Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
File: VHbDyngMxXdErb6QoPOU8dHNcvM.mft (raw, json)
Hash identifier: tar90jXp4GQ/r0Fvvzu18GLixTXWe4nQlWG2EqWosug=
Subject key identifier: 35:8D:23:54:18:EF:41:B1:1F:2C:44:11:13:E8:BC:A6:BB:13:33:87
Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
Certificate issuer: /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Certificate serial: 0199FCC6B91843CA74DFA15CBCA95AAD09C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
Manifest number: 034B
Signing time: Sun 19 Oct 2025 14:01:45 +0000
Manifest this update: Sun 19 Oct 2025 14:01:45 +0000
Manifest next update: Mon 20 Oct 2025 14:01:45 +0000
Files and hashes: 1: J1F-UaHfYAClgmD-n-h_bemva1g.roa (hash: LkkLFeCVLkb+GZvSdm+hQS9Yt//NS73l5BEh3ajjGOM=)
2: Mzf3T5ZCYDRP9VJBsVQOjUFWDdY.roa (hash: fMfmlTHaxDxkKj4QIO7HlLPP5wMEtHiZKgYxRA6zmJA=)
3: VHbDyngMxXdErb6QoPOU8dHNcvM.crl (hash: 5dySe5XHCMcSyqZCwS/wquu7hhsJFqvG+KSlsPKV2hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b9:18:43:ca:74:df:a1:5c:bc:a9:5a:ad:09:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Validity
Not Before: Oct 19 14:01:45 2025 GMT
Not After : Oct 20 14:01:45 2025 GMT
Subject: CN=358d235418ef41b11f2c441113e8bca6bb133387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:ab:55:98:6f:dc:96:90:c2:9c:b1:5d:36:
eb:26:3b:50:8f:17:4d:5f:af:78:50:f3:a6:f9:4f:
e2:23:ea:32:e0:15:32:45:78:b6:a4:9a:05:6f:65:
a0:3d:dc:08:29:95:e7:b5:18:a0:4d:23:eb:87:c7:
20:00:40:89:f0:ac:0d:62:85:4d:69:f6:53:de:13:
ad:74:e3:46:d9:23:a4:28:f6:5c:f3:d9:20:db:d0:
e3:a4:c7:34:ac:b7:9d:19:04:9f:40:87:d4:b1:6c:
a7:ed:50:5c:1a:b5:55:74:21:8f:1d:b4:e5:ea:46:
e1:e0:28:a3:df:43:8d:ea:ef:3e:09:a3:66:9e:33:
bd:67:22:d4:91:fd:5c:3f:1c:f3:63:0b:1e:91:38:
6d:9a:cf:36:e4:37:e0:0b:bf:c9:4e:63:6f:36:33:
80:8e:cf:09:4f:20:5e:bd:44:64:25:49:59:ba:5a:
77:78:63:fc:0c:e4:0d:50:fc:f4:97:c9:60:ec:b7:
ac:b2:41:86:10:02:84:f3:a5:b6:4a:ab:82:d8:66:
16:dd:ef:92:73:13:1b:65:b2:3e:38:79:8a:29:45:
aa:91:6f:09:ef:2c:97:ad:0f:1b:37:fa:af:8a:10:
34:45:d1:db:fe:32:82:5b:fd:53:f9:a4:0a:f2:21:
0b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8D:23:54:18:EF:41:B1:1F:2C:44:11:13:E8:BC:A6:BB:13:33:87
X509v3 Authority Key Identifier:
keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a9:9b:d4:31:b7:f4:a2:6c:a9:3e:ba:c4:69:5f:cc:d0:55:
f4:22:ec:b4:8a:a9:c8:f2:b7:30:90:18:cb:50:60:4e:a7:3b:
54:71:3c:7e:67:af:9e:80:1c:f8:87:6f:99:3e:f1:0c:ad:41:
b5:57:5a:9c:ec:34:a6:26:16:de:e4:0a:0c:90:92:d4:bb:a9:
54:e3:68:ca:c7:3d:0c:8d:89:58:b6:d4:5e:53:75:17:2e:72:
fc:ab:47:d0:16:73:63:2b:aa:e4:d6:af:a2:c6:53:50:c0:3a:
b3:8d:fb:ab:d1:da:b3:36:29:36:83:df:70:74:a8:ad:08:72:
c1:7e:75:59:52:aa:cb:62:a5:e2:51:c6:ae:cc:59:8e:bc:2d:
af:88:3b:a4:00:68:9a:30:aa:f3:ef:72:15:69:91:39:32:05:
0f:d3:12:35:eb:1a:ea:2a:58:6f:4f:66:88:51:fc:00:f1:9a:
c4:c7:7c:34:d1:e4:ff:0f:6a:bf:36:5d:55:51:46:ec:13:fd:
9e:6f:21:4b:47:2b:02:53:58:bb:50:a1:70:19:10:75:7e:43:
24:9e:79:5c:3a:47:91:fc:55:11:1a:27:6c:5c:3e:bb:98:d4:
87:c5:ca:1e:47:7e:ff:f0:b0:a1:89:02:0d:c1:77:02:61:80:
37:bb:b5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:35 2025 by rpki-client