Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
File: VxoPwBLvuJZQp35vvRLcq9pCjLA.mft (raw, json)
Hash identifier: dJcsX23NX7wONK2hEiwWevHp9srbt/XpTwJcKWa5iAg=
Subject key identifier: E8:D4:46:1A:0E:F0:D6:1B:75:FB:8E:46:F5:0D:FC:DE:84:28:52:49
Authority key identifier: 57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
Certificate issuer: /CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Certificate serial: 0199FEB51A7FBA61EBD17A3CE0FD6D1F6019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 23:01:45 +0000
Manifest this update: Sun 19 Oct 2025 23:01:45 +0000
Manifest next update: Mon 20 Oct 2025 23:01:45 +0000
Files and hashes: 1: 5mIqDi-qSZMNQfzVabCDYIualIY.roa (hash: emChHnQclj1wViLAe/VRE5oA1OWGgrZwj1qbaE68eS4=)
2: VxoPwBLvuJZQp35vvRLcq9pCjLA.crl (hash: mtvenPrAv/Lsf45EeueMBcAZrAB/YIJnBEyczSWJOcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:1a:7f:ba:61:eb:d1:7a:3c:e0:fd:6d:1f:60:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Validity
Not Before: Oct 19 23:01:45 2025 GMT
Not After : Oct 20 23:01:45 2025 GMT
Subject: CN=e8d4461a0ef0d61b75fb8e46f50dfcde84285249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0f:ee:7a:1a:17:18:19:2f:55:5b:54:6e:00:
c2:d3:17:ae:e0:d2:35:cc:42:c4:d3:53:a2:b7:dc:
50:8e:4b:fc:3e:c5:67:8f:5a:64:ba:0a:17:03:59:
d1:f9:cd:c8:3f:5c:4f:4b:29:1b:4c:e0:52:b7:49:
c8:13:69:57:75:f5:f2:0b:37:cb:d9:ca:2a:a4:aa:
36:0d:22:98:70:ad:2e:41:1b:76:6e:8a:f4:e1:30:
04:af:56:90:d7:4f:72:dd:34:b0:bb:ca:4a:4a:df:
ee:59:3f:98:b7:1a:e8:5e:02:db:17:96:38:a0:28:
52:83:a8:d6:64:88:2d:a5:04:c4:6b:4e:4e:b4:bd:
2d:aa:1e:bd:ff:38:74:1a:aa:b1:63:21:6c:97:39:
38:80:b0:3a:b3:5d:ed:c5:78:02:c5:21:25:72:9d:
44:22:26:4d:5f:16:b2:85:50:80:d9:ed:14:f5:da:
ad:e6:d2:fc:10:df:7d:38:e5:a7:6e:26:22:dd:d0:
d2:98:5d:88:89:aa:a6:c7:a7:c0:36:06:21:f6:98:
00:4c:ef:2b:cf:89:ea:95:08:bb:aa:cd:de:78:fc:
79:6e:0a:82:b8:1f:5b:1f:c8:ba:dc:4e:3e:9e:2d:
e4:bd:e9:9e:88:be:b7:81:60:73:af:3d:99:af:c9:
7b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D4:46:1A:0E:F0:D6:1B:75:FB:8E:46:F5:0D:FC:DE:84:28:52:49
X509v3 Authority Key Identifier:
keyid:57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:8a:a3:a9:c4:1a:2c:b5:1c:da:79:f5:77:8e:08:2b:c8:f6:
50:36:cb:d3:03:aa:a8:51:71:9b:40:91:4e:65:0b:a9:1d:59:
b1:72:21:c6:67:b8:26:d8:68:c7:fd:cb:2b:b8:87:89:ce:e5:
b7:19:51:a1:1e:53:50:d5:44:46:dc:cb:c0:43:cb:23:01:4f:
cc:82:55:33:31:0b:22:38:98:a9:f3:be:4f:9c:71:2e:21:47:
a2:29:e9:47:49:71:d5:86:60:cf:cc:09:ed:8d:8a:3f:2b:38:
23:f4:31:27:cb:10:80:62:65:17:56:ed:a3:04:32:b2:38:38:
2a:ff:26:97:75:e1:2a:32:22:04:1d:b2:d9:b3:23:54:52:d4:
0a:6a:d9:6e:8e:9f:3c:82:67:a0:94:a5:54:a7:98:50:59:f3:
0d:91:28:ae:31:84:7a:76:7c:60:e0:07:ce:d0:bd:56:f7:8f:
ea:db:be:86:60:04:8e:17:ed:96:bd:97:8d:37:4b:46:a5:6f:
c3:47:29:5a:a2:e1:d7:f0:ab:61:d8:87:cf:ae:5e:b4:65:38:
20:b9:0e:60:05:ce:88:f3:91:69:9c:d1:24:69:b0:46:9c:f8:
85:dc:41:5c:bc:cf:b4:81:e6:78:be:e0:12:b6:fc:78:f5:23:
e0:7e:64:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:17:49 2025 by rpki-client