Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
File: VLjgSw4aTU46KN8V61hJPnY3frA.mft (raw, json)
Hash identifier: FwL2kH8ujil60MfD5tKXUfCtrkC6QRBpiQSqdXAShTg=
Subject key identifier: CB:C5:69:9C:C0:6A:A4:67:5F:2F:B5:2B:18:34:70:AD:DA:2B:5B:48
Authority key identifier: 54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
Certificate issuer: /CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Certificate serial: 0199FD6B1333F84B60B9575A366933003F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 17:01:16 +0000
Manifest this update: Sun 19 Oct 2025 17:01:16 +0000
Manifest next update: Mon 20 Oct 2025 17:01:16 +0000
Files and hashes: 1: UwlL4l1LRiE3vykISfbzsy5TSkQ.roa (hash: ENtIGGU96W9e4YjxZ7Qzg80Ai/cpSTda8jT8DyJC8KM=)
2: VLjgSw4aTU46KN8V61hJPnY3frA.crl (hash: qRCaJCIzFyHTdR0JXChtN23t5025heB/dWKkVcT3XlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:13:33:f8:4b:60:b9:57:5a:36:69:33:00:3f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Validity
Not Before: Oct 19 17:01:16 2025 GMT
Not After : Oct 20 17:01:16 2025 GMT
Subject: CN=cbc5699cc06aa4675f2fb52b183470adda2b5b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cb:46:5f:60:e9:a2:99:38:9f:dc:dc:ad:b5:
1a:46:25:81:83:3a:11:3a:71:b7:ca:6d:50:85:02:
37:40:18:b9:e2:0a:72:e2:c1:46:3f:8f:77:c7:2c:
48:d4:06:1e:c2:e8:48:a7:cc:2c:08:d0:5b:bb:41:
b0:19:db:05:21:03:29:03:0a:7c:d5:a7:98:f1:d8:
20:59:df:71:2a:d9:80:00:bf:af:74:f8:be:df:45:
6d:29:ef:a2:a9:38:3f:23:42:ef:aa:9b:ec:eb:6d:
fd:7f:56:59:61:8f:a2:35:52:41:e3:c7:13:e0:f0:
e6:f4:eb:b4:8b:84:38:67:95:fd:12:b0:82:04:27:
2a:24:a5:b7:86:3b:0e:eb:91:8c:a1:7f:62:3f:f7:
0b:0e:93:5d:7e:bc:8a:63:24:1f:e2:fb:78:80:1b:
25:e1:09:78:a2:81:cc:3b:e4:3d:26:25:e9:67:89:
cf:e4:ea:98:d4:c5:62:37:91:20:14:3e:e8:53:3e:
6e:4b:d6:2e:dc:a3:d1:46:9b:25:22:57:64:3d:f8:
89:a1:a5:b4:06:19:ca:75:a3:e5:24:72:11:1b:7f:
6e:17:ad:88:be:7f:05:3d:86:f1:f4:ba:89:88:ff:
93:fe:7e:87:79:73:6f:a4:88:71:2c:bd:6f:a1:5e:
8a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C5:69:9C:C0:6A:A4:67:5F:2F:B5:2B:18:34:70:AD:DA:2B:5B:48
X509v3 Authority Key Identifier:
keyid:54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ce:94:74:20:28:84:3e:70:38:1e:e1:d0:a9:0a:0b:81:00:
f0:41:68:c3:60:b4:e6:89:fe:fa:61:4b:51:57:44:2a:1c:d7:
f7:0f:f1:2a:f5:d5:ef:99:f1:18:e4:86:8f:0d:82:24:26:18:
35:91:f9:bd:d4:2c:15:ca:55:9b:b0:ce:72:b5:2a:f7:5a:16:
32:6c:b2:bc:cc:bb:c7:44:c5:57:11:00:a3:39:a0:ce:da:4d:
bd:71:20:29:84:8c:0f:65:80:51:b5:83:7c:90:cd:7c:4b:54:
87:a9:38:34:85:17:b0:a4:71:44:10:5c:35:21:b1:a0:19:9a:
a8:74:12:29:27:9e:b7:38:41:cc:86:9e:40:c2:14:b1:b7:c4:
b7:8e:c2:6e:12:f9:83:79:e5:a7:f7:ee:ba:76:2a:39:26:22:
c1:f2:6c:c7:96:a9:79:92:c4:cd:a6:24:76:63:30:50:5a:c0:
07:f1:2b:4b:5b:17:cc:c8:96:af:43:77:5c:5d:19:c1:61:9c:
88:6b:50:31:c9:78:1a:55:75:06:19:11:dd:ae:8d:40:08:6b:
b2:2c:4d:b8:e1:84:7f:a8:24:87:c2:1f:7f:85:96:c2:21:cd:
b4:14:27:2c:70:30:c6:fd:bf:5f:a5:54:05:fb:b9:5f:e3:f6:
37:4f:20:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:43 2025 by rpki-client