Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
File: vSX3G6QTFIO7m4I92IZR06_UTns.mft (raw, json)
Hash identifier: Nigj7VgzCrdlLxIQ0ToYHrwXbJ6ftU6iExcRdghAPE0=
Subject key identifier: E4:71:95:9E:6D:41:16:EF:B5:73:94:3B:5A:E0:88:6F:F6:1B:EB:19
Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
Certificate issuer: /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Certificate serial: 019A25539B83857E4A9E9D8391E54CFC9D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
Manifest number: 13C9
Signing time: Mon 27 Oct 2025 11:00:27 +0000
Manifest this update: Mon 27 Oct 2025 11:00:27 +0000
Manifest next update: Tue 28 Oct 2025 11:00:27 +0000
Files and hashes: 1: VTzQEre1LOW5un0PlYn-CvmDAKI.roa (hash: fUzpWZIo72ujZLDiYOULGotM+6e+u6e7TR9QhDLmQyE=)
2: uOlfWw_ot1GNz-xDs0HfE8f0GXg.roa (hash: p6HLTz97eUfObx31ZQ7fD3+tg4SDQ5VAA/i07H3/8o4=)
3: vSX3G6QTFIO7m4I92IZR06_UTns.crl (hash: dAawkLNK76OdlHmYUEV2x5ogdSuDN7koyGWVgslF9iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:9b:83:85:7e:4a:9e:9d:83:91:e5:4c:fc:9d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Validity
Not Before: Oct 27 11:00:27 2025 GMT
Not After : Oct 28 11:00:27 2025 GMT
Subject: CN=e471959e6d4116efb573943b5ae0886ff61beb19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:08:7e:2a:f0:ec:33:46:5a:28:50:1b:eb:ec:
c2:88:21:30:45:1d:9b:9d:23:0f:08:d5:2f:25:53:
92:80:87:a0:21:b3:f6:24:7f:68:f0:b4:aa:09:f2:
14:d7:72:73:9e:45:ae:af:24:e3:1d:62:6d:88:d8:
05:62:b8:d5:79:4c:ad:66:22:b1:2f:9e:9a:ea:01:
1c:c3:f3:23:bc:a7:84:ad:f0:1a:85:09:ea:94:0a:
c3:cb:e1:57:eb:28:d0:51:7d:ec:16:e6:9b:21:d0:
c9:21:e8:dd:77:14:d4:aa:23:1f:5f:d2:0d:05:09:
b0:dc:6e:51:c6:30:50:1a:92:97:68:2d:2f:ea:06:
06:9d:0d:7c:26:40:18:bf:ec:84:78:29:fa:2e:05:
71:ea:6f:8d:9f:67:d4:fe:1b:ba:fc:e9:3b:8d:cc:
8e:15:63:95:53:53:76:40:b8:6f:90:a6:0f:00:6d:
6c:2c:1e:3a:6a:ec:f4:b9:d9:ad:f5:90:7f:01:8f:
92:62:b4:7c:1b:ae:5b:ef:b0:f0:10:c1:a6:1d:72:
2b:8c:cf:fa:5c:fd:5a:81:42:f7:4d:ed:fa:37:ec:
b6:2c:48:5a:13:de:b9:66:11:53:df:b2:02:b5:50:
11:df:42:93:48:76:9c:a2:67:87:5b:06:25:63:60:
43:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:71:95:9E:6D:41:16:EF:B5:73:94:3B:5A:E0:88:6F:F6:1B:EB:19
X509v3 Authority Key Identifier:
keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7c:94:12:ea:a6:fb:bb:26:cd:6e:57:07:7c:c0:16:7e:25:
5d:88:d0:4d:c6:ae:98:e8:ed:b0:d0:61:3f:d3:79:8e:07:52:
89:23:c7:87:51:f8:29:63:b0:fa:42:7d:d3:56:59:7d:d1:1c:
2a:7d:70:83:67:9d:b5:60:d8:2e:39:50:aa:7e:87:48:19:65:
2c:14:f6:34:e2:11:01:1a:a3:8e:ef:49:75:76:a9:f2:cd:49:
a3:b8:82:7c:35:cc:0b:98:66:24:17:42:c0:a9:86:9e:21:1f:
d1:25:71:8d:1a:92:6a:78:6d:e2:b9:cc:c2:49:39:38:75:7a:
16:0c:fe:39:77:93:5f:c1:8a:32:54:03:c4:21:f1:e5:0c:ff:
d7:33:4f:10:52:88:bf:9e:3c:f0:4d:c0:9f:2b:ff:a3:3a:29:
a0:2a:c5:37:30:ee:61:8b:00:24:f0:07:d9:2e:cf:c6:0b:f7:
40:c2:a0:da:a7:3a:1d:de:73:ea:52:b1:82:5e:c8:ea:b4:1b:
5b:fb:10:99:8e:98:cb:fa:90:04:25:05:0b:77:49:cd:d9:ce:
f8:fb:3e:95:48:f5:ad:58:4e:4c:09:64:b7:6b:86:f4:3a:b0:
d5:f7:13:18:b4:e7:fe:ad:58:fe:fa:93:13:23:4c:d0:a0:98:
35:9b:b7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:03:06 2025 by rpki-client