Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
File: VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft (raw, json)
Hash identifier: ZkVvlQljtbvt8ZCs/gNZIpRBUBOxMqLk1dNXyJ7HEEY=
Subject key identifier: 3E:5F:99:33:22:3E:5F:AC:31:AA:5D:31:70:F2:37:4D:D9:C3:3D:26
Authority key identifier: 54:F9:D5:81:9D:44:0A:DC:EC:DA:1E:EE:B7:C9:8A:E9:9C:4D:07:07
Certificate issuer: /CN=54f9d5819d440adcecda1eeeb7c98ae99c4d0707
Certificate serial: 0199FB7CFFE4043DAF628B3DCBA3F1E04020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
Manifest number: 01DF
Signing time: Sun 19 Oct 2025 08:01:37 +0000
Manifest this update: Sun 19 Oct 2025 08:01:37 +0000
Manifest next update: Mon 20 Oct 2025 08:01:37 +0000
Files and hashes: 1: Bvl-Ue7SkDahQi1EYqyGw7UPWAQ.roa (hash: 7s/5EydJ0RA7GfaLPuDbrwS3RicCjtZz+jUH77HvUOc=)
2: VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl (hash: axYt+98JmTR3TwnXnkH79UF2nd5MlzuNCwHxm1lnhJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ff:e4:04:3d:af:62:8b:3d:cb:a3:f1:e0:40:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f9d5819d440adcecda1eeeb7c98ae99c4d0707
Validity
Not Before: Oct 19 08:01:37 2025 GMT
Not After : Oct 20 08:01:37 2025 GMT
Subject: CN=3e5f9933223e5fac31aa5d3170f2374dd9c33d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:62:5e:29:3d:b6:b9:15:c8:2d:20:40:8e:d0:
04:01:08:5f:c6:4b:c4:76:4c:b6:4e:a6:7d:b1:4d:
db:63:ba:3f:95:c9:a1:62:d7:15:da:f6:93:69:69:
25:ae:93:87:b4:c9:a4:ad:5e:3f:5d:fa:fe:3b:36:
66:81:87:ca:a8:2b:34:14:cb:6c:83:27:dd:07:06:
b0:75:9d:c8:43:88:39:7e:6d:25:10:97:c0:05:f0:
1a:35:a9:14:50:31:75:04:68:7c:f7:31:7e:1e:d0:
21:2e:be:23:05:17:ac:36:d7:71:f7:ed:5d:74:0f:
00:3b:a7:33:fe:0b:b5:4e:6f:b2:6f:f9:b4:69:1f:
6b:0d:f0:da:d3:7a:bf:5e:05:06:19:00:4a:82:96:
ed:97:c9:07:4e:26:a6:b4:31:0c:7c:a1:7a:45:0e:
df:97:5b:15:7f:a0:5b:a1:e6:c3:b3:9b:3c:98:d2:
e4:5c:48:00:4d:76:c5:be:d0:4b:1b:4e:a9:3a:01:
b7:b1:7b:98:52:65:48:09:48:14:41:0a:82:2f:77:
89:49:8f:05:23:c1:b5:e1:1c:5a:8c:b2:32:92:3a:
b8:3f:16:b0:c7:d7:a4:77:67:8b:94:f7:fb:6c:07:
fe:91:75:c9:83:71:63:15:94:90:4d:99:fc:7a:33:
0a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5F:99:33:22:3E:5F:AC:31:AA:5D:31:70:F2:37:4D:D9:C3:3D:26
X509v3 Authority Key Identifier:
keyid:54:F9:D5:81:9D:44:0A:DC:EC:DA:1E:EE:B7:C9:8A:E9:9C:4D:07:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:88:aa:3c:fd:8c:a1:c0:fb:43:97:45:47:36:ea:0c:59:cc:
14:7f:86:48:7d:c2:a9:a6:9c:c7:be:62:39:8f:e3:55:60:21:
79:89:34:83:1f:0b:7b:d4:57:a4:05:4f:1c:12:e3:19:f9:4a:
13:86:5f:4c:99:e5:41:88:db:82:58:eb:78:f7:64:ec:46:2f:
d3:c0:90:04:2c:95:bc:4f:4b:32:56:f7:4a:b1:83:de:ac:0e:
da:a9:de:4f:53:5b:be:9a:60:80:c1:4c:87:d6:7e:b7:25:54:
bd:17:5d:56:3f:26:e5:84:34:44:e4:e2:e4:d9:7f:55:69:9b:
bd:8c:b9:bf:64:8a:f9:42:f7:54:7c:ea:4f:a9:49:8d:3b:b1:
84:71:f8:f8:1b:06:05:0a:a5:56:54:9c:d8:58:80:2a:da:82:
aa:8e:d9:39:12:3a:f7:6c:ed:dd:59:61:f5:40:7f:37:b7:98:
26:27:9d:d9:c9:68:27:2a:d5:fd:32:d4:5e:b0:18:1a:f1:67:
70:0c:1b:33:95:a6:bc:50:d3:f6:22:e4:c1:06:22:1e:96:df:
6d:95:a2:a2:9f:cd:68:fb:bb:6d:cb:6f:be:82:e4:02:87:d8:
02:57:49:1b:b9:c2:18:d2:cf:ce:35:a0:bd:84:f7:43:52:9e:
e3:69:0d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:32 2025 by rpki-client