Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
File: VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft (raw, json)
Hash identifier: siW9gzalelsnbvve3sI4EimmZJXWES2uMI6HYjSZyWE=
Subject key identifier: E3:90:CE:BC:11:69:23:7F:85:47:70:26:BF:2C:0C:56:97:68:D7:19
Authority key identifier: 54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
Certificate issuer: /CN=543c54067385a765b1d5617c43331956fb208e89
Certificate serial: 0199FE0FE21CD390C3B499BA3DDA18354C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 20:01:17 +0000
Manifest this update: Sun 19 Oct 2025 20:01:17 +0000
Manifest next update: Mon 20 Oct 2025 20:01:17 +0000
Files and hashes: 1: VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl (hash: Pfr6+JfEtao2eokmHQkqggswrL6XQg6NNVphaFo213w=)
2: z735G_UD7XSfWpNDTnzeaf_tL4w.roa (hash: DkYxS6x4qA1lOII9eThmWP47P9TbdKeyTU6VofiN3dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:e2:1c:d3:90:c3:b4:99:ba:3d:da:18:35:4c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c54067385a765b1d5617c43331956fb208e89
Validity
Not Before: Oct 19 20:01:17 2025 GMT
Not After : Oct 20 20:01:17 2025 GMT
Subject: CN=e390cebc1169237f85477026bf2c0c569768d719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b6:65:9d:07:6f:c4:24:75:37:16:64:75:26:
e7:67:09:a4:4a:47:a1:da:64:48:05:9d:af:db:71:
f4:b8:a3:20:ef:08:ec:5d:e6:59:23:06:57:33:cf:
61:ad:29:21:2a:88:56:e9:5b:5b:a5:92:70:fc:6b:
f1:fd:34:28:06:67:91:b9:c7:5e:a4:c4:af:7c:9a:
5b:d2:4e:60:eb:23:5a:e7:9c:fa:a6:f8:7e:76:30:
ad:fc:5c:e4:6d:9d:bf:85:7b:2b:2b:36:24:1f:cf:
52:e1:df:21:c9:9a:4a:90:5d:71:1a:8f:1d:07:b3:
50:9f:7b:42:65:d3:97:56:41:6c:6e:08:60:a2:d9:
41:05:4a:63:40:49:76:fc:2c:c5:d0:0f:96:9e:77:
6a:2b:3e:aa:ae:e0:2f:2a:04:59:79:7a:94:a6:bd:
dd:20:78:18:8c:56:46:16:38:62:a0:86:16:93:7a:
ac:ea:5b:ad:73:6f:e0:e9:f7:9c:e6:1e:61:55:79:
f0:35:fa:da:43:10:fa:55:9e:50:b5:a3:0c:ff:07:
9d:c0:e3:e1:9e:c3:e9:45:00:73:77:f1:60:e1:24:
3e:4f:78:ac:93:34:1a:43:bc:d0:54:9a:01:32:89:
40:a2:2a:6d:b9:a1:21:41:c1:53:71:8a:82:86:39:
c9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:90:CE:BC:11:69:23:7F:85:47:70:26:BF:2C:0C:56:97:68:D7:19
X509v3 Authority Key Identifier:
keyid:54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fe:d2:39:7d:64:28:a3:aa:2f:14:d9:39:a9:ef:7d:8b:e9:
c9:5c:28:b5:4a:47:64:da:53:32:93:40:ba:e5:11:ff:23:2a:
0f:94:f3:2e:79:11:99:6e:87:50:1f:d2:f7:bc:b2:b1:93:80:
be:ef:8a:ad:55:6e:78:bb:64:e0:ab:80:4e:db:29:2c:47:30:
d3:d3:33:b0:88:01:97:f6:f3:e2:70:46:4a:c6:19:a5:02:79:
4c:c5:2b:cc:83:8c:2e:5b:ae:63:fa:57:84:97:73:42:03:a6:
09:de:90:ee:0f:07:f1:74:1f:b0:83:e7:f9:46:77:d6:8c:86:
07:92:66:c6:25:38:41:96:2a:f0:ec:c0:7e:a5:90:0f:8f:98:
fa:6c:00:d0:9a:5a:69:a5:c3:3a:0d:ad:52:fe:f4:01:a3:a6:
24:49:76:e9:74:60:08:b4:52:d9:5b:ba:c3:cb:da:a7:5e:59:
5f:b7:37:b3:a1:46:b1:24:18:84:87:c8:98:f3:2d:4d:a2:5f:
cc:1a:1b:d4:77:42:bd:10:2c:12:48:65:a3:e1:54:33:a0:3f:
ca:46:21:34:cc:30:a0:23:3f:fd:79:d3:c4:32:bf:82:49:af:
c6:d3:32:b7:56:87:0b:2e:e3:12:f1:83:a4:3f:c3:82:2c:7c:
95:64:90:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:44 2025 by rpki-client