Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
File: VEi51bhRcfcmQjiyegMGxWz7a08.mft (raw, json)
Hash identifier: umKk/jhW2UFt1qUypsQ4hM+1ToA+21VlGWFakcXlwm4=
Subject key identifier: C1:9F:BB:38:66:85:16:3E:9F:CE:0A:B1:CC:0B:96:72:36:42:46:DD
Authority key identifier: 54:48:B9:D5:B8:51:71:F7:26:42:38:B2:7A:03:06:C5:6C:FB:6B:4F
Certificate issuer: /CN=5448b9d5b85171f7264238b27a0306c56cfb6b4f
Certificate serial: 0199FC589C2DBCBFCD5E671AE0A9E6AE1776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
Manifest number: 0829
Signing time: Sun 19 Oct 2025 12:01:29 +0000
Manifest this update: Sun 19 Oct 2025 12:01:29 +0000
Manifest next update: Mon 20 Oct 2025 12:01:29 +0000
Files and hashes: 1: VEi51bhRcfcmQjiyegMGxWz7a08.crl (hash: yJWtsJqaF47H8sBhrh2cVKETCy4nout0xsDFwyZAjro=)
2: ZgXd4-iRm-6EfiiRbptDsH9YV00.roa (hash: IdlINd8LGSye4C+J8uo8raNO879fzxKpQdAtnUj3Zr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:9c:2d:bc:bf:cd:5e:67:1a:e0:a9:e6:ae:17:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5448b9d5b85171f7264238b27a0306c56cfb6b4f
Validity
Not Before: Oct 19 12:01:29 2025 GMT
Not After : Oct 20 12:01:29 2025 GMT
Subject: CN=c19fbb386685163e9fce0ab1cc0b9672364246dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:75:4b:d8:05:57:fd:75:79:ef:6b:0e:4b:39:
e0:6f:8a:17:98:e1:57:06:95:c1:0f:56:07:d1:ff:
ed:89:e8:72:80:7a:96:be:5f:b2:5c:3a:0b:c8:26:
ac:e2:16:87:2b:4e:6c:98:9d:d3:13:66:7e:cc:ae:
a0:e1:e8:a7:ec:1f:91:27:53:af:27:1c:aa:6e:27:
09:90:0e:67:a8:39:7e:0a:7c:67:b3:ad:ab:70:09:
0e:5b:54:ae:41:ae:7f:38:0f:3f:a8:52:e4:38:c8:
fb:d6:4f:e8:f9:f3:1a:21:36:0e:ed:c4:73:92:02:
ae:5d:68:11:7f:45:65:7d:ee:2e:0d:45:57:f3:44:
33:c8:11:c8:07:f7:32:48:c4:73:41:6b:63:aa:73:
f0:02:20:49:fe:9d:bf:06:94:d7:a9:a8:8a:cf:d0:
d2:7a:be:8a:fa:61:62:2b:8c:ab:5b:f7:c2:89:57:
56:31:5b:29:55:a8:3c:76:da:84:92:e1:4e:f6:aa:
13:7b:95:88:ee:e3:8f:09:19:3c:18:d3:ec:86:03:
0a:32:95:b9:29:a8:ff:d8:50:de:6c:7b:ff:c6:60:
6f:6d:ea:f5:2a:76:91:85:ab:0c:cd:a6:85:9e:c2:
a3:06:eb:fd:58:49:bd:cc:0b:98:d6:43:f7:51:4e:
86:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9F:BB:38:66:85:16:3E:9F:CE:0A:B1:CC:0B:96:72:36:42:46:DD
X509v3 Authority Key Identifier:
keyid:54:48:B9:D5:B8:51:71:F7:26:42:38:B2:7A:03:06:C5:6C:FB:6B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4b:67:aa:48:37:54:87:11:91:ce:de:7e:92:4c:f4:d8:4d:
bd:29:9d:ab:83:a5:ec:7d:4c:1c:23:25:5d:7a:56:24:11:67:
aa:88:bd:f5:91:15:b2:1e:21:34:44:2c:a4:79:f5:ea:09:63:
25:da:0c:de:5a:6a:76:6b:7a:f2:67:c9:fc:d3:b6:67:cf:af:
3c:a6:25:29:ac:12:6f:c8:02:ae:45:08:20:27:24:92:f6:52:
bf:ff:1d:fc:1e:9e:ad:e0:7f:af:53:3e:64:83:49:fb:8b:bc:
96:ec:88:e5:89:cf:82:d6:66:d1:55:85:b8:19:1e:c4:e8:95:
c8:07:f1:a8:52:ea:fe:6b:a5:46:19:8e:16:df:6f:75:1a:06:
b0:8e:f4:3e:5e:da:59:fe:55:a9:11:17:61:8e:80:c7:cc:49:
1a:74:85:77:dc:7f:52:ad:25:d0:f9:d7:4d:a2:50:7d:9c:01:
5e:40:23:c2:c4:f4:78:08:56:c0:29:cf:ac:dc:0c:f7:d8:46:
6c:f3:25:78:c7:c4:a8:cd:fc:99:a9:c2:ca:1c:4b:1a:fe:8b:
09:c1:00:5c:0f:7a:71:ee:c0:e1:8a:37:e8:39:17:18:4a:b4:
38:d9:be:ba:8c:cf:6d:92:2d:ea:d5:9d:04:a9:8c:4e:b2:4c:
a6:b9:1d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:07 2025 by rpki-client