Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft
File: VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft (raw, json)
Hash identifier: PlSGyM0wsq4d4+zuAlGbXr5MFnCMZTxVbOzXukmgCb8=
Subject key identifier: 13:6E:22:DB:76:88:99:69:5C:32:88:7A:8F:0E:FC:E9:E5:B0:89:F5
Authority key identifier: 54:DE:B1:D6:A3:77:AC:9D:1F:5B:88:8C:5C:D1:D4:00:C7:99:72:71
Certificate issuer: /CN=54deb1d6a377ac9d1f5b888c5cd1d400c7997271
Certificate serial: 019A0111120D06F075109379D3FC669D70D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft
Manifest number: 0157
Signing time: Mon 20 Oct 2025 10:01:27 +0000
Manifest this update: Mon 20 Oct 2025 10:01:27 +0000
Manifest next update: Tue 21 Oct 2025 10:01:27 +0000
Files and hashes: 1: 0KZX05rL8h9xkUYSwRaJ35ZtOBw.roa (hash: 0p1i5WbBLqVZcu2ejejVhnVH/tBsiXUpsUEhbMpG3eU=)
2: VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl (hash: uAV1qUBTkMvhFV5W3yIETdfDPOY/9avI3ue2MjqCWcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:12:0d:06:f0:75:10:93:79:d3:fc:66:9d:70:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54deb1d6a377ac9d1f5b888c5cd1d400c7997271
Validity
Not Before: Oct 20 10:01:27 2025 GMT
Not After : Oct 21 10:01:27 2025 GMT
Subject: CN=136e22db768899695c32887a8f0efce9e5b089f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:44:d8:0d:35:8e:c3:90:d4:e2:6e:58:34:b5:
4d:95:db:14:3e:fa:22:03:23:7d:84:08:2f:87:ff:
71:9f:cb:aa:4e:91:c5:5c:bb:98:73:19:14:0f:e0:
cc:b7:f9:b4:95:69:0d:ce:49:fb:ce:34:95:2e:0a:
5f:31:1c:ec:6a:6e:8e:61:36:2f:c5:52:8c:b0:24:
72:3c:d9:0a:20:69:4e:f8:e9:86:6a:18:88:ee:b9:
63:bc:e0:94:49:2d:f4:bc:ab:01:68:e0:ea:a4:3c:
c7:d4:c3:56:b9:0e:da:62:da:12:75:a1:da:27:01:
d0:3e:1b:61:4b:3e:e3:d3:65:79:35:72:95:2c:01:
ef:e8:90:c2:f3:4f:ba:b7:47:b4:e0:f2:cd:0a:ce:
5a:d4:a7:e1:5d:cc:92:18:6c:71:22:7d:88:db:b7:
b2:77:90:24:69:09:93:72:b6:01:da:13:c2:cc:41:
fd:18:db:fd:29:eb:d0:93:c8:59:45:3d:23:c3:02:
8e:39:1f:47:6d:8b:c1:09:fd:e9:7e:c7:4e:55:0f:
9b:5f:62:b6:03:47:80:c1:fd:e1:e8:f3:f0:45:e3:
2c:33:b7:3d:ec:c7:48:bb:54:a7:68:d0:ca:da:b7:
1f:b7:69:fa:9b:89:08:8c:65:fc:85:bd:3b:f1:31:
db:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6E:22:DB:76:88:99:69:5C:32:88:7A:8F:0E:FC:E9:E5:B0:89:F5
X509v3 Authority Key Identifier:
keyid:54:DE:B1:D6:A3:77:AC:9D:1F:5B:88:8C:5C:D1:D4:00:C7:99:72:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4f:36:3a:48:10:1a:c1:d8:66:14:c3:59:55:d2:e6:81:33:
d1:13:56:45:a7:75:19:a3:be:49:d2:9c:66:20:76:ed:b1:98:
92:61:8e:ce:bf:f5:44:1b:9f:b1:be:04:3e:56:58:2f:c4:4b:
2b:76:65:ff:6f:9a:86:43:9f:d8:c1:c6:ea:e3:d7:ee:c1:97:
32:4c:40:1f:46:6b:fe:d9:32:0b:64:5c:a1:18:08:07:57:78:
bf:4c:01:96:1a:6c:dd:a4:22:97:66:e4:92:3c:35:84:5d:e8:
e8:7a:a1:b6:1b:34:a7:de:85:ff:31:20:ec:2c:6b:cd:c3:02:
68:ea:d2:e8:db:e2:df:67:60:dc:97:47:f5:ee:e3:c5:ab:ca:
9e:96:1c:64:0a:62:45:66:3c:94:2d:4c:d8:13:bf:f1:d5:5f:
1d:fe:13:38:7f:0b:d2:7a:40:7f:3b:49:17:19:b1:a9:bf:05:
d0:e6:23:27:50:9f:a0:b3:8b:db:cf:77:b8:3a:e3:99:43:8a:
7c:27:8f:fd:2c:c9:64:3b:84:bb:2a:5c:a6:6a:62:eb:fc:04:
fb:22:04:1c:a4:30:dc:64:be:72:e1:8a:21:56:9f:06:1a:25:
9e:2c:0b:a6:1a:10:22:c3:50:be:18:dd:39:31:85:60:06:c7:
68:14:84:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:34:31 2025 by rpki-client