Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
File: VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft (raw, json)
Hash identifier: 6KkBKddWBBmdmRKrcoHNHM8IAgi10wDvEJWb6OU3PPU=
Subject key identifier: 4C:C3:08:04:75:DF:0C:B3:4F:A1:E5:34:2B:C0:24:2B:B9:D2:80:B7
Authority key identifier: 55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB
Certificate issuer: /CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb
Certificate serial: 0199FC8F7B5CA98520438B665F184A638158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
Manifest number: 04A1
Signing time: Sun 19 Oct 2025 13:01:25 +0000
Manifest this update: Sun 19 Oct 2025 13:01:25 +0000
Manifest next update: Mon 20 Oct 2025 13:01:25 +0000
Files and hashes: 1: LAyDLVrlWC7GYrIpkUltJFolhC0.roa (hash: 5fqulNX0pe/944CBeE9O8m/kZ++wdZNRG9xqatGIqks=)
2: VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl (hash: 7yH0oe4TbYEe5RJI3d4HQ9VYUhTTFpcm4G8MeMeim94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7b:5c:a9:85:20:43:8b:66:5f:18:4a:63:81:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb
Validity
Not Before: Oct 19 13:01:25 2025 GMT
Not After : Oct 20 13:01:25 2025 GMT
Subject: CN=4cc3080475df0cb34fa1e5342bc0242bb9d280b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:31:5c:7b:16:f5:e4:d9:f9:ab:6a:5c:01:77:
b7:8e:8c:33:b4:14:3c:e8:f5:2b:ba:cc:7c:67:a8:
32:d8:49:b1:19:87:e1:8d:b7:a3:c4:4f:27:2b:3f:
9d:0c:2a:93:6c:26:d0:cf:e3:a1:77:7d:f3:90:43:
7b:60:6b:e6:2a:dc:ce:00:9e:be:22:dc:83:e2:0b:
a8:03:31:f4:3c:41:ff:32:a8:25:1b:b3:81:c7:00:
79:b2:b7:10:40:6d:bc:7b:98:26:9b:52:a7:40:63:
fc:77:35:69:86:41:1a:5f:04:b6:b7:16:09:8f:12:
b5:d8:ad:06:40:22:14:d5:01:19:ab:72:93:ae:bb:
3a:6e:84:99:3d:c9:e3:e7:18:0f:27:7e:5b:20:4f:
25:31:60:dd:9b:b1:dc:b0:ff:43:8d:e1:1b:62:d9:
6a:ce:b3:33:50:89:5a:f7:8a:2a:76:c4:58:20:8b:
14:ee:0b:e7:cd:6d:b3:74:dd:5f:9d:51:16:d6:27:
17:2d:fe:aa:02:4b:85:3f:e0:03:f2:89:19:cc:58:
ef:9d:46:ee:ee:c2:f3:7c:15:4b:35:52:93:70:a6:
95:49:5f:74:42:9e:a4:de:dd:a3:cd:e1:de:38:82:
3b:d9:a6:72:75:26:53:a6:2f:d7:b0:52:ba:44:7d:
97:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C3:08:04:75:DF:0C:B3:4F:A1:E5:34:2B:C0:24:2B:B9:D2:80:B7
X509v3 Authority Key Identifier:
keyid:55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:09:ba:ed:14:9b:88:7b:2c:7c:b3:81:84:52:2a:bc:08:e2:
f6:68:a5:38:86:80:ec:d9:df:d5:90:24:7d:6c:80:66:1f:81:
b1:51:63:a6:ea:3d:fc:8e:9d:1e:df:5d:4f:e2:1e:6f:18:d4:
69:80:3a:06:64:28:a9:7d:81:40:9c:f1:a6:e5:c5:07:5c:63:
06:01:30:ef:e1:c4:c2:d4:4a:67:0e:ef:4a:61:10:51:85:35:
6c:dc:31:95:e8:db:a9:3a:de:a4:c2:b0:32:80:74:b9:f8:c5:
63:b1:99:02:35:63:52:fc:ed:10:fd:62:28:2d:aa:b9:22:a6:
2a:37:9c:60:33:ca:63:37:d3:3d:29:1f:3d:14:a7:64:c8:9f:
a3:63:62:f4:37:04:d0:58:f8:91:50:5e:b7:34:ad:98:5e:29:
1f:df:5a:7d:16:e8:4d:cb:2e:d4:c4:7a:a8:15:08:48:52:70:
be:48:fb:ad:84:5f:eb:35:9c:f4:c5:2e:67:b3:67:cc:ee:d7:
a5:90:b7:b4:86:91:67:5d:65:c6:20:dd:ec:00:e9:ae:45:06:
9c:55:33:97:72:c7:bf:e0:ab:71:43:39:0f:20:eb:5e:3d:c7:
8f:a2:c0:6f:39:3b:bb:95:1e:74:82:b7:cc:3e:83:83:3a:b3:
8f:f7:2b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:15 2025 by rpki-client