Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
File: VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft (raw, json)
Hash identifier: cXOZxsn//PU4JAHsZc1z07MtEsXR99vR8mm+luE9sr8=
Subject key identifier: 42:DA:56:B5:AA:0D:D7:FE:2D:17:EF:A9:16:B4:6D:41:B0:02:B8:6F
Authority key identifier: 55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
Certificate issuer: /CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Certificate serial: 0199FC590512942CBA31319317BBA1411C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
Manifest number: 0BDE
Signing time: Sun 19 Oct 2025 12:01:56 +0000
Manifest this update: Sun 19 Oct 2025 12:01:56 +0000
Manifest next update: Mon 20 Oct 2025 12:01:56 +0000
Files and hashes: 1: Hgi_WtigQe-4a9mBK4OJ2dE5DEg.roa (hash: glvgmho6qzikqxgDEl6Npj+ieTiLH+pi39kY0pjWHaY=)
2: VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl (hash: G7e0syHbUfzw9ZKWQOzES23p3UNi/EEqGnqcdLn/7vY=)
3: YHJMwPpMbGI_zFjgbXnZP4EWLRA.roa (hash: PbBfFMHu68bzOncJDtOs1K4e5CV47wx0OGKsJihA0w8=)
4: zQrSyIjUHwJboP1xxZbE_ExqSB4.roa (hash: BdysfnABpVK+6w8shMYkAFX35eeb6edXdvxWPmnVvoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:05:12:94:2c:ba:31:31:93:17:bb:a1:41:1c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Validity
Not Before: Oct 19 12:01:56 2025 GMT
Not After : Oct 20 12:01:56 2025 GMT
Subject: CN=42da56b5aa0dd7fe2d17efa916b46d41b002b86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:16:e1:39:40:4a:ec:0e:1e:c7:c8:4e:ec:
a7:82:3c:b1:e2:e7:38:6a:41:89:2f:f4:16:1c:5d:
1f:d1:5a:7f:79:a8:62:9c:39:94:b0:5c:3b:55:71:
4c:25:b5:89:84:fd:2a:35:b5:e6:00:2a:95:ea:e0:
3e:2d:66:7d:7f:d7:cc:fe:54:18:5a:1a:12:c0:41:
04:85:14:57:73:de:bf:34:8a:93:3c:3c:d6:86:c3:
93:bc:47:c2:2d:df:f8:c9:33:b8:ed:e7:7e:41:94:
46:c0:2a:68:26:92:db:a2:95:88:87:fc:73:dc:4a:
06:82:3a:6b:57:0f:b5:25:90:30:0d:46:76:3d:e3:
ff:8a:3d:7c:33:68:f5:4a:60:ae:07:73:26:77:20:
6f:77:05:0d:fd:24:66:2c:ac:50:98:ee:85:dd:c0:
4d:81:27:88:68:6e:d9:f6:ba:a4:58:5d:f8:48:5c:
b5:57:d4:05:73:5b:78:1f:67:bd:84:42:12:e5:1a:
3b:68:57:23:73:fd:7a:6b:18:39:39:4c:c0:d2:cc:
54:14:54:bd:6c:43:ea:6b:1d:53:17:4f:4a:88:51:
52:c9:18:53:72:91:79:1b:c6:e4:6d:f5:0c:0d:b5:
57:fc:fe:5a:32:3c:68:83:00:43:a8:f5:e3:ec:d7:
7c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DA:56:B5:AA:0D:D7:FE:2D:17:EF:A9:16:B4:6D:41:B0:02:B8:6F
X509v3 Authority Key Identifier:
keyid:55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:c1:da:39:47:b6:cb:8c:40:24:40:f9:21:7a:e3:8b:cc:01:
de:69:4f:e1:ed:f2:92:c0:c8:67:3c:5b:ff:3d:c9:3d:f0:ac:
b5:bf:6a:f1:fd:70:90:e2:ec:74:c6:7c:4f:6c:c7:7b:be:26:
f1:97:63:c1:4e:51:3a:11:a9:fd:72:e0:ed:4f:dd:bd:a4:bd:
09:4b:69:86:97:48:40:a6:b0:6f:88:1e:39:64:8f:55:ee:b9:
d8:f4:d7:82:2c:cf:91:f0:6a:06:f5:fd:bb:0c:63:dc:59:d6:
5a:86:b5:42:54:bf:71:e8:7f:4f:ab:50:10:2c:08:72:93:bc:
55:ef:32:f5:f8:55:1e:6c:6c:28:b2:84:05:bb:17:7a:64:d3:
b3:5a:ab:b0:d4:6b:8e:c7:5e:35:91:0c:5e:7d:7f:5d:5d:13:
b5:17:7f:ff:26:78:97:56:93:e1:43:37:a5:92:c4:5d:5a:b0:
84:bf:28:5d:4d:32:b5:d4:7e:f5:6b:54:06:52:0a:9d:d6:da:
31:ff:ad:40:4b:ef:81:c3:73:13:1f:70:e8:5f:e1:5b:30:53:
2d:38:2d:83:94:3a:00:c8:29:09:e0:a8:02:85:f1:8d:6c:37:
19:93:3d:9f:47:94:f4:32:6f:0d:ae:9c:cd:19:6f:39:ff:31:
52:3d:0c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:26 2025 by rpki-client