
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
File: vqbKA6jBNc7q4jLJN8HuC6uH54I.mft (raw, json)
Hash identifier: aaUhpecRhLA9Ag2SdFRo1R8HpLyk/XvNiSPYG4uW5Ts=
Subject key identifier: D4:0B:75:57:BE:1F:E6:04:F5:3D:F9:0C:AA:4B:21:10:04:65:9D:0D
Authority key identifier: BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
Certificate issuer: /CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Certificate serial: 0199FBEBEB9CA159ED1ED7E200A6E163B35B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
Manifest number: 0EFB
Signing time: Sun 19 Oct 2025 10:02:46 +0000
Manifest this update: Sun 19 Oct 2025 10:02:46 +0000
Manifest next update: Mon 20 Oct 2025 10:02:46 +0000
Files and hashes: 1: RWAst6rhQtck0cf4rpJmbaVPDy4.roa (hash: ptBc35DUx8RheDUbwgxYVnrU5/IkEp9u9Ianwe8RHT0=)
2: dZgYAx_N36qliHArmqX1gaumeGY.roa (hash: f8R8/QcHyuVgs1r9zKBrMS4KaT9iNImM3nX83XfW2bA=)
3: vqbKA6jBNc7q4jLJN8HuC6uH54I.crl (hash: /sWE8wD+0jrOT4Fs5FbdOqYQIJRv+19s5CJrd/sAtiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:eb:9c:a1:59:ed:1e:d7:e2:00:a6:e1:63:b3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Validity
Not Before: Oct 19 10:02:46 2025 GMT
Not After : Oct 20 10:02:46 2025 GMT
Subject: CN=d40b7557be1fe604f53df90caa4b211004659d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:a0:f3:33:6a:b6:cb:c3:e6:c0:a6:fc:7d:
68:cc:83:fc:b5:1e:55:05:46:9d:d6:9b:4f:3a:98:
c6:7b:27:52:c2:b4:7d:33:e3:bf:b8:63:7e:6d:ad:
e5:37:1e:9c:54:8f:81:75:e7:24:7a:5f:94:4d:e3:
a0:59:4c:43:c4:be:ae:eb:af:46:84:e6:78:73:79:
0e:04:1f:e2:73:2c:9c:65:59:af:05:a9:70:7e:f9:
50:3a:b2:fa:dc:a4:d2:2a:26:ab:eb:75:1e:04:5a:
32:8e:3a:97:78:fb:43:67:1a:ae:cb:64:56:85:e6:
de:ba:5d:03:e0:0f:11:33:8d:1f:36:8e:f1:9c:89:
2b:ab:98:7a:46:52:05:ba:e3:0b:16:32:55:be:f2:
38:87:b9:a0:e1:cd:d3:02:9c:84:33:c8:a5:75:f6:
4d:ed:54:e4:9b:08:62:11:a7:43:80:44:5b:38:2b:
e7:4c:d5:c8:76:79:f1:6f:6f:81:20:fe:25:79:c8:
22:52:62:47:c8:bf:d2:88:ff:92:1b:ad:92:ab:c2:
e1:87:54:b3:1b:df:fb:de:43:80:be:7e:31:02:63:
76:1d:f0:f5:05:62:ea:d1:a1:e4:d8:cd:a2:fd:a2:
36:8b:e2:67:40:fb:10:9f:4d:ce:a9:ef:d4:2d:d0:
5e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0B:75:57:BE:1F:E6:04:F5:3D:F9:0C:AA:4B:21:10:04:65:9D:0D
X509v3 Authority Key Identifier:
keyid:BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a4:28:cb:31:47:37:2c:6a:f3:eb:9b:69:aa:a4:3a:89:81:
0f:a4:4f:db:1f:2a:21:b0:e5:90:cb:6a:87:61:fe:d0:f3:12:
61:5f:b4:61:78:5a:2c:0a:f0:ed:94:eb:b1:76:48:2d:fd:0e:
14:ba:86:2d:6c:8e:39:96:27:be:55:2a:10:37:19:a6:73:08:
8b:76:f7:0f:4d:b1:49:c0:57:ba:f3:9c:4e:55:26:7d:2f:fe:
ae:06:df:92:21:2a:f7:96:d6:13:75:00:e5:5b:5d:2f:5c:75:
f5:44:1f:2c:84:f4:70:51:f1:27:00:31:e5:d7:e8:ff:44:06:
3f:c4:89:a8:e8:00:6b:24:ee:d6:ff:4b:42:16:0a:cf:77:fd:
c0:30:ec:d0:ad:46:05:24:65:f5:6f:2c:09:da:d2:3b:89:11:
52:92:f9:7d:04:c3:a6:a2:40:c0:eb:8e:e0:fb:af:b8:4f:5c:
23:35:b6:d9:0f:ed:a0:a1:f4:a6:0c:e1:c9:f5:cf:62:a2:b1:
d7:c8:bf:8c:95:c7:73:fd:6e:62:dd:11:b2:2e:09:f5:28:0d:
8b:b9:ce:14:fe:95:bd:fd:44:69:c8:f6:be:08:7e:bc:03:92:
51:d9:68:fd:5b:5b:a0:d3:bd:1c:9b:a1:d7:52:10:96:66:73:
14:6d:6c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:48 2025 by rpki-client