Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
File: VLjgSw4aTU46KN8V61hJPnY3frA.mft (raw, json)
Hash identifier: 3VNGrv+YijrbOqwORhEn2ePI28GJcYHk/Dp6CX628Nw=
Subject key identifier: FD:3E:E0:88:D6:A5:B4:97:5A:F0:35:2C:A9:86:B0:EF:EF:72:95:A7
Authority key identifier: 54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
Certificate issuer: /CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Certificate serial: 019A1C509DB31983B9F5C7D2D14187FDCC40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
Manifest number: 16F2
Signing time: Sat 25 Oct 2025 17:00:36 +0000
Manifest this update: Sat 25 Oct 2025 17:00:36 +0000
Manifest next update: Sun 26 Oct 2025 17:00:36 +0000
Files and hashes: 1: UwlL4l1LRiE3vykISfbzsy5TSkQ.roa (hash: ENtIGGU96W9e4YjxZ7Qzg80Ai/cpSTda8jT8DyJC8KM=)
2: VLjgSw4aTU46KN8V61hJPnY3frA.crl (hash: Ae/NMbUoWcZKPChqZu9nT4NMMC1fMbRV/woQrBxFxcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:50:9d:b3:19:83:b9:f5:c7:d2:d1:41:87:fd:cc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Validity
Not Before: Oct 25 17:00:36 2025 GMT
Not After : Oct 26 17:00:36 2025 GMT
Subject: CN=fd3ee088d6a5b4975af0352ca986b0efef7295a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:e7:d6:89:95:e2:7c:1a:bb:bd:4b:50:cb:
b8:01:f9:62:99:69:b3:bf:13:bf:78:ac:43:c9:10:
58:41:54:ee:13:9b:e3:8f:cc:28:a9:b2:9d:3c:47:
4e:d5:b5:b7:4a:5f:69:77:10:91:14:01:3a:b7:0c:
c4:29:82:ae:3e:8a:e4:74:c6:8c:06:f1:dd:4f:41:
60:8d:e8:64:b2:58:8b:55:13:16:36:93:75:ca:d6:
98:76:36:72:ac:51:6b:39:da:13:60:d0:3a:22:e5:
f9:a0:18:e9:84:b6:8d:b8:09:b8:22:60:7c:3e:3b:
64:e2:51:a5:e5:20:ad:0f:d1:17:a0:0b:56:ee:26:
03:0d:d8:18:9e:c9:69:a3:f2:af:ee:3a:1c:d3:21:
d8:2d:46:af:97:22:85:21:37:04:47:4d:e6:29:66:
be:03:60:c7:81:05:36:c3:dc:48:7a:96:80:fc:0d:
b6:62:16:9a:42:22:c0:66:01:41:5b:e8:78:64:1c:
b3:7f:8f:b4:39:42:14:a7:16:e7:74:4f:55:ea:c0:
a5:5c:42:5e:27:30:50:6c:a6:79:04:f2:33:a4:34:
75:29:f9:bf:2a:dd:c9:2b:bc:3f:51:e4:30:bf:7c:
53:c0:14:56:05:db:bf:17:1b:4b:6c:ab:3b:ff:f0:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3E:E0:88:D6:A5:B4:97:5A:F0:35:2C:A9:86:B0:EF:EF:72:95:A7
X509v3 Authority Key Identifier:
keyid:54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:72:67:22:c1:29:12:e5:71:bc:a8:a4:38:83:b6:79:0c:7d:
d4:86:95:3b:65:38:65:c1:19:ae:40:ad:8c:1f:c9:a6:e3:85:
70:00:58:9a:1b:cd:65:ff:13:f2:7d:05:2a:fa:bc:c8:ec:6b:
74:b1:fe:d3:b8:bc:b2:04:f8:6a:4d:85:f8:18:b1:76:0b:2e:
b5:9f:98:33:f5:7e:68:be:1f:fb:fe:d4:a7:1d:2e:df:74:54:
54:f6:92:bd:9a:aa:18:3d:4d:26:57:70:3b:09:68:31:29:3f:
44:f5:8e:73:c2:bc:d1:17:1c:0e:89:88:72:86:f5:58:36:21:
3f:50:fd:29:e0:97:0d:53:e2:4c:07:59:e9:e1:0e:7e:4d:10:
26:2c:d9:f0:bd:5f:b3:81:4f:fb:d4:25:8e:9a:03:61:f9:92:
21:dd:11:94:ef:32:17:36:7b:31:74:ca:2a:8c:69:8d:fa:b0:
49:03:91:49:69:28:be:07:95:e1:e1:0c:fe:11:82:f1:3d:99:
cb:26:e4:bf:26:80:0b:26:59:63:58:ee:6f:09:ab:22:2d:a0:
c2:54:6b:dc:2d:13:59:3a:09:c0:40:7a:c9:9b:a9:a9:4c:42:
06:ab:3a:2f:f3:b9:09:bc:54:eb:bf:53:89:f9:4b:a8:24:5d:
dd:d5:29:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 01:50:15 2025 by rpki-client