Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
File: VDxcNKYv--2PwPDsAbQsDFDufvc.mft (raw, json)
Hash identifier: Nw7IoxhxXl+5w+DM9kRh4s9EhzHrctLfeYCl6MVkn3g=
Subject key identifier: 3B:82:82:CC:26:2C:9C:D5:C6:09:2A:BE:2F:CC:B3:54:A0:D4:C3:11
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 019A13BB611BD0EE14AA6731656452A47261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
Manifest number: 0908
Signing time: Fri 24 Oct 2025 01:00:38 +0000
Manifest this update: Fri 24 Oct 2025 01:00:38 +0000
Manifest next update: Sat 25 Oct 2025 01:00:38 +0000
Files and hashes: 1: 3OLIMizXOJwfjWRWiEBjpUKJwIU.roa (hash: QMFZT0i3XGS+MsKzCsZOmKPi7vfVCyuG5tTyqhdATNA=)
2: NPlJ_KhWtoEU85P6_bEw-JrQECw.roa (hash: +WKUN/INEKKaNIE4RDQgpQc6rCP9GRAzlztHhcY8Wc4=)
3: PVF7wnGzCTMj-DMi0Yh7tJoQV50.roa (hash: ifNzodbn64RIKDxyUKgvxQYTPT/TGzAFj9xlomWoMYM=)
4: VDxcNKYv--2PwPDsAbQsDFDufvc.crl (hash: JhXwY9/W52i/U51l5UwXRyLZrZnBMk7i4mBb6Stzff4=)
5: aP1xgGw8H7jCOI-VSZ01nj8-4CM.roa (hash: tc+u6WTs4frUnC9+3IttTv0/u7Rmmf/DRJCt109dDEg=)
6: egWiNnqY9Vl0Wup08EirG2JX11M.roa (hash: cdwWkaZBw0jnB5ddN/k9GlCFftOqTidrPnaELenZvX8=)
7: lSBrUQBEKuTSY6AdNT1ZVvcTRx8.roa (hash: G+WOXA6z8Ino3VGaelG9h3UW5mZBPuWh+ANhGCA7MB0=)
8: tRNUe3Kk3eWia8VX_dKXZILdgjE.roa (hash: JStwVDR6ukqM/F9+GpHeAO0i8HlEBKkQBbaoGUyV6eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:bb:61:1b:d0:ee:14:aa:67:31:65:64:52:a4:72:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Oct 24 01:00:38 2025 GMT
Not After : Oct 25 01:00:38 2025 GMT
Subject: CN=3b8282cc262c9cd5c6092abe2fccb354a0d4c311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:e1:ce:7f:dc:57:6c:1f:a3:b6:b2:84:ea:
0e:45:e2:81:fa:f4:aa:25:e4:58:38:4a:c8:0d:cc:
5b:1d:3f:1f:61:fc:5f:58:e0:a1:73:8b:73:0d:3f:
c8:56:86:a1:15:26:ce:10:e3:88:82:9c:a1:99:6d:
63:f1:5c:90:af:4b:b3:7e:05:77:9c:44:4a:28:9d:
4a:03:f5:e0:c4:ae:5f:a1:0f:2c:08:06:4c:57:22:
e2:f3:76:3e:dd:09:bc:6b:0f:61:f5:67:5a:ba:05:
8d:07:86:44:bd:3c:2f:fe:1f:a2:9a:30:8f:bf:f3:
84:33:3b:d5:68:83:b4:dd:18:ac:e4:92:ec:20:ab:
bb:89:ae:f1:fb:95:d9:22:c9:17:76:42:66:e2:d2:
6d:7f:98:7f:36:e3:cd:1e:70:c5:8b:7b:13:1d:37:
15:bb:f4:a5:7f:48:d1:20:db:4e:dd:50:da:75:08:
12:22:da:fb:3b:bb:ee:dd:82:f6:e8:71:eb:f7:4c:
68:dd:3e:d1:81:bc:fb:8a:00:09:cc:4f:5b:b7:d4:
c2:76:72:75:8c:a3:5b:e5:04:bf:dd:7d:fb:4f:af:
b6:c1:34:ce:91:72:49:d7:d3:ae:b9:75:e9:d5:7a:
a4:1d:91:7d:fe:de:2d:87:4d:a0:1c:82:ee:da:87:
a4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:82:82:CC:26:2C:9C:D5:C6:09:2A:BE:2F:CC:B3:54:A0:D4:C3:11
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:dc:e3:ae:db:74:74:1a:07:90:3c:7c:7d:b4:89:e7:56:2a:
89:e4:e3:a5:a2:b7:38:ad:5c:6b:ec:f1:cc:5f:c5:98:91:5c:
99:57:53:42:ae:05:f9:ea:63:17:3a:5b:b8:ad:4d:9a:77:68:
88:18:68:bc:23:01:0b:61:5e:48:d3:4c:b9:61:01:be:ba:1f:
0b:e0:5e:c4:14:44:dc:92:3b:1c:aa:21:b9:21:05:28:e7:f4:
15:aa:0f:4d:b3:9d:93:2a:fd:e7:eb:44:87:ae:8f:eb:83:63:
da:c1:4b:3a:64:e6:18:f2:0c:89:22:07:0a:a0:8c:2a:fb:9c:
13:f0:ce:2e:9f:ef:7b:e3:76:33:3c:8c:e3:15:3c:84:e4:f1:
8a:39:4a:e3:1d:49:94:65:dc:b6:33:c9:37:d3:00:3d:bf:a3:
9c:c1:b8:40:ea:07:f0:2c:85:7a:b7:64:1d:8a:99:e6:56:47:
03:bb:70:41:21:20:05:15:e4:2f:c6:65:70:2a:92:78:31:b6:
da:6b:18:33:81:e9:67:1b:f2:a2:c2:31:b9:a9:81:b1:f6:fa:
9a:50:50:e7:f5:a8:35:13:7f:2a:c2:a7:27:ac:68:21:da:ae:
04:24:46:5a:58:fe:01:dc:15:4e:ff:f6:6d:f9:97:1f:9c:e3:
84:fa:23:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 09:53:42 2025 by rpki-client