Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
File: VDxwGANHJZY6lxyWqMqrWYyuY4o.mft (raw, json)
Hash identifier: wpOVS/ri6YY5GQVAWTI5+RoeEuQ3nbNAhmW1EIW5pU0=
Subject key identifier: FC:1E:C7:89:A4:CC:DA:1F:C1:57:CE:DD:8B:24:1F:95:19:FD:38:E3
Authority key identifier: 54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A
Certificate issuer: /CN=543c7018034725963a971c96a8caab598cae638a
Certificate serial: 019A1B06F18994FF358A164B39A91652B0D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
Manifest number: 04E7
Signing time: Sat 25 Oct 2025 11:00:31 +0000
Manifest this update: Sat 25 Oct 2025 11:00:31 +0000
Manifest next update: Sun 26 Oct 2025 11:00:31 +0000
Files and hashes: 1: O7wVhYp5aN-EHbBcAt5o4QIzfyg.roa (hash: 1pH3pLqu6QshZ8HwYPfHNSe335AW5zx9SMrVG3Y2btc=)
2: VDxwGANHJZY6lxyWqMqrWYyuY4o.crl (hash: ESYG6qp+Ys0EfjkzNbp5n4KjiiJhJIlQZo1AcSE0fiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:06:f1:89:94:ff:35:8a:16:4b:39:a9:16:52:b0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c7018034725963a971c96a8caab598cae638a
Validity
Not Before: Oct 25 11:00:31 2025 GMT
Not After : Oct 26 11:00:31 2025 GMT
Subject: CN=fc1ec789a4ccda1fc157cedd8b241f9519fd38e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5e:89:cf:1d:25:f3:a5:6d:92:73:9e:25:16:
e3:eb:85:42:2d:1c:8a:10:2d:86:bd:e3:cd:91:23:
83:3a:19:c5:0f:94:f1:01:04:db:f8:fa:a2:4e:3a:
fc:73:ba:47:0f:df:1a:bc:87:f7:f4:00:9d:1e:ad:
ee:10:55:1c:62:29:59:81:1e:9e:fe:77:59:55:95:
2b:35:56:fd:46:14:48:bf:ca:2e:41:88:10:36:b3:
3c:dd:ac:c6:49:b8:8a:32:b2:14:0b:ba:91:ab:08:
7a:2a:39:ae:84:51:9b:9b:7d:90:b5:e3:4b:06:0f:
6f:e2:86:52:8f:39:d4:5e:e4:2d:c8:93:1d:cb:a1:
b6:55:96:1a:55:81:97:09:55:69:aa:74:4d:2c:06:
fd:4b:3e:70:f2:e0:c5:a0:c3:4a:3c:b9:fc:78:5f:
f6:eb:ad:07:e8:29:34:11:b7:dd:17:d8:23:79:b5:
bc:82:ab:b4:74:70:ea:ca:8a:ed:af:50:a7:01:88:
55:f3:29:5a:78:de:23:71:2d:14:98:7a:ff:ed:6b:
4b:4d:d3:bb:d1:b2:7f:d7:09:97:85:64:1d:45:cb:
77:2d:a8:42:31:d0:69:6b:cd:00:48:1f:8d:0d:67:
07:c4:ab:eb:92:ec:9b:55:50:84:58:84:55:e8:0a:
1e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1E:C7:89:A4:CC:DA:1F:C1:57:CE:DD:8B:24:1F:95:19:FD:38:E3
X509v3 Authority Key Identifier:
keyid:54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:50:38:58:ae:24:69:67:58:19:c1:bf:b6:06:e5:ba:42:8b:
42:ac:d1:e5:88:f2:45:e2:66:6c:9a:2f:66:9f:e7:48:fe:a4:
ce:ce:04:86:6d:6a:37:d2:d5:fd:f8:18:a6:0e:0b:f4:e5:1a:
9a:1b:46:37:56:ac:85:6d:9c:ea:d9:4f:95:f9:05:15:a4:f7:
d0:02:39:2b:58:de:cb:3f:f3:a5:a8:cc:a1:2e:24:b8:3b:fb:
d8:64:9b:77:21:55:7b:1b:44:a4:e9:ea:87:86:37:1a:ac:85:
09:24:f4:e6:68:24:99:65:e4:b4:d3:c8:6d:00:e4:1a:e0:74:
6a:27:e0:cb:04:c3:d3:60:f4:bf:5f:f8:0f:b1:90:c2:14:7a:
b8:3c:79:17:72:91:be:f5:d0:31:e5:c6:6b:58:c9:e9:00:1a:
53:25:f5:97:15:66:2c:d2:f8:0f:57:e4:a5:fc:d7:cf:bd:03:
fd:3e:97:f2:69:74:9b:89:f8:bd:73:7b:ab:68:5a:b0:bd:f7:
25:a1:c2:d5:e5:f4:1a:a2:bb:72:ee:9f:aa:a2:70:bf:6f:07:
f7:7f:6f:7a:ca:3d:7d:38:9d:3f:4c:98:32:52:60:ef:d5:1f:
ed:85:35:a4:69:09:d6:32:7a:e6:d7:8f:95:f8:83:fe:55:b6:
fd:14:68:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:42:53 2025 by rpki-client