Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
File: VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft (raw, json)
Hash identifier: h+77eCh1ecoXks8G6UUKAtNVm46FuevbAOGDzI2xo6s=
Subject key identifier: 86:6A:7E:1E:8A:CB:73:B1:84:CF:02:28:54:51:BB:C1:26:A4:9F:0A
Authority key identifier: 55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
Certificate issuer: /CN=552423ed905000f69ad93eefc666bb9b1addcb37
Certificate serial: 019A0035691F4C216C19C6EBFB6424FB3BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 06:01:31 +0000
Manifest this update: Mon 20 Oct 2025 06:01:31 +0000
Manifest next update: Tue 21 Oct 2025 06:01:31 +0000
Files and hashes: 1: 2mQ_q8-dGNGRe3nqpXkavXNspDg.roa (hash: /3YCHcej9bstt2T6B00QHN8/IPSuEaJEhcwHBYjcdtw=)
2: 5SSOCLgHzcxdzYdGNpYRPqovl-A.roa (hash: PUdiBPSqRZwnkbR0oFATrv5zTfcNr+UqMdxjxEau1ew=)
3: VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl (hash: ZCSH17upgQgVU45WChDqRPVN3lVZRez1INj3/tlTX0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:69:1f:4c:21:6c:19:c6:eb:fb:64:24:fb:3b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552423ed905000f69ad93eefc666bb9b1addcb37
Validity
Not Before: Oct 20 06:01:31 2025 GMT
Not After : Oct 21 06:01:31 2025 GMT
Subject: CN=866a7e1e8acb73b184cf02285451bbc126a49f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:97:96:78:c8:df:33:81:ad:91:46:be:6d:
2a:b7:65:8b:0a:e1:43:3a:63:44:d5:e2:5b:c3:a1:
b3:25:ae:73:98:af:ef:bf:8c:d4:2d:16:76:7e:c5:
71:6d:ed:33:96:b5:6f:bf:b9:58:df:d8:c0:cb:90:
d3:0a:93:7e:88:ba:8d:01:5d:6b:05:94:91:26:f3:
75:26:93:ba:11:7e:1a:95:11:02:86:c4:02:2f:12:
2f:c8:28:dc:8e:f7:62:4b:94:53:7b:de:c4:75:d5:
1c:8a:39:5a:4a:31:96:e9:9d:bb:04:67:fc:d6:75:
47:96:b0:3d:a6:57:bb:f1:b3:dd:49:31:ef:1a:a0:
ea:60:50:9a:a3:93:9e:dd:10:d8:3c:e7:db:9d:74:
a4:81:0f:b1:e9:dd:0c:de:a8:4d:9a:63:05:d7:a3:
75:c9:26:92:ab:c3:85:17:c4:66:0e:35:fd:e9:41:
ff:16:61:92:08:86:22:0a:15:4b:a3:23:04:67:94:
7a:32:76:f9:be:ed:ab:a1:a3:bf:c9:ea:eb:11:6f:
4b:bd:c0:d2:42:e2:79:d9:06:df:70:3e:05:13:54:
3a:f0:f2:13:e4:25:5d:91:7f:38:f7:36:b8:e4:92:
66:1f:e4:27:6c:cd:6d:2a:f8:b4:36:66:f9:4c:4f:
29:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6A:7E:1E:8A:CB:73:B1:84:CF:02:28:54:51:BB:C1:26:A4:9F:0A
X509v3 Authority Key Identifier:
keyid:55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:18:f4:3c:81:5d:d8:d4:6c:57:40:a9:84:aa:3b:99:cc:ba:
f3:48:91:92:65:b7:59:57:6f:38:87:ef:9e:a7:7a:38:05:e7:
f5:fb:f4:e5:ef:87:c4:14:ae:59:4a:30:60:be:bc:d9:4d:8a:
b2:14:d3:c0:f3:22:d2:dd:f5:a7:ee:a1:56:29:1a:ad:f6:8f:
a5:50:08:c0:bd:55:df:c5:97:8f:12:73:97:ea:01:32:66:0e:
27:14:0b:5f:a7:06:99:f6:c7:d1:d6:8c:c6:10:92:6b:30:d7:
fa:c1:87:1a:48:18:66:95:66:37:ad:b3:57:3c:69:fa:d0:e6:
81:92:f3:e0:c9:44:02:7a:77:27:e6:32:24:ab:80:ab:75:dc:
4b:3b:6b:fa:63:80:84:2f:e4:22:02:a1:4f:0c:3d:89:d8:56:
a7:a4:44:ab:c1:d6:10:7d:e4:9e:32:c9:32:89:65:2c:47:e4:
6b:eb:f2:dc:09:8a:61:4e:41:36:a9:62:83:11:c1:53:32:e5:
7d:d3:12:da:e3:50:5b:e9:3d:df:79:24:8d:e7:f3:a4:0b:a1:
ec:ea:c2:3b:12:81:40:53:3d:70:3b:44:cc:12:c4:dd:45:f3:
1a:49:b6:44:d1:14:ac:f7:6c:ee:b9:2a:87:40:29:d4:2c:bf:
c6:3f:01:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:55 2025 by rpki-client