Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
File: VtZBSGvcmNSn3gkopC19aOYBXzA.mft (raw, json)
Hash identifier: 7Gm/LtWs4WBYITmWz77Kah4LCMcg6Mi0vRaZZS9UsFg=
Subject key identifier: C0:1B:3F:0A:BD:49:2D:83:71:04:E2:0D:69:54:12:AA:2D:E8:DF:F7
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Certificate issuer: /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial: 0199FC59004E0FB25745AB0D8208AE79DE4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
Manifest number: 0428
Signing time: Sun 19 Oct 2025 12:01:55 +0000
Manifest this update: Sun 19 Oct 2025 12:01:55 +0000
Manifest next update: Mon 20 Oct 2025 12:01:55 +0000
Files and hashes: 1: VtZBSGvcmNSn3gkopC19aOYBXzA.crl (hash: m1OuQ5KPQJFnc1JbsnyAvygUImUvHLKzn4PS263NMWw=)
2: WEO8NtVjuokm03trjbiruG9nGXs.roa (hash: yTC3Oqfw9NROJnWxfHcYDNS4j2G/zzxfsRY9HvWscDc=)
3: WUha7UrsdgndZN2i8LKGRI6xHz0.roa (hash: kPsS0TLTx3ZvH9JmthAMYgEGSgO6LHxlTkfSHRuTvZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:00:4e:0f:b2:57:45:ab:0d:82:08:ae:79:de:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Validity
Not Before: Oct 19 12:01:55 2025 GMT
Not After : Oct 20 12:01:55 2025 GMT
Subject: CN=c01b3f0abd492d837104e20d695412aa2de8dff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:cc:4e:74:83:80:33:56:c4:58:55:70:4c:
ae:62:e2:f4:23:f1:83:6e:49:45:b6:e4:f8:e1:d0:
a8:3c:df:14:da:93:a9:12:44:60:15:24:d0:9a:28:
b9:3a:7a:bd:cb:b0:b4:45:68:15:34:44:8b:78:04:
a2:90:1e:12:91:9f:ba:35:b7:45:fb:8c:dc:24:f1:
e5:63:03:ef:e2:0d:f4:58:40:0e:61:97:7b:5a:55:
d0:89:22:5f:82:3f:17:15:c4:fb:4a:0a:33:68:73:
59:63:95:a0:6b:a9:98:35:b3:b3:62:d3:22:b1:b0:
8b:79:57:2e:2c:62:cc:f2:13:bc:93:d8:b9:97:d1:
17:d3:c6:33:a5:36:29:f1:97:99:5a:71:79:8f:cc:
5b:75:e4:44:7d:66:44:a1:ca:a1:e3:b4:39:9f:a1:
e1:4f:8c:d0:8a:39:cb:ca:f4:bb:40:91:9d:63:4c:
53:93:c8:3c:52:32:65:fd:02:91:59:3d:c2:6e:ba:
4d:81:37:5d:ea:9a:2b:40:d6:03:9b:d3:a1:b3:d2:
97:af:2c:df:ff:c1:2c:e5:e3:8b:f7:49:9b:57:ec:
95:c8:34:22:c6:80:6c:21:f8:f4:38:c9:76:45:e5:
a4:ef:e8:9a:82:46:34:d2:b0:bd:14:83:0c:b5:87:
fc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1B:3F:0A:BD:49:2D:83:71:04:E2:0D:69:54:12:AA:2D:E8:DF:F7
X509v3 Authority Key Identifier:
keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:4e:f6:6f:a8:10:c8:4b:04:ed:8a:84:a3:a0:00:96:58:36:
b2:fe:ba:25:4b:7d:80:31:43:eb:54:91:20:b7:65:c7:4d:a2:
97:38:8e:80:04:8a:8b:cf:66:e5:ca:9e:56:e3:b9:93:14:95:
8b:60:ab:0a:79:c1:f7:ed:84:19:71:c1:45:af:a4:28:b6:94:
08:61:80:df:f9:2c:c8:c8:c6:76:d6:84:94:aa:1d:1d:91:54:
6c:8d:82:f0:39:cb:41:1b:b2:59:25:d6:8a:ee:1d:34:40:1d:
82:d5:68:08:71:9b:5a:c0:20:12:46:30:eb:c1:52:a6:54:2a:
34:d1:b0:cc:ea:4b:c6:bf:ed:93:8a:cd:f4:89:e8:12:69:d5:
a5:3a:c5:f7:80:e8:9f:12:6e:29:49:dc:e5:5d:b9:bc:52:8b:
02:48:4a:19:f6:7a:7f:d3:42:dd:d9:2c:e3:4b:9b:39:f3:cb:
b2:45:cf:af:8d:39:a5:c5:3b:94:03:7b:47:61:d2:90:50:a1:
7d:d4:9e:59:2b:b3:ae:4e:e8:45:7f:d0:2e:15:72:a4:6d:2c:
35:52:9a:11:8c:78:9c:c1:90:75:8a:13:d7:54:f3:d0:37:9a:
79:48:ca:8d:68:ff:07:b3:f2:09:d6:99:87:7b:43:a1:2e:90:
e3:bf:64:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:31 2025 by rpki-client