
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
File: VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft (raw, json)
Hash identifier: 5LIwv/4NdOZCJNKVvRFXmQ3mhQIuEqwYZHzfQL/MHA0=
Subject key identifier: 7C:DF:E6:3C:2D:39:7B:10:74:75:25:4D:85:DE:5A:B1:49:9F:97:BD
Authority key identifier: 56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
Certificate issuer: /CN=567190854786a16afa6b0ec78dfb0620abaacfef
Certificate serial: 019A2108F1B34E34B797AA93AB41612DDB28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
Manifest number: 16FB
Signing time: Sun 26 Oct 2025 15:00:25 +0000
Manifest this update: Sun 26 Oct 2025 15:00:25 +0000
Manifest next update: Mon 27 Oct 2025 15:00:25 +0000
Files and hashes: 1: GQ1DSO1of_qyrqxkPQTC0ENKnfg.roa (hash: nTd0zjLE6XtOMPZyttCDWktzUnkCfLfuxFOPmZBOHEs=)
2: VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl (hash: WeRGjumDc7puFEfzBdtph2ERO4vCPsnKsLnqjPplMpM=)
3: qdba9XlB-cPjFIeLPK89fH4z7YE.roa (hash: 1JK31mC2SxxDKOuDPCP+7Ar2oTz/PPCsc7D4ztv27uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:08:f1:b3:4e:34:b7:97:aa:93:ab:41:61:2d:db:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567190854786a16afa6b0ec78dfb0620abaacfef
Validity
Not Before: Oct 26 15:00:25 2025 GMT
Not After : Oct 27 15:00:25 2025 GMT
Subject: CN=7cdfe63c2d397b107475254d85de5ab1499f97bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:8c:dc:ed:da:3c:0f:dc:fe:08:26:de:91:
0d:0f:14:ff:96:5f:f7:ca:67:dc:51:39:bb:7d:8c:
e2:c9:47:4d:c5:ec:3f:29:f9:30:eb:ab:59:39:d4:
11:ee:5a:3e:0b:21:9e:9b:2a:3a:e1:28:b0:41:a6:
db:60:da:f6:4d:71:81:ba:65:79:6c:01:c3:58:ff:
9b:86:2a:42:0a:43:18:a5:17:a6:f7:4e:a7:b6:ed:
38:7b:91:86:1d:fe:6e:9c:bf:ba:95:be:50:9a:71:
62:bc:c7:08:03:3c:dc:24:80:bc:96:b6:48:48:99:
31:ff:81:ff:ab:64:ef:8b:fc:2d:da:30:30:41:6e:
fb:7c:95:4a:66:93:da:4e:56:05:67:25:83:3b:3b:
6b:f5:54:0f:be:13:7b:91:f1:19:bb:e1:07:5a:fe:
07:ea:81:36:c4:6e:b6:4d:e7:6b:f1:f7:d3:5c:02:
6f:85:b8:84:42:a3:5f:76:c4:d2:42:6b:7d:ac:d5:
ba:65:00:e7:96:74:6e:2f:9c:84:83:82:68:73:43:
11:41:b5:b6:03:d5:66:cd:fa:d5:ab:ab:65:50:9c:
22:57:65:1f:d9:da:38:b7:03:c7:48:31:b3:da:44:
1d:21:cd:b2:36:e8:86:7f:f9:40:ba:90:80:79:37:
5b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DF:E6:3C:2D:39:7B:10:74:75:25:4D:85:DE:5A:B1:49:9F:97:BD
X509v3 Authority Key Identifier:
keyid:56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a3:32:3a:c7:70:ab:21:50:e1:2a:7a:ff:4d:66:39:ff:55:
75:5d:41:07:98:38:cb:1e:2f:47:ac:5d:bc:64:6a:07:5d:5f:
fb:9a:bc:53:52:63:ba:34:65:8e:21:08:59:36:af:44:d6:f0:
f4:40:c2:92:d6:84:90:7b:8c:47:ce:5c:18:e4:c8:e5:61:ff:
d0:94:30:35:71:d7:ad:45:4c:4b:ab:f5:36:e1:0c:da:3b:07:
04:df:79:4a:ba:56:3f:9d:7d:07:03:d6:41:bc:1a:e3:2e:b3:
de:5b:bc:78:89:39:03:a7:79:50:da:49:de:c3:b5:f2:14:f0:
d0:08:8e:9a:f2:bf:75:04:ba:37:46:19:b3:92:d7:63:30:33:
9f:8e:b5:b6:d7:2c:91:94:c9:a2:91:c4:5a:be:6f:e4:06:45:
69:9b:a5:c1:be:ed:6f:27:c5:80:a5:41:9f:0f:ec:7c:98:ba:
53:ac:f2:04:06:74:f6:9e:7e:47:62:0b:c4:d8:7a:bf:c2:1c:
60:87:39:5c:8d:2e:67:a7:b3:ba:7e:1b:95:94:a0:2b:45:ff:
b6:e0:95:82:28:04:99:11:67:9c:fb:6c:0f:59:6a:74:44:99:
23:57:fa:b9:eb:36:07:86:b8:22:5d:fb:3c:24:fe:ec:86:63:
f4:ba:10:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:49:35 2025 by rpki-client