Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
File: VAQZQbFFDWuVtYyj8HfOII39-0s.mft (raw, json)
Hash identifier: zz4HpYKWcEBQYAlb+LGxQFDYToz2v3ZZl1VOr3X7k1w=
Subject key identifier: 97:87:A8:95:94:A3:4A:F9:E4:85:CD:77:70:74:88:09:23:5F:9F:B9
Authority key identifier: 54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
Certificate issuer: /CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Certificate serial: 0199FD6AF2FCCC609172C8A876288ABFEBC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
Manifest number: 0788
Signing time: Sun 19 Oct 2025 17:01:08 +0000
Manifest this update: Sun 19 Oct 2025 17:01:08 +0000
Manifest next update: Mon 20 Oct 2025 17:01:08 +0000
Files and hashes: 1: VAQZQbFFDWuVtYyj8HfOII39-0s.crl (hash: FEje3+qVHqg+GAsZ1NP1pYvaXCxJ/xRgjZx/ddcj1Ng=)
2: ttIMVm2Qx6d-SaNfus5CP2PiSww.roa (hash: GIzKFX6ewkeY9UKKD+c3WgJblzIfMp9efYS5dFXHsaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:f2:fc:cc:60:91:72:c8:a8:76:28:8a:bf:eb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Validity
Not Before: Oct 19 17:01:08 2025 GMT
Not After : Oct 20 17:01:08 2025 GMT
Subject: CN=9787a89594a34af9e485cd7770748809235f9fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:ae:47:db:ce:34:02:e2:dd:a3:ac:44:5c:
85:14:ed:74:d3:db:ee:bd:68:d5:d3:78:d9:52:15:
72:6f:a3:55:35:2a:f8:34:3c:d2:d9:78:27:50:dc:
8e:4d:b6:b1:ca:a9:bd:0c:fd:58:9b:18:a7:06:04:
bb:80:30:61:c8:e8:72:25:23:7c:85:f3:cd:2a:d1:
47:f9:00:76:c3:cb:29:88:21:4b:40:6d:b7:1b:a6:
b9:6b:46:cf:e4:34:71:47:1a:11:1f:db:d6:82:86:
ec:25:10:3d:aa:0e:f3:84:0f:4b:13:22:54:b7:b4:
76:31:6f:6f:5c:5d:a6:39:30:ae:c0:e3:79:d0:0a:
6a:60:c1:98:8e:6d:7b:0f:ed:12:d8:75:ff:c1:51:
9b:d7:b1:40:8a:d7:a9:de:a2:cb:84:80:f5:fe:8d:
e0:fa:f2:74:cc:2e:ac:96:db:fa:fc:13:78:74:43:
5f:67:29:ae:cf:f6:99:8a:83:42:38:30:0c:93:2f:
e1:c7:6e:94:61:18:97:e4:d4:07:03:cf:24:48:49:
9a:81:f0:f7:ca:6a:25:8c:13:e4:89:de:3b:cf:c6:
5e:51:87:f9:8b:b8:4e:f1:ba:35:35:e2:c0:31:76:
75:5a:4f:f1:c4:23:23:42:f6:95:17:5d:48:35:d7:
2a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:87:A8:95:94:A3:4A:F9:E4:85:CD:77:70:74:88:09:23:5F:9F:B9
X509v3 Authority Key Identifier:
keyid:54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:43:f1:73:51:61:39:02:91:fa:be:5e:ba:57:f9:b7:cf:93:
e9:8f:94:dc:d7:e7:7e:ac:a2:ef:79:5b:e8:f6:96:7e:c7:c8:
5c:4a:60:de:f6:ab:c4:2a:44:33:69:ab:b1:d3:80:df:e6:1f:
5b:fc:ae:6e:33:8f:b1:48:d0:ec:86:d8:e1:4d:52:f5:53:3f:
41:bc:21:40:7e:22:94:e4:e1:d9:94:35:46:f2:21:ef:ba:c8:
04:61:49:f1:94:ae:ef:90:0c:5c:c4:c5:7a:d4:d1:68:94:d6:
1c:67:df:10:98:0b:b5:ad:99:3e:c2:77:04:63:07:3a:45:b3:
be:53:e6:cb:31:8c:ae:7a:4e:f8:ab:7f:b5:24:32:82:b8:e7:
89:1a:53:90:81:3a:8f:57:52:1e:4f:3c:4d:e1:0f:4a:70:8e:
c1:6e:0b:a8:d1:44:0b:a8:96:c1:06:d1:70:fd:12:9e:11:b3:
6c:1d:e8:8d:c4:14:a4:2e:08:00:61:c6:dc:e1:6f:d1:45:cf:
cf:10:29:66:1c:d0:8c:2c:16:64:aa:14:65:6d:88:ca:b7:e7:
66:86:86:7b:07:31:70:c7:55:82:d6:d6:d7:72:eb:d9:e6:97:
1b:31:5d:d7:4a:0e:f3:0e:30:9f:97:b8:5c:90:a2:1d:13:80:
4a:69:aa:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:05:57 2025 by rpki-client