Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
File: runVCGNpB2p412FjizKoqbjvcOc.mft (raw, json)
Hash identifier: 5qkpsPxvHuqnl0zKbbMBx1tI2HDXwhSqFo9ocYFr0Xg=
Subject key identifier: 02:3F:B3:05:4C:14:1E:A5:E0:8B:FE:53:FC:8E:82:21:54:52:BD:93
Authority key identifier: AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
Certificate issuer: /CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Certificate serial: 019A01115349E09EE15973F3465E6942323C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 10:01:43 +0000
Manifest this update: Mon 20 Oct 2025 10:01:43 +0000
Manifest next update: Tue 21 Oct 2025 10:01:43 +0000
Files and hashes: 1: TI9bfzfYT_e9UXoNSSRvZ0SIvco.roa (hash: ysZXRJJDaCEwr01HXDnbPPBij8sh3z42AGc9cvU+Xhg=)
2: runVCGNpB2p412FjizKoqbjvcOc.crl (hash: EfZYBC1ZkUtnD2GVMln0iNTg6hqsTAKeknSc/OyChKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:53:49:e0:9e:e1:59:73:f3:46:5e:69:42:32:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Validity
Not Before: Oct 20 10:01:43 2025 GMT
Not After : Oct 21 10:01:43 2025 GMT
Subject: CN=023fb3054c141ea5e08bfe53fc8e82215452bd93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3b:d0:d1:87:d5:08:b7:1e:4c:cd:94:42:31:
95:d5:05:87:4e:4d:35:55:fc:9b:7e:22:da:08:68:
bf:49:aa:f1:4a:5f:fd:d6:f0:36:1f:1c:d0:24:53:
66:57:d0:4e:4a:f0:a1:59:dc:97:7a:40:66:cd:e1:
cb:7a:e7:f2:09:d3:dc:c3:15:83:75:65:25:dd:82:
f2:ff:59:35:a5:69:d0:77:c7:b2:1b:71:80:69:a2:
ff:13:c8:ac:76:58:4f:58:a2:f5:ea:ef:de:75:be:
cb:17:27:3a:91:6c:d6:a1:72:b6:fa:e2:08:82:d0:
34:86:0c:8e:b4:f5:99:31:1c:5f:4c:86:4b:38:ad:
06:44:40:29:34:55:01:0f:20:d3:39:70:8d:2d:59:
87:4d:26:82:60:c8:e4:39:ec:2c:a4:29:c4:3b:76:
3f:ea:25:32:1e:c8:a9:86:4b:f8:4a:15:87:82:b8:
2f:56:fe:a3:6b:c1:98:02:1d:48:1a:44:bf:c0:7a:
cf:34:38:b4:7c:d2:ad:c4:9d:17:d7:54:33:f8:f7:
17:db:d2:2f:50:0e:ea:c5:ba:a2:09:b9:12:6c:5c:
64:1c:d4:86:96:ea:39:74:2d:6f:60:72:56:02:d3:
4c:c3:4a:33:e2:66:ea:51:0f:21:64:9b:af:8f:50:
21:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3F:B3:05:4C:14:1E:A5:E0:8B:FE:53:FC:8E:82:21:54:52:BD:93
X509v3 Authority Key Identifier:
keyid:AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:aa:32:68:b5:c4:f7:96:86:4a:85:d5:37:42:7b:7d:5e:2f:
42:ea:60:47:9b:5b:aa:3f:4a:7a:a6:8b:6a:15:2d:7d:bf:06:
92:26:23:35:03:65:71:31:3d:8c:3c:53:9a:e1:31:be:54:cb:
e7:75:3e:ec:c0:cf:05:80:17:16:83:f3:59:3e:f5:67:1b:8d:
45:e9:32:61:cc:51:a9:f9:e8:0e:f3:b1:57:89:73:70:b2:b2:
e7:4b:6c:93:13:95:85:39:60:a3:d3:9c:c8:31:ce:e6:11:84:
5e:98:16:56:db:af:d0:c6:e5:1d:d6:72:41:46:f7:1d:02:7e:
13:b7:c1:c7:17:c2:d9:d2:0e:6b:28:1d:09:6c:dc:59:36:89:
e9:ba:4a:25:c2:f0:dc:15:e9:94:7c:8f:3c:37:75:bd:ba:96:
f9:2a:73:91:fe:03:78:0e:14:d2:c0:98:29:f5:0c:5d:dc:cb:
63:81:94:82:dc:cb:21:ca:48:9e:95:6d:67:b5:90:03:ad:41:
30:57:1a:1f:83:b0:6c:0b:d4:be:a0:47:ec:17:d0:8b:6b:20:
29:01:6f:20:2c:dc:fb:10:f5:9d:49:0e:c0:d4:a5:38:20:03:
22:b9:65:c0:c5:aa:fb:0f:c4:9b:96:bb:be:5e:52:2f:f2:f3:
77:3e:83:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:56:00 2025 by rpki-client