Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
File: vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft (raw, json)
Hash identifier: izNPykp281liw0wOG3cG78EFCbQlBA+aMxqHaUvqIzo=
Subject key identifier: 7C:70:6F:67:4C:B9:F8:5F:A3:DA:57:C9:FE:BC:F6:34:82:8D:61:19
Authority key identifier: BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
Certificate issuer: /CN=be722a99732c9c3cbc20b0a47292a823782603ac
Certificate serial: 0199FC58E793E788426E8019156CC39DCFA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 12:01:48 +0000
Manifest this update: Sun 19 Oct 2025 12:01:48 +0000
Manifest next update: Mon 20 Oct 2025 12:01:48 +0000
Files and hashes: 1: KEoMu2N6_T8O9ufaf0Y2clZ16n8.roa (hash: TtnWx5gcstoPtaU3BdfsPkG0EZi+JY/3eJmxv3P7PTM=)
2: vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl (hash: ShbLpzrXSkEAxAvDLRw3D6h2B+pfPZFTwgi+fbIOdQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e7:93:e7:88:42:6e:80:19:15:6c:c3:9d:cf:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be722a99732c9c3cbc20b0a47292a823782603ac
Validity
Not Before: Oct 19 12:01:48 2025 GMT
Not After : Oct 20 12:01:48 2025 GMT
Subject: CN=7c706f674cb9f85fa3da57c9febcf634828d6119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7d:57:e6:10:c4:04:f2:ca:55:2d:8b:97:0c:
ed:cf:e5:f2:1a:2c:2c:ce:b1:ef:bc:0c:bb:f4:23:
a2:31:56:94:95:50:79:8d:db:1c:27:f0:0c:bb:93:
e5:1a:40:c3:9e:c5:14:d0:e0:df:b6:e1:77:16:18:
35:48:aa:59:0d:7b:8f:44:4b:ff:df:37:cb:79:e1:
11:32:41:db:c0:55:54:2a:14:52:d5:fb:ba:15:0b:
42:86:90:57:e5:96:a1:18:ff:0f:bc:91:96:35:de:
a9:73:d9:40:7c:bb:90:c5:49:02:2c:05:d7:4c:e9:
17:0c:d0:0b:ba:61:64:a1:b1:14:a5:6c:5e:48:47:
1e:23:7c:4a:b3:3a:92:41:63:f1:f7:56:d2:1f:bd:
d0:81:7a:a0:74:0a:5e:bc:f3:77:97:43:03:20:bb:
10:17:d1:1b:a4:ca:02:a1:37:ce:6a:0c:0d:86:4a:
a2:ec:4a:f3:3d:f8:72:22:e1:7c:c7:78:66:a1:7c:
48:81:a1:d2:59:fc:03:a3:44:9d:12:c5:22:17:0c:
b9:cf:df:ee:81:ec:ab:8b:fc:20:01:0a:cf:1b:67:
ed:f0:7c:6b:f6:e8:57:b4:9c:e2:a7:79:a1:70:e2:
98:39:f2:e3:9d:ab:62:2d:99:27:05:98:cc:d6:c8:
3d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:70:6F:67:4C:B9:F8:5F:A3:DA:57:C9:FE:BC:F6:34:82:8D:61:19
X509v3 Authority Key Identifier:
keyid:BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:38:ac:80:26:6d:9b:5e:fa:45:c1:d0:9d:68:21:b4:fa:5f:
a6:40:63:64:90:0f:26:14:01:f5:cb:92:64:39:26:a9:0a:5c:
05:ec:f2:19:42:47:64:32:47:b3:f0:dd:e9:fe:a4:48:34:ef:
ba:5c:f5:22:cf:c3:b3:96:73:39:ff:e6:2e:a1:fb:27:8e:5f:
0f:50:86:88:54:13:f2:44:f3:00:75:a5:e5:56:78:43:a8:bb:
6a:4a:fa:a6:e3:e7:3e:6c:c3:1e:4d:c0:f6:d0:05:28:7d:28:
4c:fa:59:ec:55:c8:eb:a5:4d:23:85:e8:92:01:a6:3f:b8:98:
85:60:67:e9:bf:c7:45:13:57:f0:58:79:39:09:29:29:d7:eb:
90:20:8e:f9:01:78:0e:06:98:85:25:5a:b1:cc:d6:d1:98:ba:
72:2e:e3:34:8b:a0:b7:7e:b9:33:a1:dc:59:47:56:bd:14:43:
60:cd:b3:16:bb:fe:d2:35:45:d0:38:88:97:d7:9f:9b:be:e0:
3f:4c:7b:0c:21:f4:fe:27:f5:9f:fa:ed:f2:91:d7:d5:54:bd:
1e:96:b9:f8:73:db:0c:82:a1:ab:10:98:93:80:d1:ec:de:d6:
6f:5b:17:48:6d:3e:ad:13:16:23:97:e4:aa:8a:8c:50:97:b9:
34:f6:e0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:34 2025 by rpki-client