Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
File: VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft (raw, json)
Hash identifier: XKxLJR1VhdX8admdeKOmSYbe1XaQWME5D8laY/a0O9s=
Subject key identifier: CF:EB:7F:01:34:61:42:0A:C9:58:F7:46:E8:28:DD:90:A9:BA:50:EB
Authority key identifier: 54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
Certificate issuer: /CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Certificate serial: 0199FB0F48F0801B9AD6B3673B63AAEDDE20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 06:01:46 +0000
Manifest this update: Sun 19 Oct 2025 06:01:46 +0000
Manifest next update: Mon 20 Oct 2025 06:01:46 +0000
Files and hashes: 1: QgsJlqJcTUYG8ULdRGgE3NFD82g.roa (hash: js71yBiScUO+PfDSCeaEzOg8Fh9K6ktXB24Y7dBG/Eo=)
2: VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl (hash: AW37+I6JfUMrqchePv/MhbYn31OPhZ4DnMGexzMe7KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:48:f0:80:1b:9a:d6:b3:67:3b:63:aa:ed:de:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Validity
Not Before: Oct 19 06:01:46 2025 GMT
Not After : Oct 20 06:01:46 2025 GMT
Subject: CN=cfeb7f013461420ac958f746e828dd90a9ba50eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f2:79:02:81:1a:5e:7e:57:23:4d:c1:e9:89:
ca:6c:b0:4c:5e:c3:d3:bf:1a:f1:99:e6:22:33:dd:
4a:b5:00:39:7b:f5:46:7f:6a:77:ed:94:6f:a3:46:
fb:e1:f3:36:3f:b9:80:58:61:dc:6f:10:e4:db:45:
3f:0d:db:5f:ae:4e:41:86:6a:3d:1c:27:16:d3:d5:
15:e4:89:60:dd:9b:be:de:5f:30:c3:74:36:42:50:
29:e9:2f:04:be:8a:d9:6e:ab:8a:7c:40:34:c5:f3:
41:a5:7f:21:ee:9a:9b:27:70:73:49:7f:c0:79:3e:
7c:15:c4:15:fd:02:88:83:96:4c:43:ce:2c:cb:6c:
76:50:90:9a:0b:03:24:63:7b:73:35:48:16:d8:e2:
2d:1c:78:39:f1:82:09:a0:69:9c:e2:69:c6:5b:19:
47:40:3f:0b:f1:21:61:47:83:6e:22:9b:2c:61:a2:
0f:dd:51:cd:54:12:2f:5f:1d:d5:94:35:5d:6c:e4:
e7:0d:6b:a4:46:3d:92:1a:65:be:6d:ea:f3:0c:14:
48:7c:8f:84:56:0f:c1:3c:1c:e7:e2:6f:7a:b0:23:
9a:89:dc:ae:ac:41:b6:ca:1e:72:49:94:48:22:e8:
0a:e4:0b:24:a5:0d:4c:50:43:5b:77:72:8f:96:f9:
4f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EB:7F:01:34:61:42:0A:C9:58:F7:46:E8:28:DD:90:A9:BA:50:EB
X509v3 Authority Key Identifier:
keyid:54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4b:b9:45:f4:0f:8d:b1:22:2e:8b:db:f9:b3:3e:d1:ff:4d:
98:7c:7b:70:74:f6:ad:d1:d9:d4:5c:b4:ab:f9:31:93:2b:d5:
f3:2e:cf:65:35:db:06:c4:7d:d5:5b:31:43:c0:ef:bb:87:50:
5e:84:2b:68:e6:b5:8f:47:e4:30:a1:70:fb:d4:ba:31:7b:7c:
2e:40:62:f3:ed:2e:93:4c:9b:10:7b:0d:73:2c:13:02:83:6a:
b4:63:38:02:e6:4f:f3:42:50:b7:2d:3d:f4:37:b2:11:3e:e8:
18:53:1e:c6:df:ea:ea:23:c3:65:a6:90:49:c3:6b:3a:fa:cb:
b3:4e:b7:3a:13:5c:e2:5e:96:05:73:bd:45:9b:56:62:b2:ce:
15:e0:4c:42:c2:2c:2d:89:7b:c1:50:be:d4:c7:d5:61:30:67:
8e:cc:bf:97:b0:55:14:94:35:04:4a:52:26:55:6a:45:fb:7f:
bf:58:76:7b:14:ce:d7:09:ef:ee:5e:c3:12:5a:e8:1a:62:3a:
32:0a:05:16:54:80:05:64:9a:85:32:9a:bb:87:7e:6d:bc:9a:
09:84:24:b5:55:e4:27:56:78:5d:bb:e2:a3:bc:34:2a:be:ab:
6b:c0:d8:a7:59:79:ae:e0:e8:84:ec:eb:61:b1:53:e3:37:2e:
a9:88:99:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:10 2025 by rpki-client