Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
File: VEqCql4utxcZt_nwSaMHsSRUSX4.mft (raw, json)
Hash identifier: qTgNHiTM2Wdqny27kDyYTJUahEuKsYImI0FEGuVKWZE=
Subject key identifier: 86:22:E0:AF:2B:9D:D5:18:67:5B:76:0E:6C:D0:7E:93:B6:26:02:8A
Authority key identifier: 54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
Certificate issuer: /CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Certificate serial: 019A1F1AC2A0E5E947E60E51E8FF13916C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
Manifest number: 69
Signing time: Sun 26 Oct 2025 06:00:38 +0000
Manifest this update: Sun 26 Oct 2025 06:00:38 +0000
Manifest next update: Mon 27 Oct 2025 06:00:38 +0000
Files and hashes: 1: JCqxTeNYmXWAOXh-Rw0YbvfX36g.roa (hash: aL/xE87F41Qh1J/sqoGNCKwzyzvrDvIXmyZL2UPLV+M=)
2: VEqCql4utxcZt_nwSaMHsSRUSX4.crl (hash: mRGJAwdW5HwpKBuF8T7eplcC+R6lNT56IxZUE8rMm+8=)
3: nVAfrOdDzx8pv49EiXLUGwJ5LQI.roa (hash: AMH9fSklSlnHiDus6wDeBiFrtEGgvAQAd6DhTgYvYCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:1a:c2:a0:e5:e9:47:e6:0e:51:e8:ff:13:91:6c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Validity
Not Before: Oct 26 06:00:38 2025 GMT
Not After : Oct 27 06:00:38 2025 GMT
Subject: CN=8622e0af2b9dd518675b760e6cd07e93b626028a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:1e:f1:3d:98:94:aa:81:4e:b9:48:9d:ab:
ba:1b:61:cb:11:1a:40:fa:14:62:e1:44:0a:b9:a9:
7e:5c:c2:cb:78:74:10:44:6a:86:20:eb:72:92:11:
7f:63:a8:0a:54:36:bf:65:3a:6b:94:23:76:bb:38:
fc:39:69:7a:3d:91:e9:3b:fe:78:e5:ca:67:c3:b1:
04:b2:e8:d0:ce:11:fc:62:95:fc:17:38:68:19:01:
3b:e1:6f:70:38:1d:85:66:16:a8:ad:a9:5f:a5:38:
2f:b4:3c:c8:80:dd:d5:ad:b2:9f:e2:c5:e6:de:93:
e3:3d:23:0b:1e:10:38:fa:b0:35:5d:0e:a9:1d:f5:
6e:d9:67:96:6c:a9:a4:ba:12:12:fe:07:47:0f:10:
52:46:c3:77:fd:50:40:36:b4:78:91:3d:d2:61:6d:
20:36:5c:0a:30:28:e3:da:0c:3e:5a:3e:44:2b:a0:
49:31:02:98:ec:7d:fe:7d:d9:47:e8:9e:d0:f6:cf:
a1:e2:64:6a:18:c3:98:59:21:74:03:d4:5c:a5:ee:
76:62:37:5d:d8:aa:21:cd:d7:7c:74:20:1b:a5:af:
19:f1:a8:12:d3:04:94:4c:27:73:5f:29:d0:d8:2a:
f4:51:cb:98:d6:c8:d7:60:a1:51:c1:14:da:6b:de:
54:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:22:E0:AF:2B:9D:D5:18:67:5B:76:0E:6C:D0:7E:93:B6:26:02:8A
X509v3 Authority Key Identifier:
keyid:54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:79:cd:21:fd:bd:d4:2b:9d:f9:1d:7b:7a:c5:01:9c:96:d4:
29:cd:98:fa:7c:79:48:a2:92:76:e7:5c:95:12:21:99:c3:8b:
41:6a:d9:c2:88:48:9b:e5:82:0c:8b:be:c1:6a:50:c8:a4:0f:
45:e1:00:97:22:78:d9:c8:7a:18:04:c1:ae:30:4e:ef:2d:b4:
35:a9:e9:3a:42:d6:10:d9:64:b3:0c:d1:99:66:fd:49:5c:3d:
1c:ea:06:10:af:14:16:2c:96:f9:05:c4:60:63:43:00:47:00:
6e:00:57:01:89:08:c7:b3:ff:e5:55:47:4f:4a:c0:ff:2e:18:
69:58:14:0d:ba:10:7e:4c:2a:b9:e2:31:0e:5d:ec:45:e5:aa:
e9:7d:b6:65:16:6c:8f:3e:89:90:b5:08:70:06:56:90:1c:f9:
21:05:bb:89:a0:53:6d:22:1a:32:d9:a6:33:1c:f4:90:87:dc:
45:9b:1f:45:ab:03:cf:bb:79:74:db:e8:97:9b:eb:2f:bb:71:
9a:08:15:af:38:11:b9:7a:99:3c:08:a1:e4:75:da:3f:9b:ba:
e5:a6:7e:3f:6d:fe:13:b8:c3:b1:40:02:d3:40:e4:59:8e:f8:
1e:3e:96:84:bd:7b:84:78:00:a6:3c:ea:4b:6a:38:e1:22:f2:
ff:bf:d2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:02:57 2025 by rpki-client