Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
File: VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft (raw, json)
Hash identifier: V8sqDiU9W0dr+STBjtKCsIIsyVpf0oJFgRoVsZa8aA8=
Subject key identifier: 04:89:7B:CB:EC:66:1C:A4:0A:85:F9:D5:BE:47:80:28:AE:84:93:E2
Authority key identifier: 56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
Certificate issuer: /CN=5643415c22e141972c0d7e76c24e88b22427b024
Certificate serial: 0199FC586AA1DB6A9ED2EEB1DA802A523B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:16 +0000
Manifest this update: Sun 19 Oct 2025 12:01:16 +0000
Manifest next update: Mon 20 Oct 2025 12:01:16 +0000
Files and hashes: 1: 6qanCjcucoDvogEjoEibMas1xCw.roa (hash: iHrFUYTwZPBriNgyEwpJfBAHJGESvwJ6/vI6y1aBDEY=)
2: OJH-3bY7Jey_mmpYXzYEewikSRw.roa (hash: QWW0B/GAEpshetNaEGEwKmz4qiBbm/sCm0lolDcM+Gk=)
3: VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl (hash: 30ZQgrQmpYrOn4MxNWiarP5UdZ3sMZewdWZ6aALCyXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6a:a1:db:6a:9e:d2:ee:b1:da:80:2a:52:3b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5643415c22e141972c0d7e76c24e88b22427b024
Validity
Not Before: Oct 19 12:01:16 2025 GMT
Not After : Oct 20 12:01:16 2025 GMT
Subject: CN=04897bcbec661ca40a85f9d5be478028ae8493e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:6c:0a:18:2c:29:0e:cd:e1:96:ca:55:c3:
e2:cc:16:67:4c:7d:f5:f8:5b:ba:4d:70:18:18:2d:
33:16:34:47:7f:3e:dc:80:12:bb:c2:ab:f7:1c:cc:
3e:be:09:6c:63:a0:68:85:e6:51:40:ba:c0:01:e2:
57:bd:c4:91:c2:93:ba:e1:36:82:40:7f:ba:97:c7:
fa:1f:fe:6c:a3:9d:a8:58:54:d2:22:3d:f9:06:08:
5c:d8:5f:de:b8:19:cd:ab:10:94:6e:10:eb:77:ad:
83:26:4a:5b:da:17:d9:f4:05:f9:69:3a:c9:64:8b:
7a:48:b1:6e:f0:2f:2b:06:cd:26:a4:37:aa:62:97:
1e:14:a4:d0:76:9b:98:36:8f:93:b3:d9:18:6d:e5:
3c:ed:4c:a7:ae:4d:d2:27:c4:90:52:70:b9:dc:e4:
f3:4c:01:c6:ce:0d:ab:53:5b:ad:7d:2e:9f:b1:6f:
0a:e3:13:70:b4:10:07:ca:19:d1:8d:5d:26:9b:3a:
ac:87:6c:11:8a:c4:63:3f:be:d8:5b:e6:ba:3d:0d:
a8:7e:17:09:90:fb:c2:42:95:3e:02:47:ef:0a:a2:
2b:ec:4a:08:05:45:e9:11:f1:72:42:9e:c5:bf:13:
b4:ec:96:c5:92:26:6f:49:73:95:76:56:e3:0b:15:
79:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:89:7B:CB:EC:66:1C:A4:0A:85:F9:D5:BE:47:80:28:AE:84:93:E2
X509v3 Authority Key Identifier:
keyid:56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:76:d5:d2:ec:cd:8a:8e:b2:12:34:24:42:c9:e1:a7:f7:12:
8f:3b:97:aa:88:f1:5e:76:71:71:ad:49:05:53:d5:dc:99:51:
6d:81:32:4e:e0:0d:27:28:51:dc:7a:b5:ac:e5:f2:22:53:5c:
85:d6:27:e6:50:dd:4f:cf:1e:5b:5e:4d:52:94:59:66:5a:3c:
c1:5e:d1:c5:68:bb:8c:7e:6a:c1:c5:75:38:9e:cf:a1:85:a1:
7b:e6:bc:68:e4:71:f0:24:f4:f1:a9:5a:aa:4a:6d:50:f1:b2:
4a:34:31:e3:6c:c7:ca:e2:bc:2e:6d:52:f9:61:dc:66:2e:21:
46:f2:b1:d9:ac:83:7c:13:8d:a8:cb:6f:ea:26:86:da:03:b7:
3c:7f:73:bd:ca:dd:61:f8:75:fa:76:68:de:d0:ea:44:da:b3:
95:e7:70:ba:6e:09:b4:55:65:8c:ed:bb:cd:53:9e:3d:b6:b3:
4b:d0:89:61:08:9f:7c:98:5e:c4:9f:24:bb:ae:d9:c4:0c:ca:
54:3e:4c:cd:de:17:4a:c3:ab:a4:47:16:8d:8a:9f:92:95:26:
0a:9a:65:2f:23:a1:bb:68:14:57:95:b3:cc:43:7f:19:4a:72:
d3:d8:c2:ec:03:92:67:88:c5:11:96:b7:f3:7c:50:19:7f:d0:
2a:da:91:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:41 2025 by rpki-client