Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
File: VcmyAl4OaVgI9rYe4nau1PtWgM0.mft (raw, json)
Hash identifier: MVfY0x2ijBMJdLfIxtt+oiMxyETRdCzgdGOvgPGldgQ=
Subject key identifier: 46:3B:F3:72:29:BA:D2:F4:0F:52:6A:E8:C9:7A:2F:39:5C:4F:95:2C
Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Certificate serial: 0199FA6A3096D6DC019126E946DF44EC3DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
Manifest number: 52
Signing time: Sun 19 Oct 2025 03:01:27 +0000
Manifest this update: Sun 19 Oct 2025 03:01:27 +0000
Manifest next update: Mon 20 Oct 2025 03:01:27 +0000
Files and hashes: 1: L8BLpkg4_ByhCbFcK7uHavm7f5g.roa (hash: e1aCzXYV4qmCe5iwORKEY38agwdUFZfW6yM8yoLYdTA=)
2: PrQLT7XmMWLDcNFZXhC6i5ipEO0.roa (hash: ZOoiI4PcKu9cyfI921BIlgDSlvuVbGjs4mAo/U6V33g=)
3: VcmyAl4OaVgI9rYe4nau1PtWgM0.crl (hash: 5PGiJYl3MlV4gPTZR32MntkzrD+YRID5VIRMKqvzdLY=)
4: o3rcqhmpzx-KZyOKzIrbE8E7xH8.roa (hash: DhHj4T9kNHqPXFBDEITUBD0D/IF09iiNQ2ByB3yTJQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:30:96:d6:dc:01:91:26:e9:46:df:44:ec:3d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Validity
Not Before: Oct 19 03:01:27 2025 GMT
Not After : Oct 20 03:01:27 2025 GMT
Subject: CN=463bf37229bad2f40f526ae8c97a2f395c4f952c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1b:3b:9a:8c:42:92:e1:65:a8:33:a1:52:85:
34:99:61:49:81:7e:06:ab:5c:3b:26:f5:3a:f9:73:
89:0b:e1:af:ea:f0:31:83:15:69:d0:70:02:c4:60:
10:d8:24:33:b6:dc:d6:37:4b:a8:e9:9e:c2:60:a7:
e7:e5:0f:62:84:11:75:fa:17:1e:d2:0c:a8:24:4f:
92:11:14:0e:76:22:21:db:db:b9:76:4a:75:0b:2f:
53:ce:4b:72:7a:bb:ab:ef:8b:4b:b6:89:4a:2d:12:
2f:5f:1a:3d:6f:40:dd:6c:79:70:15:04:8b:f3:64:
24:83:a9:70:0f:a2:30:ab:5e:54:ad:3d:a2:39:f8:
04:e9:5d:f3:4c:7a:3b:4b:a2:dc:59:48:b2:4c:f2:
ce:d7:c2:a0:5b:ac:c3:0c:f3:39:36:08:26:21:45:
ec:3d:ba:ee:d7:b2:00:be:be:35:9b:a9:6e:25:9d:
5c:4b:be:4d:b0:62:df:37:b6:b3:e8:d4:18:57:3c:
f9:13:13:dc:d8:e1:bd:55:78:90:9a:69:45:42:5c:
23:c6:b0:cd:8a:7d:e7:99:9a:5f:56:5c:23:fd:25:
3d:50:28:83:78:e8:f3:b6:ad:11:22:9e:cc:08:8c:
b8:60:27:e7:6e:02:5d:48:8b:ac:d6:3b:38:12:b0:
47:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3B:F3:72:29:BA:D2:F4:0F:52:6A:E8:C9:7A:2F:39:5C:4F:95:2C
X509v3 Authority Key Identifier:
keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:51:ac:82:97:e4:6a:e6:09:2b:39:2b:93:3f:6f:aa:c4:bf:
87:c6:02:f0:88:d0:9f:77:8e:f3:6f:88:51:85:96:07:19:cb:
3b:e2:ad:fd:51:30:ac:6f:16:bd:49:2a:5f:45:db:b1:7e:f7:
ea:ab:a2:43:37:5a:23:cd:03:29:d1:5e:58:66:39:76:42:22:
0e:a3:ad:4b:32:68:fd:0d:7a:49:ba:a9:90:5a:80:eb:75:8c:
31:f9:19:3d:88:30:40:cd:be:39:49:c9:a4:3d:59:87:55:cc:
56:0b:18:b0:53:e9:20:17:e0:d8:66:1e:6d:30:84:b6:c8:f7:
d4:c4:a2:f3:34:40:5d:29:f4:dd:28:d0:8d:c7:34:82:c2:2b:
e8:43:f2:4d:13:20:a2:8e:57:e0:f4:97:68:29:a3:92:df:7a:
29:fc:0d:d7:f4:9f:1f:2d:b7:cf:42:37:e2:a6:f7:94:c6:77:
84:89:1e:9d:62:37:48:42:33:1c:b3:98:a8:b5:fb:64:99:a7:
1c:f1:b2:c3:14:aa:c4:32:cd:f9:cb:94:ae:e3:24:85:8c:5f:
cf:9b:4f:1c:42:d5:74:4c:54:a7:c5:e8:60:a1:dd:6c:0d:0a:
fd:07:95:34:4b:8a:3b:5a:7a:00:03:8a:18:23:60:cd:5e:f0:
dc:d6:52:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:23 2025 by rpki-client