Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
File: VNb_E0vWVvDOFNQQsCvsVR62miw.mft (raw, json)
Hash identifier: 39JZ2zxYBHyLwtXEYxiICC4hW4WzwUMEQrXApZlJHdM=
Subject key identifier: 02:D8:20:C5:3E:59:1B:E6:EB:2E:C8:D5:46:A6:A3:03:A6:C1:88:6B
Authority key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
Certificate issuer: /CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Certificate serial: 019A221B5E130CB18B4B5104DFA805EF836B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
Manifest number: 1324
Signing time: Sun 26 Oct 2025 20:00:10 +0000
Manifest this update: Sun 26 Oct 2025 20:00:10 +0000
Manifest next update: Mon 27 Oct 2025 20:00:10 +0000
Files and hashes: 1: L_f_G_DAS-PndMSomCegEakGUXo.roa (hash: MKZgnF0UjBLWLCCPlTkl22mDtPBHewVcfvCoOfEvyCg=)
2: VNb_E0vWVvDOFNQQsCvsVR62miw.crl (hash: yZLpNvfOqPKNOLqLK0RGffzwCoahiqgX3LJdlpbuXxE=)
3: t4fAOG9AgiRHWlfB8UV9ooeeONs.roa (hash: w4jU0T+F9ztiRct/8n0JoEkH/SfGukns0aANZIKuY2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:5e:13:0c:b1:8b:4b:51:04:df:a8:05:ef:83:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Validity
Not Before: Oct 26 20:00:10 2025 GMT
Not After : Oct 27 20:00:10 2025 GMT
Subject: CN=02d820c53e591be6eb2ec8d546a6a303a6c1886b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4b:a8:67:0b:64:95:26:bc:32:bd:46:77:3d:
70:01:3f:4b:81:39:b3:3f:ee:c8:d6:be:3a:b9:a3:
4c:9f:af:c1:f4:55:d9:f0:a4:6b:11:bc:24:47:e5:
2d:1a:d8:ae:f6:32:27:8b:53:ce:f4:60:8f:a1:bc:
0a:8a:80:47:ca:b1:79:39:c9:d8:bf:74:a9:f7:ef:
38:86:48:85:bc:25:20:cc:e1:0b:4d:30:59:94:a2:
65:0d:cd:77:b0:58:02:05:94:6a:1c:54:e3:19:13:
f6:36:9f:54:b5:ed:a3:d1:d5:5d:65:b2:e3:49:7b:
55:50:88:cd:c7:dd:11:cf:e8:05:8f:a7:67:4e:50:
c0:3a:51:a2:9c:f7:e1:a7:95:5c:22:dd:e6:8c:dd:
50:93:3a:14:28:ca:25:63:19:04:15:22:57:69:d2:
e3:37:49:d4:77:43:5c:fb:5f:2d:99:f3:72:cc:5a:
30:62:fb:13:b6:cd:ea:ed:9d:66:0b:e5:e5:a2:32:
94:da:00:5b:eb:ea:f6:f2:f6:29:00:50:d2:d2:67:
88:0c:4d:d1:90:cd:99:21:f5:5e:b8:a6:92:4b:b2:
83:09:dc:84:0e:60:90:28:fc:8e:8e:19:ae:dc:3f:
1a:ff:56:6c:14:47:67:0f:60:2a:7b:63:f5:ed:96:
6e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D8:20:C5:3E:59:1B:E6:EB:2E:C8:D5:46:A6:A3:03:A6:C1:88:6B
X509v3 Authority Key Identifier:
keyid:54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ac:fa:25:fd:d7:28:cf:81:40:30:3a:1d:a6:db:de:fe:c9:
a0:c5:dc:25:cf:f6:33:aa:40:b9:38:86:80:71:ac:af:02:03:
6c:67:a9:4a:4e:cb:6e:23:19:8e:24:9f:75:92:08:46:91:e9:
b9:4e:a0:e9:bc:2d:f0:53:2f:a0:e4:de:e5:a8:bd:4f:e3:02:
a1:2f:e9:95:5c:0e:8d:99:92:a7:e7:23:df:be:e3:7e:4c:24:
1d:a0:8b:9c:34:fb:9d:82:47:f7:22:f2:47:00:4b:0a:f7:76:
16:17:17:12:23:ac:c6:83:e3:bf:db:46:46:45:4d:f4:6a:a2:
e5:b0:93:fb:45:da:57:e7:dd:24:89:43:c2:b0:fa:43:4e:02:
cb:c9:81:64:5e:cd:bf:e3:84:ee:b6:43:f2:4e:e7:1d:f9:45:
8e:02:3d:63:41:d3:2c:fd:9e:18:35:fc:af:3c:89:77:20:b1:
66:9f:c1:9c:d7:a9:1c:dd:c0:6c:11:fa:43:f7:f0:d8:a5:82:
2c:48:1d:a7:22:fc:8b:cc:51:1a:be:43:2a:00:59:c4:f2:cc:
29:dc:ef:fb:49:4d:f1:2a:7e:7f:5a:6b:df:71:ba:58:d6:b6:
6a:f9:59:12:bb:4d:8e:ef:fe:51:ff:5d:16:f5:b4:39:90:32:
f0:ce:3f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:53:54 2025 by rpki-client