Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
File: VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft (raw, json)
Hash identifier: mE2gMKial8cXCvp9mBoFnwXYzjzU1WmDwvslT+7C9wc=
Subject key identifier: 8B:A4:4B:9E:F8:DA:BF:89:F9:8B:B7:2D:1A:07:FF:46:53:03:FE:75
Authority key identifier: 54:F9:D5:81:9D:44:0A:DC:EC:DA:1E:EE:B7:C9:8A:E9:9C:4D:07:07
Certificate issuer: /CN=54f9d5819d440adcecda1eeeb7c98ae99c4d0707
Certificate serial: 01992330F4A67C8A33F33AF7175ACB191CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
Manifest number: 016F
Signing time: Sun 07 Sep 2025 08:00:34 +0000
Manifest this update: Sun 07 Sep 2025 08:00:34 +0000
Manifest next update: Mon 08 Sep 2025 08:00:34 +0000
Files and hashes: 1: Bvl-Ue7SkDahQi1EYqyGw7UPWAQ.roa (hash: 7s/5EydJ0RA7GfaLPuDbrwS3RicCjtZz+jUH77HvUOc=)
2: VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl (hash: 51C0CIIGXYOvvtTjjCuoS0RpK0VsjeU1oofxFU0S1ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:f4:a6:7c:8a:33:f3:3a:f7:17:5a:cb:19:1c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f9d5819d440adcecda1eeeb7c98ae99c4d0707
Validity
Not Before: Sep 7 08:00:34 2025 GMT
Not After : Sep 8 08:00:34 2025 GMT
Subject: CN=8ba44b9ef8dabf89f98bb72d1a07ff465303fe75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:43:ec:7b:ee:81:14:c2:e8:fb:84:70:30:76:
65:b7:ea:d5:1a:df:8a:bd:0b:a2:b7:0f:22:c5:a6:
d8:69:63:8d:8c:4c:a3:a5:b5:75:8f:76:ee:70:3e:
1f:67:e7:93:55:29:3b:25:17:b3:0f:cb:80:e2:77:
17:f0:12:0c:07:43:de:0a:88:6c:23:cd:91:95:23:
0f:a6:0b:58:23:5b:a3:a8:23:d2:bf:ed:89:54:bf:
b5:b0:aa:b6:90:31:24:6a:34:c6:4e:a9:fb:f1:21:
37:2f:d9:d1:60:f8:52:90:be:65:fb:96:c5:32:02:
e5:22:ce:6e:e4:26:45:9f:34:4c:70:98:81:31:30:
dd:62:c4:c7:2f:cf:ee:b6:23:2b:5a:b5:a9:d2:74:
26:98:f8:77:b4:80:1f:b1:c4:e5:dc:3e:34:a9:a1:
41:39:b3:1a:73:dc:ad:bb:a2:32:1b:98:55:dd:08:
29:c9:4a:6f:fa:a0:bf:3f:ca:47:71:bf:a2:96:61:
09:c2:cb:99:73:48:bd:ec:1b:36:7c:cb:5b:e1:3b:
1b:00:b7:c5:89:a7:ae:77:ba:45:e0:67:07:0d:74:
bb:c1:c6:99:1a:fd:9f:68:79:0b:5c:c0:cb:69:e1:
fd:62:f8:cf:64:86:84:72:f2:1c:ad:37:4c:22:d1:
bd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A4:4B:9E:F8:DA:BF:89:F9:8B:B7:2D:1A:07:FF:46:53:03:FE:75
X509v3 Authority Key Identifier:
keyid:54:F9:D5:81:9D:44:0A:DC:EC:DA:1E:EE:B7:C9:8A:E9:9C:4D:07:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0e:69:da:7e:62:08:1e:73:e1:e4:35:4a:4a:77:4c:aa:eb:
26:a3:4b:f8:27:3f:e6:d4:ae:56:72:98:29:f8:39:99:28:1d:
d3:ce:15:f0:1f:0f:b2:f6:af:e9:92:5c:ff:f0:c3:a4:e7:98:
bd:39:c5:9b:97:66:b2:ff:95:a6:c0:82:86:d7:36:a7:45:b3:
42:79:6b:10:83:84:82:5e:6e:ee:23:c4:50:63:9f:a9:4f:58:
6c:b5:a4:75:4a:d4:65:0d:64:30:60:14:fd:9e:14:b6:2f:a9:
58:c5:20:1b:47:ea:04:1a:52:01:b2:d3:68:cd:6d:84:eb:0b:
cb:08:bd:3b:16:75:8e:61:27:7f:cd:a2:bd:fe:79:fb:10:e8:
04:37:38:0f:ce:60:bb:0b:52:16:00:e6:40:93:65:b4:aa:cc:
a8:84:d3:6a:33:06:e5:f2:6e:3e:b0:88:b6:20:22:26:ef:2c:
e2:b2:d3:6b:4c:79:d3:79:30:6f:1a:b9:c4:1b:f0:63:cf:33:
c0:55:9f:35:c2:5b:a5:ee:eb:51:24:8b:1a:e6:42:da:f3:e2:
38:43:37:cb:65:ca:fe:8f:88:ee:8e:eb:2f:87:b1:a7:7b:92:
8d:d1:8b:33:a0:14:5b:a4:32:e0:a3:ab:46:50:6f:18:e3:81:
42:23:d0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:54:00 2025 by rpki-client