Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
File: VEbfB_88sm389O64dh-wFsr3-e4.mft (raw, json)
Hash identifier: BZAnFpWha/La78whW/wPiV8a02GKwT5hpghJ36wy66E=
Subject key identifier: 54:F0:BA:B9:DA:ED:94:5E:EF:A3:87:CD:04:3D:F2:E7:0C:00:B4:4B
Authority key identifier: 54:46:DF:07:FF:3C:B2:6D:FC:F4:EE:B8:76:1F:B0:16:CA:F7:F9:EE
Certificate issuer: /CN=5446df07ff3cb26dfcf4eeb8761fb016caf7f9ee
Certificate serial: 0199FC8F9538F678E9B6851B9EDC022A0B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
Manifest number: D5
Signing time: Sun 19 Oct 2025 13:01:32 +0000
Manifest this update: Sun 19 Oct 2025 13:01:32 +0000
Manifest next update: Mon 20 Oct 2025 13:01:32 +0000
Files and hashes: 1: Mt4ySnJ9tLnzzQYq2U6tfp3Q3JA.roa (hash: Czeue2iwQkgf4dbWmDFWclQeOMsHJV7V0inLeSwakN8=)
2: VEbfB_88sm389O64dh-wFsr3-e4.crl (hash: z41Nq+/hu7QKcjArKAKW9+bkStGfhPgrVp69k12GRNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:95:38:f6:78:e9:b6:85:1b:9e:dc:02:2a:0b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5446df07ff3cb26dfcf4eeb8761fb016caf7f9ee
Validity
Not Before: Oct 19 13:01:32 2025 GMT
Not After : Oct 20 13:01:32 2025 GMT
Subject: CN=54f0bab9daed945eefa387cd043df2e70c00b44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d7:c5:7f:6e:1f:b0:4f:c2:ff:4f:3a:f8:3f:
1a:6d:8b:7a:3d:aa:12:45:e1:2d:40:61:8a:df:ed:
fd:6a:5f:b0:22:99:41:62:77:35:94:01:7f:31:75:
9e:be:e1:32:27:a8:28:67:f1:62:75:1d:e4:76:bc:
57:72:7a:5f:d7:ed:81:b2:54:9c:1d:67:0a:29:10:
26:de:04:03:5c:f2:a2:27:4b:13:e4:0e:c5:b0:85:
58:33:d9:77:5c:ba:c0:54:87:3e:72:fe:cb:63:6f:
02:31:7e:1b:7a:d1:ef:26:3c:13:63:ad:8c:e1:7a:
03:f8:61:f1:79:14:cb:95:d1:ab:33:5c:59:2d:79:
87:2b:89:c5:94:af:ee:ba:18:c1:17:8a:2f:7f:36:
be:46:62:50:94:d0:e2:33:65:44:63:02:90:a8:09:
ed:60:9e:1e:a4:02:f1:9e:05:1a:39:4f:04:f0:21:
e3:3f:47:fd:91:17:ec:bf:f4:fd:52:e6:e9:a6:85:
ea:45:5d:c3:86:63:d5:6e:70:51:80:50:52:8c:4a:
4b:60:ee:fe:4f:b3:33:6e:1b:34:99:82:d7:ca:ed:
03:ca:42:dd:fe:34:1d:de:2c:04:e2:d2:87:70:3a:
e0:74:0f:6c:0b:d7:21:02:56:fb:7d:7d:04:1b:f8:
84:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F0:BA:B9:DA:ED:94:5E:EF:A3:87:CD:04:3D:F2:E7:0C:00:B4:4B
X509v3 Authority Key Identifier:
keyid:54:46:DF:07:FF:3C:B2:6D:FC:F4:EE:B8:76:1F:B0:16:CA:F7:F9:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:52:e2:2c:f5:5a:a0:36:10:f9:99:b1:f8:81:0e:ae:6c:68:
19:8f:e1:98:da:67:f1:fb:dd:93:14:d2:5d:73:56:d3:49:8b:
bd:76:18:22:b3:cc:04:50:8b:63:e2:14:29:f7:66:55:d9:cf:
db:65:ef:ce:22:f0:a3:d4:ad:12:7c:ec:c2:97:74:b0:f2:a3:
ba:2b:0a:73:27:03:45:c9:4d:40:7b:a3:df:ff:bd:55:03:e9:
37:87:22:06:09:5e:d7:a5:be:da:71:f6:d8:91:e4:d8:e7:61:
6b:12:ce:72:f1:39:21:46:24:24:66:4e:34:21:4a:e5:97:26:
a3:89:23:3c:fe:87:04:e0:af:df:53:6c:5d:41:ea:90:c6:40:
3a:a6:6f:7a:5b:95:c3:01:a4:e3:e8:f4:be:09:05:67:10:ff:
58:ee:aa:0e:43:b1:13:a7:bf:e6:18:31:7d:38:59:b8:14:c4:
14:d1:6d:d9:43:73:98:b2:2c:e4:05:75:8d:b7:62:e3:75:29:
a4:d0:8a:f9:b7:ec:55:fc:26:59:19:9c:fb:61:28:f9:47:0f:
e7:31:ab:38:30:6c:0a:cb:d2:11:60:d0:32:a7:1f:0c:fd:e0:
d7:d7:d9:0a:b0:cb:73:ea:a4:dc:1a:14:ad:b8:05:0d:90:30:
98:6e:5e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:51 2025 by rpki-client