Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft
File: VB_cei8RpXZtOte99iXOXhGaj98.mft (raw, json)
Hash identifier: QXLNVeVf7Qc0ez+Jfsyqh3+mFq1lJ2JAgkf37FoAqDo=
Subject key identifier: 92:46:F1:86:4E:31:73:4A:30:E5:80:93:BC:CD:20:54:F8:01:57:1A
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 019A522C7269470C0DFC649BFC3F3D498728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft
Manifest number: 150A
Signing time: Wed 05 Nov 2025 04:00:35 +0000
Manifest this update: Wed 05 Nov 2025 04:00:35 +0000
Manifest next update: Thu 06 Nov 2025 04:00:35 +0000
Files and hashes: 1: VB_cei8RpXZtOte99iXOXhGaj98.crl (hash: QxwnBTTlFZNavLMo2xfxdv90AOD7W5VUGgw1BYDdetg=)
2: _O08NAMTRYiI66s3j5CAN1Tnfbs.roa (hash: tT0fH123IaRd9D3zuV26RbVwu75ai0sfSAd21oMJcLM=)
3: zzuk5TnXNh6hkgchUhyabpDq5CY.roa (hash: wiwbvt+dkFmRx2XydJYHYR38aA8vAJf/mTvsPyYt9ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft
rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:72:69:47:0c:0d:fc:64:9b:fc:3f:3d:49:87:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Nov 5 04:00:35 2025 GMT
Not After : Nov 6 04:00:35 2025 GMT
Subject: CN=9246f1864e31734a30e58093bccd2054f801571a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:5c:15:fd:fc:2f:2c:24:19:bc:bf:d1:ac:
a2:ba:a4:4b:f5:8a:d3:90:15:e3:5a:1c:5a:9c:63:
7a:1e:45:44:f2:5b:74:d0:4b:21:5f:22:fc:55:d0:
f1:52:c6:21:42:be:97:60:76:fe:73:0f:9f:54:ff:
f8:fa:cb:e6:c4:bf:de:56:a3:d5:b6:05:bd:74:4d:
fa:ec:2b:c4:0a:af:5e:32:9f:dd:ad:d7:f1:57:1c:
7e:69:d6:8c:e7:d1:d9:1c:c3:a7:3d:6f:f4:b7:af:
44:39:7a:3b:04:87:69:8b:32:7d:71:15:87:c4:a5:
e3:e2:82:d6:3f:50:0d:35:ae:2a:9c:af:bb:9c:84:
56:e9:1c:96:0b:53:c8:96:b5:9a:25:38:34:59:0b:
88:30:dd:9f:f3:34:63:51:c1:79:e6:95:43:5c:4f:
45:72:f2:91:a6:de:55:32:29:3a:1d:76:41:e4:8c:
4f:f9:75:cd:61:e3:d1:99:8d:15:7b:66:59:d7:b4:
31:f1:86:94:37:d8:a6:ae:e1:0e:e9:af:79:0a:85:
b5:48:1d:94:e7:e5:ec:03:fc:ee:3b:0c:57:7f:ad:
ea:21:40:b1:c9:f0:76:e6:20:ae:8b:3d:bb:f2:ec:
e6:ce:e7:65:f8:3b:d8:3a:3a:57:68:20:31:7f:7d:
de:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:46:F1:86:4E:31:73:4A:30:E5:80:93:BC:CD:20:54:F8:01:57:1A
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ad:4d:9f:a2:c2:e4:6e:e4:6f:8c:fb:45:a3:9a:fd:ab:9d:
e3:2c:5b:4d:f2:c7:31:2e:e3:9b:29:f0:19:bd:52:1c:e9:87:
5f:a3:a3:2a:11:53:1c:1c:6e:6a:87:0d:28:59:2f:9f:76:39:
45:32:c1:72:b7:18:60:ab:26:77:8e:51:86:b6:ff:93:d9:4a:
ed:76:29:a2:19:84:b8:63:8a:9a:8d:5a:58:24:e9:82:c3:ef:
43:80:cc:98:41:c6:00:2f:8e:8f:8c:86:f1:65:02:d2:3b:fe:
2b:83:2f:9f:b2:a0:9a:fb:d5:03:4f:10:0a:04:4d:af:b3:af:
d8:4e:7b:47:d1:01:7d:df:87:2f:67:e7:9c:e9:68:c8:db:7f:
67:5c:be:03:c4:e9:41:24:12:76:22:8a:0d:bf:58:9b:5e:f6:
c0:c6:2e:0b:87:68:e8:43:07:f9:70:02:1d:27:d1:88:db:56:
1c:48:a5:8f:0f:78:31:ea:32:d2:2d:0c:e0:e0:3b:56:23:b5:
79:92:98:1d:e4:37:8f:28:68:ed:fa:8e:92:be:8b:ea:05:aa:
c6:a9:e2:e7:79:c0:1c:c4:cf:22:48:03:f7:bc:60:ba:55:0c:
9e:6d:52:04:bd:eb:6b:53:2a:3c:18:7e:de:de:ce:c3:cb:13:
92:59:67:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:52:58 2025 by rpki-client