Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
File: VxoPwBLvuJZQp35vvRLcq9pCjLA.mft (raw, json)
Hash identifier: 4yAvlQqur4zXtW/jTwXWAT4dN8JPy91l0Vmtud++Dh4=
Subject key identifier: 3C:E7:E5:07:B9:6E:87:D3:AC:D6:28:8C:FF:FB:5B:62:C8:BF:BA:97
Authority key identifier: 57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
Certificate issuer: /CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Certificate serial: 019A19BDCB7BDFBE5D12C61DABA8E61305FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
Manifest number: 1682
Signing time: Sat 25 Oct 2025 05:00:59 +0000
Manifest this update: Sat 25 Oct 2025 05:00:59 +0000
Manifest next update: Sun 26 Oct 2025 05:00:59 +0000
Files and hashes: 1: 5mIqDi-qSZMNQfzVabCDYIualIY.roa (hash: emChHnQclj1wViLAe/VRE5oA1OWGgrZwj1qbaE68eS4=)
2: VxoPwBLvuJZQp35vvRLcq9pCjLA.crl (hash: 8XNAY0o5GuejIxh1kyTPW+DSxhlbwJJ5RCk8EQjKTGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:bd:cb:7b:df:be:5d:12:c6:1d:ab:a8:e6:13:05:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Validity
Not Before: Oct 25 05:00:59 2025 GMT
Not After : Oct 26 05:00:59 2025 GMT
Subject: CN=3ce7e507b96e87d3acd6288cfffb5b62c8bfba97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:39:14:53:8e:2e:31:2f:8c:f3:1b:0b:dc:54:
f4:06:75:ff:91:1f:79:44:e7:6f:d1:6e:38:c6:59:
59:34:d9:cf:b0:5f:c9:26:84:e6:15:09:fe:2a:56:
5e:10:d4:92:87:8b:ad:59:cf:49:7e:35:a3:70:d5:
3c:51:72:97:ee:6e:6c:9e:52:fd:7f:20:c9:19:19:
87:da:9d:19:fa:b5:03:44:2b:b2:85:40:42:67:54:
f8:29:f7:8c:78:c6:27:d9:fe:05:f5:47:66:e5:e9:
31:ec:a4:1f:82:a2:16:75:97:2b:80:ad:13:2f:a0:
66:6e:2f:a9:bc:40:76:af:d1:73:cc:94:c2:35:41:
1c:53:4f:72:dd:d0:4c:79:e3:83:88:c7:d6:2e:af:
6d:49:53:61:4c:6f:21:ac:05:31:a9:b3:0a:ee:e6:
ac:2b:c4:b1:a7:5b:f4:9b:0c:b5:4c:b3:ab:b1:fc:
5f:d1:3b:17:d6:52:f7:c9:65:56:e6:ef:76:0e:13:
91:d9:f9:88:18:91:96:2e:54:c5:be:4b:8f:3b:56:
8d:94:c8:7b:da:6d:26:fe:77:65:c1:16:8e:fd:fb:
c8:4a:bb:42:66:80:d2:6d:d5:fe:8c:7e:8a:34:15:
00:2b:1d:8b:d1:62:49:1c:99:47:18:f3:ef:51:a7:
4e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E7:E5:07:B9:6E:87:D3:AC:D6:28:8C:FF:FB:5B:62:C8:BF:BA:97
X509v3 Authority Key Identifier:
keyid:57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:82:4b:b0:2e:4a:d2:d9:3a:bd:9f:0b:72:4e:4d:53:b5:44:
fe:60:2b:59:93:46:4b:b9:19:89:94:1b:82:f1:e5:48:fb:ce:
49:c1:9d:96:d5:9d:2d:be:7a:fe:39:3a:1a:13:b1:15:0c:87:
0a:a5:c1:97:13:2e:be:95:3b:d0:fc:b7:d7:40:f8:c1:26:eb:
f8:33:a8:f7:2c:63:b0:b1:2a:df:46:88:ad:3a:e1:5f:d1:63:
6e:d7:2d:ed:7d:d6:b8:91:a7:0b:29:59:de:48:80:8c:7c:fa:
55:9d:2a:37:e5:7d:eb:6d:8f:64:ae:9d:d8:d9:ad:40:fa:6c:
75:d1:fc:c4:9a:55:ea:32:8f:84:b9:21:3e:5a:1a:63:d9:62:
20:23:73:c1:33:1d:a6:68:f9:e9:04:50:55:f8:1f:41:8c:67:
c9:2c:72:cd:9d:41:56:87:6c:0b:6f:59:f8:45:6c:f2:97:fc:
99:0c:3d:17:01:2a:71:6a:52:5f:74:1d:8a:c4:58:ec:f4:2c:
18:98:29:38:09:70:c9:c8:51:a4:39:31:93:b0:0e:c7:95:e2:
0b:c3:55:51:14:4b:9a:d1:13:4b:16:cd:7f:1c:85:32:99:6c:
87:4d:3d:a0:82:04:d1:2f:b8:a8:92:87:8f:1b:41:cf:c9:8b:
30:d8:18:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:41:39 2025 by rpki-client