Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
File: vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft (raw, json)
Hash identifier: xWPw7glIV9OcuuJwMu+FDuyQeNDVeECi3yHtvdH2ABs=
Subject key identifier: 3B:77:81:E2:71:C2:B8:A9:AA:36:16:AB:A7:B1:85:66:F8:D1:06:BB
Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
Certificate issuer: /CN=beb12ce6a91030e27d5abad146df27bc2880652b
Certificate serial: 019A05241130430BC80E6820CB1950AAAD26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
Manifest number: 16EE
Signing time: Tue 21 Oct 2025 05:00:40 +0000
Manifest this update: Tue 21 Oct 2025 05:00:40 +0000
Manifest next update: Wed 22 Oct 2025 05:00:40 +0000
Files and hashes: 1: 68bf9tdtZQgGYg3-0B5PInDhCfY.roa (hash: f8IkiTce5GYVcsogjzR0QdHaU5oLadDEov52ZX8Qu0s=)
2: IRSQE14-Tz7sBccAsgZYt7JbvIs.roa (hash: HHWOf34cKB/cnxnIC3HjVQrTDRzDkhRKh2V00sDdnHA=)
3: ZTuZG35aq-_FRZAbaGaaD5vcMwI.roa (hash: ulXglv5m+ng8W6iFQKnfH2V7n7R22IWQlAJ1C+Bod0g=)
4: e7SUl4mSjdeGsAW__A2CvddXoNY.roa (hash: CZDiVjjgs0Krs+aiXIc/FeDFsKFYjTe8hPduuFN8E2k=)
5: vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl (hash: sS4EptLTW7Oyc+FsCAXV2tG4edBg7YXk07aiPNyj6nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:24:11:30:43:0b:c8:0e:68:20:cb:19:50:aa:ad:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b
Validity
Not Before: Oct 21 05:00:40 2025 GMT
Not After : Oct 22 05:00:40 2025 GMT
Subject: CN=3b7781e271c2b8a9aa3616aba7b18566f8d106bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c0:2d:6e:9f:5b:a8:36:b0:17:a7:0b:60:e3:
6c:f4:b1:ec:2d:75:20:3b:63:90:bc:0b:be:4e:9a:
c0:5b:c0:48:0e:15:c1:9e:e8:4a:10:43:8a:e9:27:
0a:80:fb:53:a9:82:e2:6d:35:42:c8:69:ea:a2:b7:
b2:fa:f2:2e:0a:88:aa:73:7e:5d:8d:74:b3:b6:57:
c1:d7:86:ea:14:44:89:e9:73:0f:d5:1a:f0:9b:33:
01:af:42:8b:50:bf:94:08:f5:9e:60:88:dd:a5:39:
e2:e1:27:c0:ad:d6:48:8d:2f:e1:e3:1b:f4:08:ef:
40:07:d2:61:02:fa:ad:be:02:d1:ac:7c:b2:4f:04:
5e:69:1c:9b:25:48:1d:b8:a8:60:11:05:de:3b:bc:
8f:60:74:32:d1:bd:a2:4b:53:19:c9:39:02:91:a9:
ee:05:a9:e6:d5:9b:48:f7:b0:04:46:d8:1d:5c:03:
c6:01:70:3a:dd:52:4d:69:ea:49:cc:b6:30:50:78:
f1:6a:b6:3a:a7:45:10:d3:6d:d4:7e:aa:38:35:41:
76:c0:24:e3:de:bd:c6:1f:71:63:16:74:24:e1:2f:
74:51:5b:e4:35:a4:bf:0e:ba:15:6b:c1:4b:0e:a2:
0d:9f:ec:be:06:13:5a:3b:19:3d:1a:b3:bc:86:65:
c9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:77:81:E2:71:C2:B8:A9:AA:36:16:AB:A7:B1:85:66:F8:D1:06:BB
X509v3 Authority Key Identifier:
keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5b:a5:3a:11:98:0f:8d:4a:0a:6e:3b:12:58:1b:81:49:08:
71:a4:c8:c0:5c:f7:5c:00:2f:0c:73:89:21:44:f7:b0:10:0f:
eb:3e:06:d6:0a:0a:10:d6:ef:d4:01:4f:01:a0:f2:0d:08:e8:
06:33:c1:dc:e1:90:21:fd:01:d1:8f:3b:e0:1a:c2:9f:34:a5:
91:e1:97:47:32:d2:38:1e:f9:48:80:92:4d:00:0c:d1:ff:88:
e1:dd:d3:2b:8f:0c:b8:57:8c:ed:57:f8:cd:a8:d6:75:c9:97:
97:3b:bc:45:0a:71:f9:ac:aa:d3:7e:87:eb:3b:31:2a:6a:90:
fd:21:d9:59:6a:42:d8:ca:e8:ff:fc:a3:d7:8f:70:d4:5d:9f:
f3:a5:4c:77:e6:8d:8d:d2:ba:d9:01:66:1f:53:ea:82:3a:32:
ca:db:82:31:43:d9:31:78:d1:d9:c4:14:ea:f9:88:f0:cf:33:
9c:a4:31:c5:b9:2d:de:ae:64:c1:9a:d1:fb:fd:48:1c:20:18:
c3:bc:cd:a5:e4:47:bc:03:39:30:94:9b:f6:f2:76:a3:d8:90:
ce:98:f2:93:80:16:49:9d:cf:a2:01:1a:39:22:fa:d8:7a:cc:
45:98:cb:00:80:d6:e0:9d:d7:6e:a0:eb:37:8e:59:f8:b8:1b:
e4:bf:8e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:07:20 2025 by rpki-client