Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
File: VDxcNKYv--2PwPDsAbQsDFDufvc.mft (raw, json)
Hash identifier: a0Cwk7YG7ubHtpJfiPWkKnBB24mdf5kUtWVoyhOsGEw=
Subject key identifier: 2C:0C:5E:2A:6F:D6:A6:42:DC:97:CD:7C:7E:7E:42:4D:B4:95:D2:CE
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 019A006C6608A58456DBB2F8493559D1F36E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
Manifest number: 08FE
Signing time: Mon 20 Oct 2025 07:01:35 +0000
Manifest this update: Mon 20 Oct 2025 07:01:35 +0000
Manifest next update: Tue 21 Oct 2025 07:01:35 +0000
Files and hashes: 1: 3OLIMizXOJwfjWRWiEBjpUKJwIU.roa (hash: QMFZT0i3XGS+MsKzCsZOmKPi7vfVCyuG5tTyqhdATNA=)
2: NPlJ_KhWtoEU85P6_bEw-JrQECw.roa (hash: +WKUN/INEKKaNIE4RDQgpQc6rCP9GRAzlztHhcY8Wc4=)
3: PVF7wnGzCTMj-DMi0Yh7tJoQV50.roa (hash: ifNzodbn64RIKDxyUKgvxQYTPT/TGzAFj9xlomWoMYM=)
4: VDxcNKYv--2PwPDsAbQsDFDufvc.crl (hash: w/+Rd/SySin2vkLn+mEeaJFglxOzJQLE6mJFsfCofY4=)
5: aP1xgGw8H7jCOI-VSZ01nj8-4CM.roa (hash: tc+u6WTs4frUnC9+3IttTv0/u7Rmmf/DRJCt109dDEg=)
6: egWiNnqY9Vl0Wup08EirG2JX11M.roa (hash: cdwWkaZBw0jnB5ddN/k9GlCFftOqTidrPnaELenZvX8=)
7: lSBrUQBEKuTSY6AdNT1ZVvcTRx8.roa (hash: G+WOXA6z8Ino3VGaelG9h3UW5mZBPuWh+ANhGCA7MB0=)
8: tRNUe3Kk3eWia8VX_dKXZILdgjE.roa (hash: JStwVDR6ukqM/F9+GpHeAO0i8HlEBKkQBbaoGUyV6eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:66:08:a5:84:56:db:b2:f8:49:35:59:d1:f3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Oct 20 07:01:35 2025 GMT
Not After : Oct 21 07:01:35 2025 GMT
Subject: CN=2c0c5e2a6fd6a642dc97cd7c7e7e424db495d2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f3:58:2c:6c:05:3c:5e:62:0d:53:ff:38:99:
ef:d7:cd:28:0b:71:28:ee:2a:c5:26:3b:a2:e1:8c:
fd:cf:a9:6f:f1:95:05:90:a2:7a:a7:e4:6b:84:7a:
32:ba:2b:a1:43:c7:77:de:96:22:ce:5a:bf:36:7c:
d5:88:b6:ef:bf:0b:ca:82:bb:5d:c7:d7:72:71:f6:
88:9e:ba:ce:10:a3:43:be:3c:4f:aa:df:e2:36:9c:
0d:7d:72:c4:4c:b4:69:dd:31:e8:8a:8d:06:9c:9b:
d3:7c:0b:46:7d:ec:a3:d6:8a:5e:df:fd:62:aa:08:
23:1d:18:06:dd:59:b8:ea:91:87:7d:6c:57:e4:51:
d4:39:15:b8:43:90:0c:fd:07:bc:aa:cb:fe:cf:0e:
c1:20:c7:6a:6a:0a:e6:48:be:7b:cf:82:ce:c5:fb:
cc:52:a7:c2:67:c7:f6:33:1c:f5:a3:83:c7:c4:44:
d3:bc:b3:f1:03:22:c4:aa:7a:e8:40:3a:dd:87:5b:
61:65:13:db:92:8f:5a:60:7b:68:cd:5c:db:b3:3f:
b0:28:52:74:29:c0:54:ab:b1:49:7f:2b:3f:2b:74:
b4:d1:34:39:68:4c:40:ed:6d:07:86:f2:3b:89:44:
4a:f7:eb:bd:09:19:f4:78:60:0c:33:22:e9:68:c7:
12:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0C:5E:2A:6F:D6:A6:42:DC:97:CD:7C:7E:7E:42:4D:B4:95:D2:CE
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:eb:f0:1e:65:d2:e7:23:2f:34:59:23:ba:4c:86:db:05:a9:
f1:a1:49:66:9a:25:3a:66:32:a3:d7:5c:c1:9b:cd:1a:d6:e8:
0b:ed:d7:44:2d:7e:d4:51:75:b1:1c:82:2f:65:a8:14:65:a4:
62:ca:d0:ca:58:f9:44:5a:8c:6f:3e:7b:9f:ea:4e:ff:af:4b:
99:87:d7:d7:d4:96:87:e7:ad:8b:8b:6c:16:03:72:eb:1a:9a:
ae:91:c4:30:9a:f8:4d:62:02:a3:3d:d8:e8:91:ec:27:ea:46:
9d:c9:24:d3:0b:e5:45:d5:76:0f:ef:4f:4a:2f:f5:55:ed:7d:
4d:85:65:2a:3e:c7:e0:b1:48:b9:05:a5:99:4f:20:8a:7f:d1:
1c:03:0a:2d:f2:94:36:88:4e:c2:7f:57:0f:db:d9:cd:3f:7f:
82:8f:ed:14:07:0e:6a:3f:40:31:16:2a:60:41:3b:a7:23:08:
3f:98:d9:10:4d:6f:d8:99:5b:51:04:67:d1:ea:8d:ef:ac:8c:
18:43:a1:7f:97:39:51:49:4d:c9:20:17:ce:6b:a8:9d:11:ce:
fb:d2:2c:ac:16:b9:25:34:9e:eb:26:f7:6a:bc:c7:87:4b:bc:
a8:fb:a0:3f:8e:31:05:2b:f8:3e:ff:25:92:d6:13:50:34:f0:
97:33:37:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:44:07 2025 by rpki-client