:93:5f:c2:c9:b5:
ae:43:58:a6:40:f0:4e:a9:f6:1d:61:8d:5a:7a:5c:fb:d8:62:
70:45:14:81:2f:f2:3b:53:d4:a8:31:70:02:c7:da:a4:f7:59:
64:94:14:0f:10:6e:c2:2a:47:a0:6e:86:bc:31:4c:60:98:de:
1a:59:da:e6:0e:f0:10:45:68:aa:56:fe:69:ad:7d:ae:d2:ae:
b4:fb:de:a2:f9:77:4f:a2:55:87:7d:fa:f2:cd:35:67:f1:11:
39:91:9c:b1:0c:bd:1e:0a:98:64:48:aa:a7:89:0f:e9:1a:02:
09:16:37:49:e4:f7:88:e4:7b:6e:5d:47:e2:d0:40:bf:48:5b:
f2:5e:bf:03:97:93:51:c3:8a:c0:aa:0f:1f:57:bd:99:ed:70:
6b:f2:21:90:08:cc:73:d9:bb:44:50:9b:0b:d9:95:33:10:8b:
58:4c:24:7d:85:0c:06:ac:b7:13:07:85:e5:9d:e9:63:4c:fa:
c2:68:f2:81:f7:20:a5:c4:b5:17:23:86:75:e6:cd:3c:8e:d3:
80:01:25:67:60:cf:81:88:81:28:42:57:8c:30:12:ae:90:7b:
d7:6c:c1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:50:06 2025 by rpki-client