Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
File: VLJNiVv5wKX9AApFo0dRCyoIf7g.mft (raw, json)
Hash identifier: T2FC/Ltvuattv57grC2SJr8gEPSmUcQLpVRTOr/htww=
Subject key identifier: 89:33:98:59:3F:F3:24:27:1C:4D:16:3C:80:A1:7D:27:31:89:9B:44
Authority key identifier: 54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8
Certificate issuer: /CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
Certificate serial: 019A2A434D16854F936095AF8447AE973282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
Manifest number: 16F9
Signing time: Tue 28 Oct 2025 10:00:44 +0000
Manifest this update: Tue 28 Oct 2025 10:00:44 +0000
Manifest next update: Wed 29 Oct 2025 10:00:44 +0000
Files and hashes: 1: AsLBu-KLF_eIlciVtmCw6FoQZWI.roa (hash: Uxf292him4J1J69/hFLIe30svhXR87gNziaZeS20lGA=)
2: VLJNiVv5wKX9AApFo0dRCyoIf7g.crl (hash: 5lJAiSLJHg2OKnTDYec+jk//gMvJe8NxFb78p1oEuPw=)
3: oi9YFEbcvlN5alPq7ixyYhFrq48.roa (hash: ADhZ+05HO4hub6uw9RxwuVi7MstO4VKG0zRMmKQDcKA=)
4: wKg9cqvso1ZsScpo5DIqClZRYrs.roa (hash: tU29LISc03t78s9NesDI+Otx6e7RN8GctCHPQvZVkgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:43:4d:16:85:4f:93:60:95:af:84:47:ae:97:32:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
Validity
Not Before: Oct 28 10:00:44 2025 GMT
Not After : Oct 29 10:00:44 2025 GMT
Subject: CN=893398593ff324271c4d163c80a17d2731899b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dc:9f:0d:e1:44:37:62:54:bc:98:ce:4a:24:
f7:a0:09:c1:42:c9:f8:0f:22:72:af:be:16:7f:60:
22:75:39:30:ff:49:e4:0b:78:7c:87:52:8b:38:05:
a2:77:1c:f8:fa:f0:c9:c3:e6:3a:72:3a:a9:d6:0a:
f3:7b:73:5e:d5:e3:07:d0:30:96:d8:e7:6b:05:bf:
f7:d8:45:1f:cb:34:ed:ad:a5:e9:b4:ff:c8:1b:8f:
5f:c9:84:56:e4:bb:c7:3f:16:a8:52:2f:3e:5d:fa:
17:a7:0e:5b:12:80:3d:c1:9a:3e:3a:68:71:df:31:
c0:fd:d5:92:1f:59:e1:57:a2:42:9a:a0:b0:c6:5e:
be:f7:dc:92:6f:c1:52:e3:9a:f8:bc:04:ff:f6:98:
8f:97:fa:5a:d3:c3:96:64:79:07:59:52:97:32:cc:
04:e7:b3:1a:71:72:89:fc:cd:16:f2:97:f9:a8:d7:
7d:12:af:6c:eb:35:41:f9:12:b6:c2:20:fb:86:fb:
9d:72:e1:20:26:dd:1d:3d:b7:a4:15:da:6a:b8:94:
d9:e5:bc:36:8f:e2:71:dd:a9:77:84:56:ab:38:6a:
15:80:76:9e:4e:e0:2c:c5:13:84:cf:b8:99:6d:85:
e3:eb:31:67:e3:28:4f:91:c9:96:77:65:68:98:9b:
fd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:33:98:59:3F:F3:24:27:1C:4D:16:3C:80:A1:7D:27:31:89:9B:44
X509v3 Authority Key Identifier:
keyid:54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:21:6c:a7:b1:21:ea:7b:ae:06:9a:38:9f:7f:01:8e:58:f6:
a9:15:09:62:c0:51:79:11:af:36:5d:5c:fc:eb:b5:2f:c8:36:
b3:2d:67:4b:17:e7:89:b8:e8:81:3f:97:80:42:cc:71:3f:ab:
ca:dd:c3:a1:e4:e0:87:4e:1b:78:c0:e6:37:a1:13:50:ca:d7:
7a:79:e7:03:35:ff:0f:0d:dc:dd:40:19:4d:fd:16:96:c2:e1:
56:d1:13:db:90:1d:88:23:3e:45:6a:3b:6e:3f:18:58:d3:d6:
50:67:8d:36:28:4d:53:be:6a:94:ba:1f:67:d6:40:b9:07:dd:
e8:17:f0:7e:80:bf:11:c3:3a:89:6a:1a:31:56:e0:95:19:b9:
e2:bb:93:83:9c:6b:e6:a3:fa:6d:a3:ae:05:da:95:b7:3d:03:
db:4c:88:57:13:c6:95:71:98:1a:d8:fe:cc:b6:4c:50:f2:9a:
e8:43:0f:b2:52:3b:a9:19:82:6e:f9:d5:b1:85:56:b3:5c:3c:
8a:70:2a:b3:34:2e:fd:8b:fc:ee:1d:20:6c:41:05:1a:c1:41:
8c:8f:c6:c9:00:be:ba:f9:ff:85:a0:74:2e:3a:bb:02:bb:67:
9d:e2:4f:79:af:17:e4:f3:7d:92:1c:90:7f:0b:58:9b:21:07:
1e:d2:b5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:34:44 2025 by rpki-client