Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
File: VbnN-LflPvzZeZsR50D1Vf1T9MY.mft (raw, json)
Hash identifier: dxAaifIUdf18XBoEGhqoBC5g42RNDfBlze7VJ7+bvk8=
Subject key identifier: 96:BC:CB:E7:DD:6A:FA:8A:19:8E:87:AB:62:70:F3:6B:91:BB:B0:98
Authority key identifier: 55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6
Certificate issuer: /CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
Certificate serial: 0199FB0F38BFFECA4E00C11C244EB881C1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
Manifest number: 147D
Signing time: Sun 19 Oct 2025 06:01:42 +0000
Manifest this update: Sun 19 Oct 2025 06:01:42 +0000
Manifest next update: Mon 20 Oct 2025 06:01:42 +0000
Files and hashes: 1: OEIiPrXdFUp5YXOck7o4s4rBGO0.roa (hash: zsHFam+CXLhObsumxLE2+jbhXix4p0SFjtst5VLxGeE=)
2: VbnN-LflPvzZeZsR50D1Vf1T9MY.crl (hash: 3lULlLOzQiPTu5Ksyr2DmK/rhQPnTe9nbOIEmx6kOv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:38:bf:fe:ca:4e:00:c1:1c:24:4e:b8:81:c1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
Validity
Not Before: Oct 19 06:01:42 2025 GMT
Not After : Oct 20 06:01:42 2025 GMT
Subject: CN=96bccbe7dd6afa8a198e87ab6270f36b91bbb098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6b:76:f6:20:50:9f:b1:32:1c:76:86:05:4a:
c0:90:38:f6:16:31:8a:69:19:bf:a0:7a:4e:58:0c:
5f:3f:54:f8:81:9e:4d:16:74:ba:6b:0a:38:66:eb:
51:04:11:90:b7:bc:a8:54:ce:f7:3c:69:e3:26:4c:
87:87:ca:3d:25:42:04:40:45:31:a8:6c:2f:02:2a:
9d:30:6b:74:33:ef:4b:6e:fd:16:b9:ea:aa:03:53:
fc:ba:7e:a6:5f:91:23:89:cc:60:39:94:76:a1:08:
e0:1e:88:f2:66:cf:b2:bc:30:fb:58:df:4a:17:f7:
f6:9d:c1:2a:2c:4a:e4:16:04:85:9a:bd:b6:81:ef:
f6:6d:6f:9f:89:24:d2:27:7b:c0:68:79:25:0c:92:
5b:52:13:6b:09:7c:5a:47:19:f4:ed:6b:13:ad:69:
a6:ce:78:52:f3:26:82:4d:d4:e4:2f:4d:56:ee:d9:
78:96:18:13:cb:06:d5:33:97:8f:64:b3:0a:52:04:
9b:7e:e4:2b:f1:19:54:70:19:11:6e:63:e2:7a:13:
30:b8:18:e3:09:2f:82:25:dd:44:eb:4d:ae:ef:13:
be:33:49:86:9d:5e:21:bb:43:a4:d4:8f:83:a3:aa:
13:e7:4d:9f:dd:fd:08:4f:54:e5:f3:da:00:88:c2:
00:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BC:CB:E7:DD:6A:FA:8A:19:8E:87:AB:62:70:F3:6B:91:BB:B0:98
X509v3 Authority Key Identifier:
keyid:55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:45:6b:04:dc:7b:53:b5:f4:09:e8:d4:19:bb:e6:52:ee:54:
df:35:99:53:e0:2a:c9:6e:d6:7b:f9:8e:7f:da:dc:2a:a4:ea:
8f:be:62:19:77:4d:e8:19:07:30:35:99:f6:25:53:b8:d8:28:
0f:7b:73:3c:34:88:8d:d2:26:44:bf:d8:13:68:cb:03:1f:49:
49:4b:b8:18:f2:13:6d:dc:7e:34:ad:0e:54:db:34:50:f1:30:
d1:98:b0:f4:46:d7:4e:c9:5b:cd:54:f2:6a:7c:34:b6:0d:a1:
f3:e2:dd:21:04:c8:9d:4b:d3:86:91:e4:86:b0:69:65:36:b9:
16:8f:34:d3:a4:02:84:95:7c:b6:c3:fb:00:a6:93:cc:7e:37:
8a:f4:cb:a0:2b:64:49:cc:fe:5b:56:db:49:1b:54:ff:52:76:
8d:fe:95:4c:e5:88:01:6c:b5:3f:80:57:db:fa:ac:19:df:12:
3f:c0:35:0b:e5:cf:ba:bc:af:5e:82:5f:7b:12:9c:f8:50:d4:
95:01:4f:f9:2a:ca:da:29:2d:4d:38:5a:6f:d3:0a:23:26:de:
2d:25:a7:dc:5f:b7:1b:52:88:ce:54:44:57:5b:fd:c7:02:97:
c1:01:3c:75:73:11:f6:08:15:39:ca:91:dc:44:6b:4a:2b:f2:
fc:1c:f2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:37 2025 by rpki-client