Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
File: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft (raw, json)
Hash identifier: OZqyKXeccItjXAntznQwbzyx2zAxo0wPXWVDYjQAVqk=
Subject key identifier: 3F:54:0E:61:74:70:90:78:3B:03:B5:3D:37:C5:F8:78:00:8F:9F:2C
Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
Certificate issuer: /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Certificate serial: 0199FC5913E2767A75BE6B3DBE8465B63A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
Manifest number: 0A30
Signing time: Sun 19 Oct 2025 12:02:00 +0000
Manifest this update: Sun 19 Oct 2025 12:02:00 +0000
Manifest next update: Mon 20 Oct 2025 12:02:00 +0000
Files and hashes: 1: 7nuD8elhlIUxcTnbEPvLA6ZLn5I.roa (hash: 90o2vgvA2ZcVDu1EqRM6Q9Z2wROKMEItuuXmbaFjrpw=)
2: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl (hash: RNmzUAZMV63ufVIl5uQc1N6s4AT1um216Ff0NrjmAvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:13:e2:76:7a:75:be:6b:3d:be:84:65:b6:3a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Validity
Not Before: Oct 19 12:02:00 2025 GMT
Not After : Oct 20 12:02:00 2025 GMT
Subject: CN=3f540e61747090783b03b53d37c5f878008f9f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:8f:41:6c:18:b6:54:c1:42:3d:50:6a:5e:
73:8f:69:96:05:fa:c2:4b:de:d1:fc:48:cf:33:b2:
50:a1:e9:d4:51:e8:97:c9:ee:9f:9d:a9:9c:00:8f:
29:f9:9c:00:5e:70:21:cc:d9:ac:92:79:c6:07:bb:
fe:a6:d8:10:4b:7e:ba:72:52:c5:83:d2:40:75:b5:
ce:99:c8:8f:c3:ce:bd:ef:91:55:11:95:c8:ef:49:
e9:ae:ec:b3:ac:47:1c:9d:0b:46:0c:20:c6:88:13:
26:bc:a6:12:6b:d4:e9:0e:f6:61:72:c8:bf:fd:d6:
81:f6:f6:76:a3:eb:de:5e:bb:20:0b:9b:3a:80:e5:
ac:cc:e7:0b:bb:a5:7b:3e:cb:aa:3d:77:05:ef:3d:
a8:b0:f4:f0:e7:e1:35:e8:66:af:b6:1c:e3:f5:25:
fd:d8:c8:f2:30:3d:07:1e:a8:ef:a6:37:9d:2b:31:
dd:ec:df:ff:c8:8d:f8:1d:b6:a8:6d:8e:54:24:53:
22:48:b2:8f:1a:ea:da:5d:8c:1d:b2:06:6f:4a:d7:
7e:26:44:0d:a5:2b:8b:d3:70:fe:6c:7e:6a:8a:1b:
76:62:bb:ba:94:47:2c:a7:cb:96:25:6e:fd:08:73:
0a:01:6e:2d:82:93:8a:0c:51:85:eb:21:f7:5c:ed:
d9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:54:0E:61:74:70:90:78:3B:03:B5:3D:37:C5:F8:78:00:8F:9F:2C
X509v3 Authority Key Identifier:
keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f7:4a:ef:6f:e0:71:a9:8d:e0:fc:13:35:cf:33:2f:02:f2:
76:72:42:90:e7:d4:31:fc:2a:f9:9f:36:a0:57:21:d5:53:6c:
e2:c6:f5:c9:a9:29:30:df:fc:e1:5d:7d:6d:b9:91:1b:6f:53:
a2:9c:b0:c2:5a:fa:66:ed:a1:1a:15:cd:ff:5c:b3:de:e0:1b:
db:be:c9:d7:43:a6:ab:67:dc:c1:24:2b:22:b3:be:ba:1e:0b:
cb:5c:55:1a:4b:17:f8:45:5f:49:8b:7d:c0:9c:d1:ac:82:f3:
bc:1a:5a:5e:1a:12:4f:8b:ca:eb:d8:2d:cf:ed:70:ad:29:26:
f0:51:96:76:73:71:25:84:11:b7:63:d7:73:cd:67:36:86:f1:
7b:21:55:c1:36:6b:2f:2b:23:ec:38:f1:87:e5:da:d9:45:d8:
3c:67:dc:69:1c:6d:a7:60:ea:a1:b0:12:9e:21:de:29:0d:85:
53:bf:d9:e8:0c:fb:d2:4d:34:99:6c:42:64:d6:33:2a:5f:6e:
54:15:99:93:ae:78:04:00:74:fb:12:9f:db:bd:78:f0:d3:56:
32:96:70:82:4b:ca:cb:48:9a:56:46:4f:c7:b4:0a:8d:1b:36:
ab:fc:ed:b3:9b:d0:4e:ee:68:c0:9a:3f:39:74:45:ac:04:2f:
a6:8f:6b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:31 2025 by rpki-client