Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
File: VWyanGGYCpC10MUfhtfLrJ_xQto.mft (raw, json)
Hash identifier: ymc42QsSjn2uowwIZzcNhQGkmBYbZAfP4WwBUmUAb3I=
Subject key identifier: 3E:49:F0:BB:E8:4B:05:FB:ED:AC:B2:EA:0B:ED:69:F0:86:CA:6D:27
Authority key identifier: 55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA
Certificate issuer: /CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da
Certificate serial: 019A066D265B9EF6C57561F75891866C5D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
Manifest number: 16E5
Signing time: Tue 21 Oct 2025 11:00:07 +0000
Manifest this update: Tue 21 Oct 2025 11:00:07 +0000
Manifest next update: Wed 22 Oct 2025 11:00:07 +0000
Files and hashes: 1: VWyanGGYCpC10MUfhtfLrJ_xQto.crl (hash: /Sk6MwpNktHB+ubDCSMf1yoXmSMVvIoWCpYKRO1bLPs=)
2: haz-HdaagkevUDJWOKHcKbMpfs4.roa (hash: 4MYVAihmuy2VBnQslitsGPSQAlGwL1bJXLz/oBhLSUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 11:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:6d:26:5b:9e:f6:c5:75:61:f7:58:91:86:6c:5d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da
Validity
Not Before: Oct 21 11:00:07 2025 GMT
Not After : Oct 22 11:00:07 2025 GMT
Subject: CN=3e49f0bbe84b05fbedacb2ea0bed69f086ca6d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:fc:f5:e6:a3:73:e7:a3:b0:b8:58:2c:d5:
f5:17:ed:0f:2c:db:75:de:f7:8f:9c:8f:84:7a:65:
3c:ba:e5:aa:32:61:e2:34:38:25:90:63:35:e1:19:
e8:89:08:07:77:12:7f:6e:0f:f1:9b:d4:98:0b:5c:
ef:f2:0d:33:9e:ba:36:05:2b:0c:46:72:6a:b1:fd:
04:8f:ee:51:8d:bf:45:bd:c9:9e:27:38:0b:72:a8:
bb:7a:9e:9d:75:a7:18:9f:3f:ea:b9:84:bd:3c:b6:
e9:ee:48:8d:50:82:0d:6d:b5:c5:b2:23:a3:fa:d8:
f4:d3:af:06:1d:a7:6c:b0:b7:87:94:aa:e6:fc:94:
48:6b:07:a2:43:42:c7:cd:52:54:fc:ca:18:d2:19:
8a:f9:c1:52:d9:cb:f5:ca:38:a8:a1:03:05:67:10:
79:66:d5:b7:90:d0:10:69:4e:47:37:06:93:c6:7c:
d0:32:88:74:4b:85:84:bc:0b:59:c1:5a:e3:cf:bc:
56:ef:70:c7:db:fd:3d:cb:fa:d5:6f:e4:19:28:b0:
8f:89:22:d2:29:e0:51:4b:3c:2c:11:ce:be:05:03:
2a:aa:a7:46:00:da:35:57:2c:a8:b3:bc:0e:22:5a:
a4:76:56:83:ae:49:3c:27:f3:d2:9e:b9:c2:cc:67:
6c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:49:F0:BB:E8:4B:05:FB:ED:AC:B2:EA:0B:ED:69:F0:86:CA:6D:27
X509v3 Authority Key Identifier:
keyid:55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:da:8b:68:fe:f9:03:08:1c:2c:ce:41:3a:46:42:7d:c6:e5:
79:81:6c:a5:4d:ea:57:c2:88:de:38:bf:e8:64:8c:66:60:82:
c9:1f:a6:cd:2d:5a:2a:87:c4:e3:67:4c:ea:91:70:c0:41:9f:
5f:16:6f:64:18:bb:73:ac:a2:cf:ba:d3:d4:a6:8d:38:20:f0:
38:ea:a6:d6:31:7c:ad:56:eb:34:9c:e1:50:2c:3a:5c:28:6e:
4f:7e:ed:b8:19:fa:43:9b:c9:52:b6:e5:9c:8d:38:d5:8c:58:
32:1d:05:e1:a1:96:bf:4e:2d:5d:69:05:b8:e2:24:ae:df:33:
7f:c4:e5:e6:5f:82:14:16:53:1c:00:d0:f6:a8:f4:35:49:4d:
93:f2:5a:8c:8f:4b:0d:50:4d:b3:43:d1:cb:1f:07:33:6e:82:
ab:00:27:ee:4f:1f:c5:2f:de:50:41:46:99:05:0f:6a:35:e7:
b4:27:c8:c6:65:be:ba:5f:1e:b3:d3:d7:a5:c5:d4:86:93:f6:
01:ab:87:2e:7d:8a:64:6a:cd:06:a9:9b:74:4f:13:dd:31:0e:
14:aa:3f:1b:2d:3f:4f:a3:25:ea:55:dc:68:f0:71:b2:19:17:
9a:70:40:63:dc:4b:f6:e0:ce:a6:5d:07:9c:48:f7:13:46:fc:
17:e0:4a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 16:09:21 2025 by rpki-client