Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
File: VFmECNI871JWD36q1OHbDIYgYsM.mft (raw, json)
Hash identifier: 9HxwHDqOsII8CkUPUpSkDBM3nf+SoDbsc78Ie4sZ1Pk=
Subject key identifier: EF:63:2A:97:2D:12:7F:12:50:DC:6B:45:74:AE:59:32:17:3A:5E:53
Authority key identifier: 54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
Certificate issuer: /CN=54598408d23cef52560f7eaad4e1db0c862062c3
Certificate serial: 0199FF22F38A4F1F4E90E6C8B0F314DE18C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 01:01:44 +0000
Manifest this update: Mon 20 Oct 2025 01:01:44 +0000
Manifest next update: Tue 21 Oct 2025 01:01:44 +0000
Files and hashes: 1: 9dTJ-nYACxpnRY5rhOVsQaAIp6o.roa (hash: IImECG5Z8yt26nxcW9N1eIdxFCugxBSzO203A94ADp0=)
2: VFmECNI871JWD36q1OHbDIYgYsM.crl (hash: bWhM9Om+HgGkNy6CWCSNffZ/tGlIOTW3qI1ZhcHzGQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:f3:8a:4f:1f:4e:90:e6:c8:b0:f3:14:de:18:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54598408d23cef52560f7eaad4e1db0c862062c3
Validity
Not Before: Oct 20 01:01:44 2025 GMT
Not After : Oct 21 01:01:44 2025 GMT
Subject: CN=ef632a972d127f1250dc6b4574ae5932173a5e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:05:c4:ac:f4:92:de:de:4d:f7:b5:7c:1a:
be:f1:f1:2b:7a:2c:8e:ac:7b:f1:94:57:54:7a:fc:
b9:bf:3f:e3:4f:d3:b0:dd:24:cf:09:2b:90:24:c5:
00:16:b7:c1:45:11:13:44:46:cd:58:9a:1a:c5:f2:
cd:ea:7a:11:fc:ae:fa:02:36:ce:c3:67:ea:34:d2:
2b:4f:b1:94:b3:2d:23:b3:61:5b:61:0d:c7:d5:ac:
41:11:fe:34:11:70:43:08:f9:d4:67:3b:04:52:39:
7a:4f:5b:0f:15:41:c5:91:fe:3c:82:2a:36:49:ce:
32:bd:e4:64:c8:a8:0e:58:b5:88:0f:34:af:ea:b0:
9a:77:83:49:f0:1b:30:58:a3:12:23:c3:91:a6:59:
f7:69:9f:bd:5c:e6:6b:ea:17:17:b9:63:14:34:8f:
bc:2f:78:46:31:e5:e7:cd:28:1b:7b:e5:ba:99:29:
12:3e:22:24:4c:bb:d9:14:20:1e:e7:cd:4b:29:58:
31:65:e7:d3:6c:d6:25:9b:2a:2e:61:8c:67:8d:88:
97:54:0d:48:d4:a0:a5:72:c9:83:86:46:be:24:74:
8b:cb:60:db:2c:32:de:c7:1f:a6:59:a3:e3:73:64:
b4:7b:81:26:27:f0:98:9e:26:28:6d:ef:e9:a1:cb:
5f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:63:2A:97:2D:12:7F:12:50:DC:6B:45:74:AE:59:32:17:3A:5E:53
X509v3 Authority Key Identifier:
keyid:54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f8:75:47:8e:19:f6:9c:69:48:dc:01:82:1a:d5:3d:f8:97:
3c:44:2c:b8:a5:68:f7:fb:da:02:39:d0:97:02:ca:04:5e:a1:
50:8a:e1:d7:d9:c8:19:f9:f1:b1:8d:0e:68:76:b8:04:2b:4f:
1e:ac:db:48:8e:3e:a2:c4:d7:bb:9f:20:ea:70:68:f5:aa:db:
92:d4:74:29:2d:a4:35:cf:00:bd:8f:6e:f9:be:9f:cf:91:28:
66:7f:8b:7c:9c:96:64:ed:65:44:ef:ad:a9:9e:75:34:a8:b7:
d5:de:a6:8c:5e:6d:d9:65:a8:fc:d6:e9:4b:fd:de:f0:96:24:
20:04:3b:74:6c:d7:93:7f:08:18:69:3a:74:c6:4f:84:e0:d2:
28:eb:df:88:6b:bb:34:6b:18:b1:c9:b2:b8:df:18:eb:21:bd:
da:ba:7b:d4:83:c0:40:dd:aa:9c:6c:c5:a5:2e:30:8a:b7:ad:
01:43:a8:c0:a0:48:05:1a:92:88:4a:4f:99:dd:66:f8:34:5a:
02:65:1f:e5:ce:24:a4:13:1d:2b:4f:7d:6d:cd:fa:37:e3:16:
00:93:35:5d:05:d6:5d:f9:75:c2:e2:0d:ad:77:86:49:58:10:
8b:20:db:01:39:f4:53:95:35:b6:c3:cf:11:90:fd:d6:b5:e5:
e0:0a:b8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:40 2025 by rpki-client