Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
File: VChf_ulzEsUcOoBf-TQOvsM1JyA.mft (raw, json)
Hash identifier: hhhNqLYIT5vw8xjQXuJLSOwlnecQqUP5LTA34qfvbjg=
Subject key identifier: EE:2E:BC:82:EB:66:CE:AA:24:B1:8C:D7:E7:01:C7:88:77:5A:70:7E
Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
Certificate issuer: /CN=54285ffee97312c51c3a805ff9340ebec3352720
Certificate serial: 019A5262FE067DCC50DC75A9B4B3C51EEC0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 05:00:10 +0000
Manifest this update: Wed 05 Nov 2025 05:00:10 +0000
Manifest next update: Thu 06 Nov 2025 05:00:10 +0000
Files and hashes: 1: Ca-8iz_zQCrKysmx5A1KTglY5iE.roa (hash: QQcsgeeci4CpJE1THj53EE0/b4qFL4RDwyCbpu7M9gI=)
2: VChf_ulzEsUcOoBf-TQOvsM1JyA.crl (hash: BZ3AsIrdbJ76HYOLvA6wYvaI8AacsQAyII7c4Rpt3qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:62:fe:06:7d:cc:50:dc:75:a9:b4:b3:c5:1e:ec:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720
Validity
Not Before: Nov 5 05:00:10 2025 GMT
Not After : Nov 6 05:00:10 2025 GMT
Subject: CN=ee2ebc82eb66ceaa24b18cd7e701c788775a707e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6c:d0:1a:b9:b6:6f:e9:e2:c2:41:c8:c6:7c:
05:74:50:b3:84:b6:ca:93:75:22:73:4e:12:05:37:
9a:fa:3b:aa:22:40:84:49:75:f8:01:99:c1:36:a5:
b4:a8:46:94:44:78:9c:b5:01:61:60:24:39:ac:d4:
9b:bc:d1:90:65:85:02:f1:63:53:29:ed:ec:f2:f9:
cc:85:5a:6b:97:04:ce:6b:42:35:07:dd:68:dc:74:
12:47:25:2a:b5:6c:38:1d:25:b9:74:58:70:ae:0e:
ff:cd:76:08:f0:d9:f6:fa:84:14:82:67:2c:11:19:
0c:9a:4a:35:e4:9c:cb:39:a5:d9:20:a2:02:70:f7:
1c:1f:0d:b2:4e:ab:c4:be:0f:01:29:02:6c:b1:61:
5e:71:4f:a2:9c:44:ba:73:6a:93:7c:5f:82:02:1c:
31:aa:5d:ed:48:08:0c:06:bf:8e:18:f3:1a:f4:64:
ec:2f:35:fe:06:31:93:a5:08:c6:96:f6:1f:27:f4:
aa:0f:cb:ff:fc:eb:52:84:ff:d4:47:78:30:bf:0f:
28:c1:f2:fe:6f:8a:52:e4:4b:f2:bd:b5:9e:47:6e:
a4:ed:21:36:7c:6c:9f:0b:8b:fb:bb:0e:f8:f3:a9:
5f:45:f1:9b:5d:a5:2a:7c:18:5f:76:71:13:9b:1a:
8b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2E:BC:82:EB:66:CE:AA:24:B1:8C:D7:E7:01:C7:88:77:5A:70:7E
X509v3 Authority Key Identifier:
keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:a9:0f:a8:83:61:41:98:09:90:d8:75:81:f3:38:59:53:52:
e8:86:24:13:84:c2:ef:1f:8d:81:f1:ea:a3:f2:1c:96:95:1b:
16:62:b7:da:e5:05:06:c9:f1:74:14:67:1f:30:eb:2c:5c:4b:
44:31:e6:46:79:ce:ac:1c:27:2f:8b:2d:20:78:31:ef:25:33:
5b:31:4e:4d:bc:fa:d4:f4:03:e4:7c:76:91:92:e3:01:8f:4e:
05:96:f5:27:88:8e:f1:4d:c3:d4:d8:f1:4f:c2:4c:fb:bf:45:
69:e6:13:ac:2b:a4:2d:e9:de:ab:57:03:19:52:3b:75:f9:09:
ad:0f:10:6c:3d:8c:87:1b:40:d7:ef:80:14:a3:aa:0c:cb:87:
de:0e:96:11:17:c6:de:90:5d:6b:a2:65:01:04:48:51:7d:c1:
08:5c:5c:5a:e5:11:1d:13:50:b4:52:39:fb:f9:ad:1d:2a:4e:
26:04:44:5f:26:1f:84:f8:cc:12:40:aa:d5:e0:a4:6e:cd:ea:
23:a5:23:aa:da:db:5e:5e:05:54:7a:56:df:1f:bb:f3:3f:f7:
76:82:55:9c:19:95:62:e7:bb:1a:0e:e5:18:2a:1e:87:41:65:
9e:59:d4:c4:b4:1c:f8:18:ac:cc:3c:f4:37:6a:1f:3c:05:cc:
88:c4:86:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:28:14 2025 by rpki-client