Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
File: VNb_E0vWVvDOFNQQsCvsVR62miw.mft (raw, json)
Hash identifier: Xj0X6kzBfaPB/aSELm6gtI/9XqI4tozdW7AChBat7gE=
Subject key identifier: 8A:AE:09:C2:4E:F9:5E:2E:49:FB:F1:06:EC:FF:77:E2:63:38:31:1C
Authority key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
Certificate issuer: /CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Certificate serial: 0199FB7CDB60B3567805EF942E72869CA83D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
Manifest number: 1310
Signing time: Sun 19 Oct 2025 08:01:27 +0000
Manifest this update: Sun 19 Oct 2025 08:01:27 +0000
Manifest next update: Mon 20 Oct 2025 08:01:27 +0000
Files and hashes: 1: L_f_G_DAS-PndMSomCegEakGUXo.roa (hash: MKZgnF0UjBLWLCCPlTkl22mDtPBHewVcfvCoOfEvyCg=)
2: VNb_E0vWVvDOFNQQsCvsVR62miw.crl (hash: kZNsGxoX7LYMil3iZP+Q8sHh+gFmLBmnmVZCNU2pGn8=)
3: t4fAOG9AgiRHWlfB8UV9ooeeONs.roa (hash: w4jU0T+F9ztiRct/8n0JoEkH/SfGukns0aANZIKuY2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:db:60:b3:56:78:05:ef:94:2e:72:86:9c:a8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Validity
Not Before: Oct 19 08:01:27 2025 GMT
Not After : Oct 20 08:01:27 2025 GMT
Subject: CN=8aae09c24ef95e2e49fbf106ecff77e26338311c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ec:f0:81:e5:1a:f7:16:53:2b:9a:f6:70:aa:
d1:76:c5:dc:37:a8:5d:97:49:34:6a:da:6a:07:d9:
49:88:e7:ff:94:29:a9:a3:0a:18:8b:27:87:37:ba:
b2:71:14:fb:2c:ca:7f:5b:90:bb:bb:f5:e9:52:71:
3d:be:07:d2:71:35:67:4d:d7:98:fb:42:d2:ab:b4:
4d:05:a7:7e:7b:6b:85:99:28:78:35:a7:d5:08:89:
82:3f:15:80:ae:89:db:86:ad:20:83:06:be:04:0d:
fa:09:12:da:1d:4d:7e:8f:18:8d:29:b3:f4:ac:63:
19:ce:31:4f:29:f6:6d:c9:24:83:06:4d:61:7c:f9:
65:f5:84:28:e1:fa:d9:9b:4d:74:62:ec:fb:4d:59:
1c:ee:0e:2b:1a:04:bf:65:f4:9b:af:58:9d:eb:c5:
ca:e4:26:3f:55:e1:4d:3e:08:9c:14:2d:e4:22:46:
8e:86:58:92:57:bf:ee:31:bc:70:b9:20:2b:71:d3:
10:4d:dd:fd:ea:66:18:5d:fe:ed:37:c5:41:f6:8c:
cc:2f:22:f3:ef:58:f5:95:e4:a0:89:2a:50:a7:47:
9d:51:84:eb:b6:49:07:93:15:99:42:3b:09:d8:f4:
90:39:65:79:e4:54:b5:1d:52:0d:26:79:05:f1:a7:
2a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AE:09:C2:4E:F9:5E:2E:49:FB:F1:06:EC:FF:77:E2:63:38:31:1C
X509v3 Authority Key Identifier:
keyid:54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:37:3a:95:a3:bf:e4:5e:80:94:f2:d5:c7:45:47:f8:e2:2c:
08:13:6e:e4:c0:3b:e5:e9:36:e1:8d:62:f2:49:0e:31:ad:a1:
eb:b5:21:4f:41:2c:d3:af:04:ba:a7:b4:b6:02:52:d8:67:cf:
fc:b3:00:07:03:5a:33:12:cd:74:75:ff:8d:3a:8c:b3:10:81:
e6:31:08:bc:4b:ad:b3:69:f2:71:f2:7e:00:83:77:79:d3:03:
cc:17:54:47:d9:f0:76:ed:87:40:b9:06:60:77:77:6b:8f:a9:
87:44:03:aa:50:4f:9f:2e:b3:f4:9d:ce:a5:45:65:98:36:bb:
58:b7:97:93:34:ac:73:82:f9:90:38:39:29:91:17:2f:92:39:
97:47:98:d3:aa:73:fc:f4:88:df:8e:2e:a0:16:77:a7:2a:b7:
97:a3:bc:80:fe:92:fc:22:b5:ad:77:8e:31:13:77:aa:b0:22:
7f:89:9f:7c:21:03:4e:43:ca:22:2a:5d:2a:aa:3d:a1:1c:e8:
85:45:f2:a4:88:eb:58:66:00:74:1d:16:58:03:59:bf:32:3b:
54:6f:cc:9b:40:9d:68:9e:b1:ef:2c:25:d2:b8:e1:f0:06:42:
00:69:33:06:13:4b:1f:ef:b8:83:86:c3:40:96:e9:d2:da:db:
36:96:06:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:57 2025 by rpki-client