Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
File: Vg0eibTnQuaQYqldNR3uqWtRePs.mft (raw, json)
Hash identifier: QyPCsGc5wh/uklR4sVJNJtiPBYZokl+kfCyqQamDUtg=
Subject key identifier: FD:54:10:87:CF:CA:FB:CA:BD:75:86:48:F4:FB:23:E4:B3:0A:3A:A0
Authority key identifier: 56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
Certificate issuer: /CN=560d1e89b4e742e69062a95d351deea96b5178fb
Certificate serial: 0199FBEAE279B28299D637CCF8271E8BB03C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
Manifest number: 044B
Signing time: Sun 19 Oct 2025 10:01:38 +0000
Manifest this update: Sun 19 Oct 2025 10:01:38 +0000
Manifest next update: Mon 20 Oct 2025 10:01:38 +0000
Files and hashes: 1: Vg0eibTnQuaQYqldNR3uqWtRePs.crl (hash: SdBura8Dk/g2tS8hjzDNtBheHcYyasuOdR/J15lapqE=)
2: xe_FlpDuD-n9_M4USiSXk6Ycnbw.roa (hash: yJ1Pd1TWtovjk0/IapFR+YDI373SvMNyYMwVt0mGMMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e2:79:b2:82:99:d6:37:cc:f8:27:1e:8b:b0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560d1e89b4e742e69062a95d351deea96b5178fb
Validity
Not Before: Oct 19 10:01:38 2025 GMT
Not After : Oct 20 10:01:38 2025 GMT
Subject: CN=fd541087cfcafbcabd758648f4fb23e4b30a3aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:b1:38:87:d4:18:c9:3b:f5:ed:18:5f:3c:
e4:f8:89:00:e0:11:8e:6f:e5:94:07:1d:1e:dd:84:
34:d2:ec:18:be:47:73:a8:40:ce:55:d8:17:f0:90:
53:c2:a6:d2:3a:0f:e4:1c:e0:6c:fb:1b:a2:bc:00:
d1:c9:30:4b:da:b0:49:d5:95:2f:32:f4:8b:06:6f:
7c:a0:a3:cf:0f:d1:5e:c6:9a:f4:10:18:f3:ab:62:
a4:56:f2:20:77:d8:13:f1:ce:96:e6:b9:cd:40:ef:
1c:02:a9:78:c9:14:90:6c:2c:f1:70:6e:ff:db:ca:
03:95:7f:29:81:f7:9a:6b:2d:f8:d7:ca:69:0f:dc:
af:3e:46:3b:8c:97:6b:8b:4c:38:26:56:fb:a2:22:
2c:bd:19:a4:e7:6d:a3:ec:18:7d:a7:48:31:9c:9f:
bf:70:68:53:f4:79:74:67:ce:f5:50:bf:51:0f:4b:
d2:90:e9:13:38:e3:99:30:8f:4c:8a:83:ae:52:38:
f7:78:9d:68:53:50:0f:4e:17:31:64:fb:e4:b4:ed:
ca:a7:bf:d3:47:49:64:08:f4:7d:e9:a4:6b:65:b2:
51:f5:05:a8:d8:2b:77:06:c6:0d:8f:fa:9f:0d:56:
f2:f9:ff:4f:66:60:19:fc:d4:49:6c:42:f9:0b:52:
75:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:54:10:87:CF:CA:FB:CA:BD:75:86:48:F4:FB:23:E4:B3:0A:3A:A0
X509v3 Authority Key Identifier:
keyid:56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5a:6d:de:5f:16:d7:81:96:54:ee:03:2e:f0:7f:1a:6d:28:
0d:bb:77:a3:a7:97:ce:27:0d:23:8c:79:1a:0c:c7:a7:09:b5:
25:c0:73:fe:1d:78:c5:e9:a6:4e:3b:96:c0:d0:17:f1:81:bb:
14:c5:ab:ad:d1:c4:f2:31:2e:69:d1:26:47:88:c5:77:0e:c0:
b9:60:16:47:d2:cc:86:13:30:62:6f:56:5f:63:3a:81:05:41:
ca:88:3e:bc:1a:a3:4f:9f:15:1b:c1:dd:cb:5a:42:27:25:a9:
2e:61:c6:40:35:6e:6d:0d:2b:36:83:55:1c:45:cd:2c:31:f9:
d1:a8:73:21:f9:25:ed:3e:ea:6a:4a:83:50:5a:0b:ce:0d:28:
cf:03:11:62:f2:a9:1d:26:ae:9d:f3:33:99:dd:78:39:d3:d1:
97:5f:6b:33:f6:56:68:4e:bd:76:81:53:af:03:59:5d:35:2f:
7a:fe:12:17:6b:7d:43:75:e5:a2:53:8e:6b:5c:a2:73:8b:df:
0b:d2:d3:a2:ad:ce:c9:2b:a8:09:3b:a9:59:2b:94:18:53:ee:
26:65:86:cb:84:bc:c4:9d:70:6d:18:c1:b5:6b:d5:28:f0:bb:
50:8f:90:7c:c2:a2:9f:bf:7c:87:7a:4e:34:f9:a5:b0:58:eb:
89:4a:d5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:39 2025 by rpki-client