Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
File: VCG6S1ORYtfvGRpWYgSeUf3DYis.mft (raw, json)
Hash identifier: SZe+fYRyuPnCvENcr5ZXvnnBS/EQ+2bflhceM+Tt9g0=
Subject key identifier: D7:B3:20:7C:79:36:5E:7B:60:BA:50:2A:B8:68:CD:EF:AB:CC:E6:94
Authority key identifier: 54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
Certificate issuer: /CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Certificate serial: 0199FCC62935326ED9B1EB712883EF90D49F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 14:01:09 +0000
Manifest this update: Sun 19 Oct 2025 14:01:09 +0000
Manifest next update: Mon 20 Oct 2025 14:01:09 +0000
Files and hashes: 1: QA9NVOBnP4tDAeAGKeBBrJK6jXk.roa (hash: /S3zUwTrf17IztbM7bS/w8GxX/h5PWsNVviHHhl5zF8=)
2: VCG6S1ORYtfvGRpWYgSeUf3DYis.crl (hash: u8AqEvgwgfKoDQyYo8D5e7wv1+1PGaUr7BpZBv9wVQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:29:35:32:6e:d9:b1:eb:71:28:83:ef:90:d4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Validity
Not Before: Oct 19 14:01:09 2025 GMT
Not After : Oct 20 14:01:09 2025 GMT
Subject: CN=d7b3207c79365e7b60ba502ab868cdefabcce694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:78:88:5d:9b:aa:7e:48:9c:82:40:97:74:
00:cc:5e:76:e3:15:a4:09:7b:db:33:1e:e0:99:89:
61:dc:58:e0:bc:ee:79:88:c7:81:04:15:a3:d5:95:
2f:24:c7:39:14:27:a0:67:c6:f7:8b:38:69:1a:d2:
aa:85:78:1c:39:2e:93:f4:e9:6b:eb:30:74:ae:4e:
cd:db:3d:03:89:12:c8:ad:1c:da:65:67:6d:8a:91:
19:ba:5b:76:8d:28:e4:8e:79:97:9d:23:b2:aa:c1:
3f:68:9e:37:c1:49:84:b3:18:c1:9d:d8:3b:06:74:
e1:1f:91:a6:92:8e:36:25:07:e6:a2:8b:7f:aa:a3:
6c:59:13:c2:aa:5f:bc:02:d7:d9:e0:e8:4e:45:06:
4f:cd:e9:cd:7b:ff:07:c8:d1:a0:22:78:ed:f6:03:
f8:ae:35:e6:78:83:4f:35:bc:96:60:74:ca:ee:cb:
39:c0:75:46:06:3c:1c:23:37:c4:f2:a1:dc:85:6a:
1d:82:14:53:3c:43:67:61:c8:b7:b6:97:b3:b0:d2:
b7:4b:11:f2:bb:94:ac:1a:6d:a1:91:8e:3c:53:73:
60:5a:9f:86:df:e9:8b:56:ad:d8:f9:d8:6d:53:90:
25:12:01:fc:67:e9:a3:18:74:5f:6e:45:e8:96:ed:
27:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B3:20:7C:79:36:5E:7B:60:BA:50:2A:B8:68:CD:EF:AB:CC:E6:94
X509v3 Authority Key Identifier:
keyid:54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:68:1a:fc:86:20:2e:96:f5:cc:ed:45:5f:1e:81:f8:71:5f:
2b:e1:c6:4c:02:30:c7:55:fa:8f:26:89:50:be:ad:b5:80:c9:
a9:bd:22:4f:53:15:11:b6:62:47:fb:93:8d:09:65:a0:f4:a7:
a3:d9:8d:07:9c:4d:fc:a3:e9:85:c4:87:8f:0b:b3:e3:04:60:
ea:b8:80:ff:9d:ae:50:d6:30:ee:7f:12:67:93:30:14:fa:d7:
ba:a9:30:d5:10:38:c7:76:3f:4f:0c:a5:24:7c:04:b1:f9:61:
9f:09:2a:14:a2:8a:8a:87:97:44:22:33:77:cd:d2:ad:ab:53:
87:d2:ba:4c:51:51:45:e5:f1:30:11:c5:96:05:40:98:59:7f:
ac:6b:a5:5c:d3:cb:c9:91:13:91:78:c8:ce:08:6c:29:a8:03:
a6:d6:b9:d4:9a:21:d0:00:b9:00:6a:5a:aa:53:f7:a9:a5:3a:
53:0c:2a:b8:cf:bd:35:b6:1a:51:0a:49:1d:62:c5:96:15:6d:
17:51:b9:d7:ed:27:8b:e2:a9:ca:75:27:6a:07:23:ff:c8:04:
01:48:21:c9:13:8a:71:31:f2:87:0a:e1:77:eb:e5:fc:d9:ed:
b9:91:18:50:ea:db:f0:dd:17:a5:12:b9:c9:b6:a6:4e:b7:38:
f2:a2:84:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:52 2025 by rpki-client