Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
File: VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json)
Hash identifier: l19u8V/dCoYEq/uCgN/1uPnOHgCaEPIQ5Oa/UFBgJpI=
Subject key identifier: 75:80:BD:A5:42:7C:52:6E:CD:79:4C:B3:D9:4F:6B:DD:AE:B6:92:D5
Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
Certificate issuer: /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Certificate serial: 019A17985F955DC3A4EAED85F959AE240345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
Manifest number: 10E4
Signing time: Fri 24 Oct 2025 19:00:53 +0000
Manifest this update: Fri 24 Oct 2025 19:00:53 +0000
Manifest next update: Sat 25 Oct 2025 19:00:53 +0000
Files and hashes: 1: 6hSnRR0poSKLkgYbDLBwSreCHXw.roa (hash: 2LSwLZwlqMozkmvNpXnEPuZJylqRvk5GNtgnCAWWf9Y=)
2: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: 1S7pYDtb7H5GumDdy+H2yASqg6BfHCA3Bg1SHG8Ou1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:98:5f:95:5d:c3:a4:ea:ed:85:f9:59:ae:24:03:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Validity
Not Before: Oct 24 19:00:53 2025 GMT
Not After : Oct 25 19:00:53 2025 GMT
Subject: CN=7580bda5427c526ecd794cb3d94f6bddaeb692d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ec:c4:d5:4f:92:b9:55:88:95:f1:c5:e7:38:
0d:f2:5e:0a:bd:30:cd:30:b3:cb:c2:bf:52:83:37:
06:47:df:1e:80:65:d9:9a:7e:bf:1c:f3:24:97:8f:
54:ea:ff:30:b7:63:a3:e4:45:ba:26:cd:de:69:c6:
99:d7:7f:72:f8:13:ab:fb:a3:9e:5e:a1:ff:c5:92:
2f:bf:2c:c2:db:24:5c:5e:7a:20:cc:1e:61:e3:42:
37:51:08:6e:19:8e:c3:cf:d3:ec:ca:5f:93:1a:3e:
53:ff:de:cb:f2:eb:e1:5b:53:0b:ef:24:6b:e3:33:
65:4b:8d:7f:f2:a5:1a:be:4f:ba:08:1a:e6:0f:fb:
45:44:69:dc:f4:d6:c1:e4:cb:32:98:85:cf:18:78:
43:d7:f7:ff:2e:29:1d:c8:93:54:2a:c8:1b:d2:da:
cb:f8:19:93:5f:cf:c4:73:e9:83:1d:a6:09:ce:13:
23:11:22:a9:e3:78:61:43:21:65:03:17:86:d4:ec:
8d:ca:16:b4:f9:ba:51:ff:fe:23:73:56:1f:b2:ab:
4a:a0:96:f4:73:75:a2:72:a2:99:a1:62:fc:ad:5d:
d0:bf:c5:3a:27:87:27:80:86:47:c3:fd:d2:25:31:
1f:aa:e1:17:b1:17:63:80:77:07:4c:c9:21:e5:f6:
a3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:80:BD:A5:42:7C:52:6E:CD:79:4C:B3:D9:4F:6B:DD:AE:B6:92:D5
X509v3 Authority Key Identifier:
keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2a:e3:3a:fd:6f:2c:a2:da:59:64:7f:97:34:4a:a2:e1:15:
e7:f1:d1:b7:be:23:09:c2:e6:18:5c:75:9c:27:12:19:2e:28:
81:04:cf:c8:91:12:89:4e:73:4e:a4:29:4d:3a:3f:5a:9c:73:
02:03:26:0c:72:e5:64:fb:cb:7b:fb:10:b9:8e:88:7c:9c:89:
83:4e:7a:04:75:d2:b4:43:00:44:84:31:4e:40:f6:b6:6c:ed:
a9:b9:27:57:f1:f3:25:a6:99:d3:49:82:3d:ef:00:b9:03:59:
33:0d:39:fd:65:d3:2c:41:79:f5:9b:f1:cb:1e:a7:e9:e9:ba:
73:86:45:13:a1:32:ab:45:db:a7:cc:ec:5b:4d:7b:30:3e:49:
58:a3:29:c3:87:36:e9:42:f8:d7:d1:6e:2b:6b:6a:db:e5:da:
71:4e:75:db:ec:aa:b0:74:be:e0:58:9f:1f:ec:43:4e:dd:8d:
ce:f8:46:7c:14:dc:23:b4:fa:60:c0:7b:cf:d3:1a:60:01:bb:
a6:c4:2a:03:40:e0:02:de:76:79:09:ed:05:b2:bd:67:e1:34:
e7:38:2e:88:92:ba:d9:b5:60:a5:dd:d3:d5:b1:75:ef:89:0a:
11:f7:14:22:bd:39:94:92:d2:b2:06:70:35:a2:57:2a:10:8e:
07:90:9b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 00:39:31 2025 by rpki-client