Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
File: 92vpnovixUANAQVCvyBYvbuIUC0.mft (raw, json)
Hash identifier: mp4l/MTpZy46+Oqcn1ZKtjbdFY9eZ67PJhcMQex3s+8=
Subject key identifier: AA:3D:C5:4D:4D:B8:0D:D4:20:8A:57:55:7C:55:35:73:9F:BC:36:60
Authority key identifier: F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D
Certificate issuer: /CN=f76be99e8be2c5400d010542bf2058bdbb88502d
Certificate serial: 0199FDD8B19BCFBCCFBFE85A4C97A1EE0452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
Manifest number: 0EFA
Signing time: Sun 19 Oct 2025 19:01:00 +0000
Manifest this update: Sun 19 Oct 2025 19:01:00 +0000
Manifest next update: Mon 20 Oct 2025 19:01:00 +0000
Files and hashes: 1: 92vpnovixUANAQVCvyBYvbuIUC0.crl (hash: dXGC0c0YRn0PzVOmlDRC9gvS5CJm9fSofTTnkYNEXt8=)
2: Bgx4v1LhphfEVxiPgOOZhtKcYxk.roa (hash: PMSZWU3KeqqHp7dEdYFCinejkuywjWErsotBlVqvg44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:b1:9b:cf:bc:cf:bf:e8:5a:4c:97:a1:ee:04:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f76be99e8be2c5400d010542bf2058bdbb88502d
Validity
Not Before: Oct 19 19:01:00 2025 GMT
Not After : Oct 20 19:01:00 2025 GMT
Subject: CN=aa3dc54d4db80dd4208a57557c5535739fbc3660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:26:5f:6c:0d:31:4c:b9:2c:f1:02:7e:c5:
fa:fa:80:3c:5e:8e:d4:61:87:b1:b3:92:58:54:80:
a0:12:6e:9d:da:25:a6:4d:21:b6:5e:7c:3c:20:6a:
1a:a4:6d:54:b8:fc:96:1e:27:2e:a7:1f:b5:fb:d2:
6c:d8:d1:81:d8:be:4b:78:a4:c6:ab:97:05:04:68:
fd:eb:2a:e8:a5:88:e6:0b:82:a9:b1:d8:03:07:08:
ae:18:d7:51:65:42:db:31:8e:0f:ed:25:d3:65:bd:
fd:71:1a:96:74:ef:15:55:15:fd:76:79:e2:0e:3b:
9c:ba:7a:7a:3a:1e:f8:2a:a7:2a:41:18:14:52:aa:
19:9c:e4:1f:41:ad:ff:19:57:84:87:14:37:bf:7f:
b5:5f:62:e6:93:84:cc:cb:c8:86:c1:dd:1f:18:1f:
89:32:ff:9a:d9:68:eb:77:77:70:bf:bc:a0:c4:b9:
33:91:f5:50:04:a1:45:af:58:23:30:a7:4d:9a:0c:
01:3f:d5:b0:54:3d:cb:c6:47:40:e6:31:c2:5b:6d:
aa:40:36:8a:ba:49:4c:21:d6:af:91:f0:57:8d:dc:
7d:63:b9:85:ee:05:f2:58:f0:8f:a4:a3:bb:35:df:
0b:2b:be:30:69:c8:8b:1b:af:b0:57:ec:4d:ad:cb:
8d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3D:C5:4D:4D:B8:0D:D4:20:8A:57:55:7C:55:35:73:9F:BC:36:60
X509v3 Authority Key Identifier:
keyid:F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f5:24:a9:19:19:44:10:2e:00:77:18:44:73:10:69:3e:7f:
40:86:dd:47:64:1b:a3:6c:8d:5b:be:66:84:4e:5b:a8:f2:2c:
64:5e:af:27:14:73:b8:7a:81:7e:5c:ec:00:f5:32:93:21:94:
bd:79:79:51:82:44:f7:3b:1d:87:c4:32:46:54:5c:d2:1b:0f:
6f:44:bf:01:86:27:7a:e8:7a:d8:84:aa:d5:08:74:d3:0d:c7:
fb:e2:ec:b0:4f:50:47:f5:28:ea:cf:af:a0:6e:60:a8:e6:47:
d0:79:64:0e:1a:93:b5:44:2c:ed:06:eb:dc:20:9e:0c:ca:89:
b5:ad:48:39:32:e1:20:19:c7:2e:ee:7b:12:9a:e9:7b:77:f1:
91:fb:26:e2:b6:c4:85:42:56:8c:8d:15:d7:b9:5b:db:c6:d8:
2d:b0:ce:f2:fa:1d:57:4e:0c:aa:47:7a:9d:4d:d5:f7:7a:be:
77:67:f2:4b:fa:4e:30:51:9a:7f:5a:ea:a4:6d:00:bd:20:e0:
46:ce:d1:20:2c:1f:82:44:1b:5f:b6:b4:95:5a:19:4e:16:fd:
8e:d4:36:36:77:99:de:fa:68:c4:2d:ad:23:40:ad:17:79:2d:
64:6e:f4:1d:4c:85:59:6b:e5:ea:91:6f:fc:97:03:62:67:5d:
ca:6a:d3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:03:44 2025 by rpki-client