Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
File: vgeJVzbtkoYPMTUAioWBP5i718E.mft (raw, json)
Hash identifier: YZFjhd/0yJ6T6dtAlShwBnQk4cy03avBHuHnC2h/Vbo=
Subject key identifier: E8:CF:85:9B:87:7B:0E:42:AF:59:C9:8A:71:28:22:1B:57:74:D9:EB
Authority key identifier: BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
Certificate issuer: /CN=be07895736ed92860f3135008a85813f98bbd7c1
Certificate serial: 0199FB458F5626ACD12037CCFE4C9D19177E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 07:01:03 +0000
Manifest this update: Sun 19 Oct 2025 07:01:03 +0000
Manifest next update: Mon 20 Oct 2025 07:01:03 +0000
Files and hashes: 1: vgeJVzbtkoYPMTUAioWBP5i718E.crl (hash: 53g8mmbGDZ2LvFnaLuqPWONcsS+koXgNXFaWAOBuhLk=)
2: z0Q3v_uWGQRHW3DWSvSjjl8qG2A.roa (hash: K7V12/jav6q6nJdIsu+PPDA7RxS4tktOMqpojP9r5X8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:8f:56:26:ac:d1:20:37:cc:fe:4c:9d:19:17:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be07895736ed92860f3135008a85813f98bbd7c1
Validity
Not Before: Oct 19 07:01:03 2025 GMT
Not After : Oct 20 07:01:03 2025 GMT
Subject: CN=e8cf859b877b0e42af59c98a7128221b5774d9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:77:af:50:87:c5:50:7c:2d:5a:86:61:09:e2:
42:e0:af:ab:6b:7d:46:d9:ab:e9:de:6c:82:0e:80:
2b:1f:03:e5:7a:7a:1b:2a:e7:ae:ea:2d:fb:12:15:
cc:a1:21:b2:a3:8e:9e:e8:9c:1a:30:0a:d2:c9:ce:
37:86:36:a9:e3:be:17:32:93:f4:95:45:10:c7:cd:
ec:68:27:9d:d6:7a:b3:c9:c5:cd:f2:cb:c8:93:68:
7f:9a:da:81:22:64:fe:09:b1:16:72:85:24:b4:c7:
12:3a:21:e7:bb:9f:62:dd:23:f0:d4:80:cc:04:75:
ce:2c:91:a8:8a:a0:58:4b:11:31:a8:38:70:3d:5c:
87:c6:e6:9d:d6:d4:d9:bb:99:11:8d:4f:d4:0b:5d:
26:95:36:b6:4e:5d:99:69:ff:7b:22:41:4c:28:71:
cd:e3:56:42:31:39:fb:21:24:ba:e3:aa:30:d7:62:
11:d4:3a:10:8e:02:e6:56:68:04:ca:99:9c:45:c6:
cb:18:78:63:4a:d0:31:e3:e6:3b:cb:85:d8:a1:b2:
f3:b8:0a:ee:d2:6d:9d:8e:1f:e6:d5:91:ab:c0:1f:
ba:51:93:f0:16:97:6e:d9:c1:f3:ed:10:d7:a1:a3:
91:6c:8e:e0:e5:ba:4e:3f:e8:61:aa:c9:f6:b9:2a:
64:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CF:85:9B:87:7B:0E:42:AF:59:C9:8A:71:28:22:1B:57:74:D9:EB
X509v3 Authority Key Identifier:
keyid:BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:35:5f:ab:99:16:63:22:ca:06:95:cd:85:3f:1a:bc:30:1a:
2b:66:d8:70:85:b8:ea:d1:ac:45:ac:e9:03:9d:e4:4d:f4:2a:
8f:36:24:04:24:99:a8:44:09:da:87:47:c6:67:9e:79:66:7d:
0c:2d:c1:40:41:65:5d:55:19:70:d3:13:f8:5a:bb:a9:c6:8b:
13:7d:b8:3c:8f:12:93:f6:b0:66:6f:de:78:6f:ac:0f:c3:e9:
02:d8:c9:5a:0a:41:e2:0a:40:e3:a9:4f:58:d8:95:aa:88:02:
34:c9:2a:a1:df:b6:e1:46:76:3c:20:c1:e8:ff:bf:bb:64:76:
96:a5:fa:bb:b4:a2:1d:b4:88:54:71:34:53:21:5a:85:2b:f5:
b2:19:9e:e1:ec:f0:9b:8e:67:6a:e3:1a:d4:41:b8:40:49:ac:
75:ed:d7:3f:25:9e:8e:25:86:a2:f5:6f:0f:37:d6:af:f3:a3:
fe:56:62:a0:a7:c9:52:36:fd:92:fb:39:74:b6:cf:f5:8d:47:
a4:bc:02:10:0a:d6:11:4b:a3:e3:93:5a:28:35:b6:b6:9d:20:
b0:24:4b:2a:99:33:f3:1a:5e:a7:0a:46:ce:87:a2:17:bd:d7:
82:f3:82:af:5c:a8:37:f6:78:a1:e7:dd:c6:21:85:06:bc:49:
b3:34:52:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:53 2025 by rpki-client