Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
File: VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft (raw, json)
Hash identifier: 35OvazBACz8myOh+NED3zZEx3ASOhayrJS3VRecZEy8=
Subject key identifier: 49:83:33:3F:39:24:04:8A:51:57:F8:F4:6C:CD:4B:83:B1:38:B3:70
Authority key identifier: 54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28
Certificate issuer: /CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
Certificate serial: 019A28F9C6A53432F844BB5F4F4235282C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 04:00:49 +0000
Manifest this update: Tue 28 Oct 2025 04:00:49 +0000
Manifest next update: Wed 29 Oct 2025 04:00:49 +0000
Files and hashes: 1: VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl (hash: 23B+5gHWtPHb5HPDVvEnjKcOApLpNXuo93Hg9bB5Gjc=)
2: aWGxAsqgYjjK0Ar3qgVNzPKw3zE.roa (hash: C8bnjj1ZSm0KY896M7YNbmPkIyPwlV7i43xeXVYRQA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:f9:c6:a5:34:32:f8:44:bb:5f:4f:42:35:28:2c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
Validity
Not Before: Oct 28 04:00:49 2025 GMT
Not After : Oct 29 04:00:49 2025 GMT
Subject: CN=4983333f3924048a5157f8f46ccd4b83b138b370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3e:78:1b:32:ad:3b:f7:c7:7a:ea:09:fc:ba:
e8:f5:2b:f7:01:1c:f5:85:58:0c:01:aa:33:66:96:
66:7f:af:9b:30:a8:49:19:99:0f:5e:c7:ed:34:4e:
21:a9:51:6b:3b:a4:35:ed:20:15:11:8c:6d:f8:2a:
ba:e6:74:2e:d0:8d:43:2a:3f:ad:9b:63:85:e6:7b:
24:f9:54:4a:7d:9e:05:8b:fe:a2:a7:f9:0e:9b:3a:
d5:5d:63:17:07:23:ab:71:1e:a2:d9:cf:ce:7c:74:
06:91:b3:52:0b:79:bc:01:1e:16:56:40:76:85:3c:
14:a2:d6:ca:0e:1c:0e:08:e3:7d:ea:d1:80:e0:32:
d7:6d:63:31:c0:aa:e3:44:98:fc:75:5c:a0:b5:b5:
a0:d9:26:80:0b:31:2d:a1:3a:07:ba:8e:89:79:97:
81:70:67:cc:b5:89:11:00:a2:26:68:da:56:b3:6a:
f3:74:14:9b:c4:4d:f2:f3:04:1c:85:4f:a6:9a:1b:
65:37:cf:3b:58:5d:41:1e:d1:50:b9:bb:40:5f:89:
03:39:04:c3:aa:f4:af:f9:20:1f:fe:73:d7:e1:4e:
fc:a0:f9:97:eb:01:cf:6b:6a:bc:f9:55:0b:84:55:
ce:26:f8:03:8d:f8:b8:cb:0c:3a:5e:2b:87:05:99:
64:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:83:33:3F:39:24:04:8A:51:57:F8:F4:6C:CD:4B:83:B1:38:B3:70
X509v3 Authority Key Identifier:
keyid:54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:54:9c:af:de:e6:5e:b0:a9:99:49:fa:2e:bc:fd:a0:be:da:
2b:6f:6a:c1:c0:94:da:d5:22:01:3e:e9:cd:b6:05:23:c9:b5:
9d:bb:46:95:57:7a:c0:fc:8b:25:f9:80:fa:91:02:72:c8:a6:
a8:0a:8e:19:05:ef:78:3b:47:54:b9:2d:b7:88:97:a6:30:0e:
d3:78:c5:04:d0:7b:fe:59:af:d5:98:f8:a8:eb:e2:44:f8:67:
fe:d1:e2:c0:56:af:85:f0:56:eb:97:01:fa:ed:73:0b:aa:8c:
6a:14:50:a8:c9:56:1e:ca:22:39:cf:c1:eb:04:d6:8b:bd:74:
f6:7e:03:e2:cf:08:ca:0a:c8:32:6c:4d:86:7c:9d:40:1f:69:
80:24:18:ba:02:45:c0:55:ba:b0:00:e7:ed:75:f6:f3:3b:4d:
95:49:9e:5b:b8:93:9a:5a:77:c8:f7:2f:cb:c0:b4:00:a1:63:
7f:c0:b9:43:ce:b1:a1:dc:4a:2d:74:71:20:89:91:41:15:09:
83:b6:5c:01:56:d4:d4:0d:1d:e5:36:b1:16:d2:d0:aa:a1:b2:
28:cf:17:fd:1a:7b:59:40:e7:2f:4e:57:1b:09:15:d4:7c:6b:
fa:76:0b:68:63:5a:23:bb:f6:07:e0:c2:96:7a:f6:37:10:ce:
26:e8:18:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:44:59 2025 by rpki-client