Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
File: vqse58Ta0p0SfVZdG5N5RlwoiTc.mft (raw, json)
Hash identifier: mbb1lxRj7YWmTb8IPJttPBASbqrxJGld2S9zeuF408Y=
Subject key identifier: 3D:C9:78:02:0C:C9:E5:73:07:A9:D0:DA:B7:77:7C:5A:25:A8:4D:2F
Authority key identifier: BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
Certificate issuer: /CN=beab1ee7c4dad29d127d565d1b9379465c288937
Certificate serial: 0199FCC65DDFB6CB87C061BC1C2921927EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 14:01:22 +0000
Manifest this update: Sun 19 Oct 2025 14:01:22 +0000
Manifest next update: Mon 20 Oct 2025 14:01:22 +0000
Files and hashes: 1: M6HhHlPpshdNz9eD4RpZo054CNI.roa (hash: Oj0e4uW1W20zki7xK3pquycyEqfpqSDKDUOaElxS5vM=)
2: vqse58Ta0p0SfVZdG5N5RlwoiTc.crl (hash: xF46uSAkKxUdk7KwOGSEwLJ/L9Yg4Q3PyNeIc88N4mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:5d:df:b6:cb:87:c0:61:bc:1c:29:21:92:7e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beab1ee7c4dad29d127d565d1b9379465c288937
Validity
Not Before: Oct 19 14:01:22 2025 GMT
Not After : Oct 20 14:01:22 2025 GMT
Subject: CN=3dc978020cc9e57307a9d0dab7777c5a25a84d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:47:78:75:c5:f3:42:14:c8:49:0a:3c:85:33:
7d:5d:0a:eb:28:de:18:db:83:68:8e:29:2e:fe:57:
9d:8f:2e:1f:24:af:72:19:64:97:0d:45:b1:19:ca:
2d:ab:15:dc:2f:de:e4:bb:5e:64:c4:70:e1:8f:a6:
cf:b4:65:fe:41:c4:7f:b8:73:de:69:e5:70:ef:c6:
2d:02:68:fc:8a:92:85:19:05:3c:e4:d5:fe:89:fe:
85:68:b4:2f:33:e3:6f:4e:6d:35:cd:65:4b:3d:fa:
c0:39:0b:7e:b1:a2:65:3e:44:02:1f:1c:86:72:4c:
0e:a4:7a:63:a1:e5:18:49:64:54:d6:25:01:bd:fc:
f9:24:60:e4:f5:c2:f1:c4:8a:50:95:dd:e5:46:63:
38:6a:e9:34:fe:17:71:ff:39:3c:82:6c:dd:23:17:
71:5f:79:2f:ea:da:98:0b:6d:9f:c9:c0:28:04:b2:
4d:43:d9:59:2c:84:5e:b3:f1:2c:69:97:14:05:ab:
d7:42:75:f8:8e:7c:21:c3:dd:11:26:da:9b:db:e6:
25:d1:72:0a:ff:c6:69:27:c1:1e:05:43:3e:37:ca:
05:19:88:c0:6e:f8:38:87:7a:a4:9a:4d:f3:34:11:
7f:28:af:5d:1b:74:f3:0d:af:35:2d:8b:81:90:76:
f4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C9:78:02:0C:C9:E5:73:07:A9:D0:DA:B7:77:7C:5A:25:A8:4D:2F
X509v3 Authority Key Identifier:
keyid:BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:95:08:26:75:d3:23:41:7f:3b:aa:9f:8b:27:49:99:90:a6:
39:0a:ab:27:50:6a:be:ac:87:be:0b:ad:f9:65:b0:62:54:88:
59:c3:e1:bb:62:fe:7d:16:e8:d1:e9:4d:67:dc:0c:af:50:af:
f4:62:d8:cb:10:1c:da:63:f2:4e:b0:5e:48:07:dd:52:f6:20:
22:63:c2:94:29:6c:58:95:cf:ec:b3:c4:8e:a1:f8:d4:03:bf:
45:b4:07:d0:df:e8:69:4e:35:a2:d7:80:0c:69:e3:82:28:f2:
c9:1e:9e:0e:4f:00:fe:96:97:74:05:f0:8e:ff:8e:6d:ad:32:
58:f8:bd:2f:d4:24:5f:a2:31:a7:46:66:ce:09:98:4a:31:86:
83:71:7a:01:97:35:42:3f:42:b3:9f:53:ca:84:fc:dd:89:43:
15:74:3b:b9:e7:b2:9f:e0:48:67:8f:45:20:59:1d:70:93:02:
ad:a7:44:7f:4e:43:e3:d2:eb:e2:e6:fd:8e:bd:53:89:79:31:
3f:3c:b5:2e:0a:4f:9e:1c:f6:5a:e5:1a:6d:b8:26:b3:ff:0b:
4e:43:44:cd:8f:8f:26:d8:3c:66:c7:1e:3e:65:27:f3:8a:47:
ea:c2:a5:7f:f3:28:89:7a:30:7c:43:ba:f9:13:de:0d:22:3c:
73:92:6e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:45 2025 by rpki-client