Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
File: VRNzP1CmpEqRS5-Pjr941_pOqaA.mft (raw, json)
Hash identifier: eAgkx08fKwt5UaPEmooKNvMane/IGQ+z4PUXc9kAuak=
Subject key identifier: DF:02:3C:49:78:1C:B9:34:BE:59:94:AF:A1:07:DF:95:36:3B:CE:2B
Authority key identifier: 55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
Certificate issuer: /CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Certificate serial: 0199FDDA70F1343B823D46F608B6567458FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
Manifest number: 140E
Signing time: Sun 19 Oct 2025 19:02:55 +0000
Manifest this update: Sun 19 Oct 2025 19:02:55 +0000
Manifest next update: Mon 20 Oct 2025 19:02:55 +0000
Files and hashes: 1: 0T5ioKjx83-tTr3Mt9le068JcTQ.roa (hash: W8RCmNZUMfFbxdN1LMLcVYrh7MEw9Ur5XcdnTWf1Txo=)
2: VRNzP1CmpEqRS5-Pjr941_pOqaA.crl (hash: SgBGhIf5XDmjeY/IgEHq0c3Ygq3XI7yHl3njSP+05Zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:70:f1:34:3b:82:3d:46:f6:08:b6:56:74:58:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Validity
Not Before: Oct 19 19:02:55 2025 GMT
Not After : Oct 20 19:02:55 2025 GMT
Subject: CN=df023c49781cb934be5994afa107df95363bce2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f8:d7:84:97:17:9d:40:98:9d:2e:10:25:f6:
01:70:a3:e7:7d:f6:70:25:41:dd:2c:2c:fc:ee:4c:
62:85:e6:67:5c:0a:88:7a:33:43:f3:96:dc:16:03:
e8:0d:0c:0e:31:73:75:b4:3a:16:83:61:cc:b1:83:
34:c6:6a:cf:9d:a0:61:a8:93:2b:f2:a4:76:2b:18:
9b:d6:f9:c5:e9:68:91:e0:0b:e7:15:98:0e:77:a9:
6d:74:65:66:14:bc:4e:c3:c4:e2:fb:43:4e:87:89:
80:c4:27:ed:27:35:65:08:a6:1b:98:0b:4f:d0:6e:
ed:e8:6c:32:10:b0:33:aa:9b:0c:a7:f9:dd:67:a5:
ed:7c:0f:1c:e7:b1:ee:85:2a:48:cf:70:ad:d5:6d:
58:24:a0:8a:8b:7e:94:9f:1e:a0:de:c6:d8:8a:b3:
3d:f5:1b:e6:83:b6:1e:72:5a:b9:e1:d4:a3:48:49:
79:08:ea:30:7a:f5:b5:42:51:30:da:4c:77:1c:76:
f1:3a:7e:1c:bf:a0:b9:0e:99:48:75:4a:e8:8b:56:
bc:58:8a:79:5b:fe:77:4f:e7:1f:9c:ce:31:c3:34:
b6:5b:54:4d:b1:97:f6:9e:46:76:8c:79:74:4d:3d:
86:93:b5:7e:f4:45:6a:b8:e6:a7:b4:f3:e1:34:4e:
5b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:02:3C:49:78:1C:B9:34:BE:59:94:AF:A1:07:DF:95:36:3B:CE:2B
X509v3 Authority Key Identifier:
keyid:55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ab:a5:b8:58:98:50:09:aa:4d:1c:16:0d:3d:cc:28:18:f6:
57:8b:c0:f2:b5:ef:66:f0:b1:ac:7e:1f:ca:f5:3d:66:c4:60:
6f:a6:a8:65:82:aa:57:d4:ce:5e:eb:bf:9e:88:6d:0c:76:fc:
e5:dc:07:a4:50:06:39:4c:c2:0a:fd:ab:f8:ae:5e:2c:f3:d1:
96:e8:f1:17:bb:0f:37:83:7c:9f:f0:2a:ef:12:fb:b3:c8:20:
08:d5:29:28:de:f4:7e:04:1c:8c:4a:16:a8:ee:ee:28:bf:1e:
08:3d:5c:10:1b:7a:93:27:c7:91:24:e5:fc:03:2d:4e:e2:2f:
71:eb:b4:90:b5:98:96:ea:89:a0:2c:90:5f:c2:bc:f1:9a:80:
25:25:9c:bd:cf:12:c6:9c:36:01:6b:b1:3e:b8:b1:9c:2b:8a:
43:78:55:20:7d:be:e4:c6:21:a2:66:7d:20:c5:2c:3c:13:8b:
28:ab:e1:39:79:74:46:74:6e:8e:af:b3:be:17:dd:70:bd:fe:
ea:35:16:a6:4c:a4:33:3d:a9:f3:29:ca:7d:95:12:a2:da:2e:
e0:5d:c6:b3:83:67:39:bc:7a:f5:1b:ea:8b:8e:6a:b9:80:74:
16:9d:5a:48:74:d0:d8:19:03:f4:d5:19:6b:8e:23:a5:7a:b2:
0b:44:42:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:02:04 2025 by rpki-client