Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
File: VtZBSGvcmNSn3gkopC19aOYBXzA.mft (raw, json)
Hash identifier: rXGHEEfAD/KcMZ+pGBu6lDNJKFXJ/MgDk4IDutbh3QI=
Subject key identifier: 7E:C0:CE:2B:53:E1:32:ED:77:A5:B1:47:F8:6F:FD:6B:14:15:7A:B6
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Certificate issuer: /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial: 019A0BCB41B269353182A8F8125399E1A55C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
Manifest number: 0430
Signing time: Wed 22 Oct 2025 12:01:01 +0000
Manifest this update: Wed 22 Oct 2025 12:01:01 +0000
Manifest next update: Thu 23 Oct 2025 12:01:01 +0000
Files and hashes: 1: VtZBSGvcmNSn3gkopC19aOYBXzA.crl (hash: qF50mldg8E7YdMlFT/fQbqoeajjOSWxrtdCenGhWIAY=)
2: WEO8NtVjuokm03trjbiruG9nGXs.roa (hash: yTC3Oqfw9NROJnWxfHcYDNS4j2G/zzxfsRY9HvWscDc=)
3: WUha7UrsdgndZN2i8LKGRI6xHz0.roa (hash: kPsS0TLTx3ZvH9JmthAMYgEGSgO6LHxlTkfSHRuTvZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:cb:41:b2:69:35:31:82:a8:f8:12:53:99:e1:a5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Validity
Not Before: Oct 22 12:01:01 2025 GMT
Not After : Oct 23 12:01:01 2025 GMT
Subject: CN=7ec0ce2b53e132ed77a5b147f86ffd6b14157ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:84:f2:a3:7a:ec:8f:1f:8e:0e:02:b4:a1:
a5:ad:15:95:07:ec:cc:29:4d:5f:c9:73:78:53:26:
11:f7:91:29:5b:6f:d8:3f:9b:77:49:4a:06:96:e7:
bc:3b:3a:1a:fa:ce:95:00:7e:27:b2:3f:35:f4:85:
5a:5c:ea:43:50:f8:80:79:74:55:b0:73:05:0f:53:
ea:41:bf:19:e4:b7:15:f8:d8:e0:bf:72:32:e2:83:
c0:42:66:e5:4b:f6:81:1f:53:a7:b0:d0:aa:90:67:
a5:44:08:17:6b:07:1e:01:c1:36:62:a7:5a:73:24:
62:62:81:d0:ba:36:c6:40:71:c1:c5:e3:63:9f:c0:
e1:ae:6b:3d:81:8a:48:e6:40:90:11:ab:56:e9:65:
6f:03:29:db:24:97:c3:f9:59:e8:e4:85:c5:f9:b9:
c1:9b:d9:38:d9:2b:4b:bc:7e:0e:a2:4e:f8:2f:2b:
1b:8b:26:fa:bf:3e:bc:2f:51:f9:24:94:8a:a8:d1:
da:ff:6c:86:62:24:ed:51:c9:b4:fb:f5:0f:2d:bc:
c4:69:b8:08:6b:d4:c3:5d:24:c0:07:a4:da:18:1a:
d2:64:82:c2:e9:6f:1c:4f:88:73:2b:ce:fd:be:e4:
79:4d:64:4f:ff:0e:7c:08:97:fd:52:77:6b:e6:8a:
22:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C0:CE:2B:53:E1:32:ED:77:A5:B1:47:F8:6F:FD:6B:14:15:7A:B6
X509v3 Authority Key Identifier:
keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b9:02:cf:8e:fd:8c:f8:d1:e3:9f:54:8b:4a:05:af:84:08:
33:e5:3b:be:8a:d5:aa:74:b8:65:71:4c:ec:2b:0c:0f:49:f6:
1d:2d:73:03:cc:97:84:24:e6:9f:7b:8e:01:de:c2:62:2c:3c:
a5:8d:b7:7f:65:8f:6d:83:d2:cf:af:c3:19:04:73:16:a8:31:
b6:bc:34:24:7f:23:3e:ca:3c:0a:3f:82:1a:66:32:df:39:43:
9f:d7:73:76:83:05:0b:1f:31:95:6c:f1:3b:bb:4e:82:73:8b:
02:8f:92:40:b2:bf:6a:03:32:bc:0e:f5:7f:81:e0:b4:f5:e9:
2a:a7:c2:8b:b4:0b:08:4b:f5:44:69:de:ab:2e:03:80:63:e9:
37:1a:9f:22:e7:b8:ca:1c:e0:5b:09:32:e5:9e:de:77:e5:af:
c6:4b:c5:6b:f0:ca:9e:30:1f:3e:cc:fa:84:32:8b:d6:20:0f:
0c:7d:02:ff:a7:6c:b5:e8:c0:e5:2f:a2:ca:c6:58:78:23:68:
e8:36:8e:d9:0c:24:ab:c7:e3:f1:61:d8:a4:72:c0:da:dc:98:
c8:b3:59:06:d2:61:ab:a9:cf:9c:aa:db:46:38:c7:84:84:0f:
94:96:87:8a:4e:96:95:42:c1:d3:1d:b2:b8:e4:54:62:df:62:
ae:8e:73:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 21:25:35 2025 by rpki-client