Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
File: vqse58Ta0p0SfVZdG5N5RlwoiTc.mft (raw, json)
Hash identifier: H0Hb/w/pqbtUoNafvreicvphTNp9VQxW5hmKKxMHSpY=
Subject key identifier: 19:01:D7:A4:F5:C3:A1:7A:93:D0:10:A4:5D:19:0C:B6:3D:F7:51:77
Authority key identifier: BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
Certificate issuer: /CN=beab1ee7c4dad29d127d565d1b9379465c288937
Certificate serial: 019A1D9A8EFF32664E54BE0FC11B415FAA1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
Manifest number: 16F2
Signing time: Sat 25 Oct 2025 23:00:59 +0000
Manifest this update: Sat 25 Oct 2025 23:00:59 +0000
Manifest next update: Sun 26 Oct 2025 23:00:59 +0000
Files and hashes: 1: M6HhHlPpshdNz9eD4RpZo054CNI.roa (hash: Oj0e4uW1W20zki7xK3pquycyEqfpqSDKDUOaElxS5vM=)
2: vqse58Ta0p0SfVZdG5N5RlwoiTc.crl (hash: J6YSykDqWR+ld4/+UZWSYDdjsOS/wUYEu5eieLrDm7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:9a:8e:ff:32:66:4e:54:be:0f:c1:1b:41:5f:aa:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beab1ee7c4dad29d127d565d1b9379465c288937
Validity
Not Before: Oct 25 23:00:59 2025 GMT
Not After : Oct 26 23:00:59 2025 GMT
Subject: CN=1901d7a4f5c3a17a93d010a45d190cb63df75177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f6:b6:f1:58:c1:4a:56:02:fd:42:f0:34:d6:
58:e5:e6:2c:d1:8b:4c:c7:d6:10:a7:d9:45:b2:09:
2f:35:60:27:36:ca:df:03:86:01:17:15:fc:e3:6d:
72:c6:00:15:c9:1d:90:fe:d8:8c:75:67:dc:4e:a8:
bb:c9:6b:4c:b4:c5:c1:f1:2a:90:f2:c0:bd:13:94:
b3:d2:77:25:a8:a7:cd:fe:a9:70:81:ac:ec:4f:07:
26:10:4d:39:2e:af:b2:a7:40:3a:fc:5d:06:02:0d:
4b:58:a5:fa:3a:67:85:e4:4e:48:27:cc:b8:4d:e5:
aa:ea:e3:35:14:9d:59:77:41:3f:f6:3d:eb:42:e3:
b2:bd:64:8a:4f:0f:5b:ae:aa:2e:12:c8:89:63:40:
f9:08:5f:c2:8d:3a:25:fc:54:ab:c2:30:c2:95:e6:
97:34:8e:18:22:b4:ef:e3:99:82:57:40:ac:ed:b2:
ff:99:68:08:2c:89:b3:44:16:1c:e1:d8:ff:5a:6f:
e7:27:91:3c:52:a6:55:dc:43:dc:78:dc:3b:75:70:
26:70:cb:e7:5e:d1:16:16:4a:6c:ec:3c:53:fe:ee:
02:85:39:ea:26:bc:da:c1:97:04:18:e0:67:01:16:
5d:62:74:86:3a:e4:72:2f:f3:0c:2b:16:1c:5e:94:
9a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:01:D7:A4:F5:C3:A1:7A:93:D0:10:A4:5D:19:0C:B6:3D:F7:51:77
X509v3 Authority Key Identifier:
keyid:BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0a:dd:08:c6:ac:e0:3f:e9:bb:c6:e5:5a:66:b1:99:dd:d9:
cb:6b:e9:45:d4:53:66:a9:6b:a0:7a:9f:08:f8:35:76:6f:58:
53:b7:b9:32:bc:fa:81:75:06:60:c5:4b:bb:e5:87:e8:b7:64:
70:52:d0:9c:ab:42:a2:6b:b2:dc:9b:c6:77:e3:06:df:34:63:
60:d3:bd:fb:ca:51:72:ba:ad:5d:ad:a2:7d:d2:2f:ab:ec:de:
15:78:59:f4:1f:2c:75:25:2a:4e:fa:f4:18:f2:5b:c8:83:80:
38:91:7d:f0:33:42:81:82:7d:12:40:9d:89:c9:58:fc:93:d2:
b6:d4:a0:a7:b6:7c:18:90:ad:92:bf:f7:fb:15:9d:8e:36:73:
e4:95:17:ea:2a:72:bd:00:ae:9c:7b:0f:4a:68:1c:33:97:fa:
f7:6d:8a:a1:9c:42:05:ce:20:07:37:db:e6:e7:37:03:c6:4a:
50:c5:db:8d:23:24:52:78:63:03:5d:86:e7:37:b8:63:d1:ef:
fd:cd:ee:b5:b6:3c:69:05:b4:b5:d8:0d:d5:b5:a4:0d:1c:1e:
17:06:0b:c5:68:1a:b7:07:3d:c6:c1:09:43:9b:a3:54:72:1d:
5b:1e:d6:52:34:ee:6f:3f:c3:7f:84:e6:41:55:21:c8:e4:f8:
01:b3:b5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 09:02:47 2025 by rpki-client