Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
File: vqe2d3e5poMpM1dkl7RqmxYwTNk.mft (raw, json)
Hash identifier: ybXvIdXDm6Nj0z5mNX7GKbCandf0xrtnijBqCBEBDRc=
Subject key identifier: AA:7E:21:E9:62:BB:77:F2:2C:A8:AD:8D:5F:5E:ED:87:82:A1:36:5B
Authority key identifier: BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9
Certificate issuer: /CN=bea7b67777b9a6832933576497b46a9b16304cd9
Certificate serial: 019A4C9810485155D16CA47432D524DE1E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
Manifest number: 154D
Signing time: Tue 04 Nov 2025 02:00:25 +0000
Manifest this update: Tue 04 Nov 2025 02:00:25 +0000
Manifest next update: Wed 05 Nov 2025 02:00:25 +0000
Files and hashes: 1: sf1KX3-278D909_VQvgz_1jkfVI.roa (hash: zN2i6GvyNGlDViFzbVFFZ6ISLkchZMIvYNFAKpwZnH0=)
2: vqe2d3e5poMpM1dkl7RqmxYwTNk.crl (hash: p/TXR2o/uMzMlVd1+6QWsPB5tHKWVoMCIkl+G5yMX7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:10:48:51:55:d1:6c:a4:74:32:d5:24:de:1e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea7b67777b9a6832933576497b46a9b16304cd9
Validity
Not Before: Nov 4 02:00:25 2025 GMT
Not After : Nov 5 02:00:25 2025 GMT
Subject: CN=aa7e21e962bb77f22ca8ad8d5f5eed8782a1365b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7e:b5:d7:30:2b:8d:22:d4:0b:4f:9c:3f:03:
03:08:75:e0:a1:1d:48:41:1c:2c:6f:0a:76:b2:8b:
dd:b7:f2:99:f1:9c:89:29:75:85:9e:b0:9c:26:3f:
f5:b8:ec:18:8d:a3:63:89:87:cb:e9:be:5d:ee:39:
8e:7f:ca:f7:91:99:53:e4:c3:5a:e0:1b:37:a0:77:
9a:d5:77:ff:99:03:45:7d:83:ab:c5:58:a0:29:52:
7e:88:9f:46:db:81:27:61:da:93:2a:fb:cb:ac:02:
d9:6d:aa:d4:7c:e8:86:0e:44:eb:3b:b0:6a:6e:01:
fb:71:dc:98:b0:38:df:97:86:a3:de:73:76:68:a6:
8b:97:a3:33:9f:87:90:b6:c1:d9:2b:25:52:e9:66:
bb:73:25:6a:9b:08:5a:78:42:d4:d3:e0:16:d8:0b:
e6:d4:d8:cf:56:09:de:53:eb:a5:11:9f:ae:f7:66:
6d:e4:57:5a:5d:4a:ef:4e:d5:be:e7:73:e1:6e:26:
1a:a1:8a:60:73:c9:08:5e:70:15:74:7d:86:d3:0c:
6f:4f:e8:ac:0b:0f:1b:d8:6f:ff:aa:63:82:77:cb:
f5:b2:1b:9e:8e:d4:b1:6c:77:be:d6:d7:a8:bc:63:
6b:e2:a3:b1:05:49:d2:cc:88:dc:62:e4:2f:49:42:
36:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7E:21:E9:62:BB:77:F2:2C:A8:AD:8D:5F:5E:ED:87:82:A1:36:5B
X509v3 Authority Key Identifier:
keyid:BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1b:4c:d2:24:da:93:e7:d1:86:bd:13:a6:0d:98:d9:35:b2:
54:82:56:4c:f1:ec:8a:b8:a4:ad:0a:20:2e:94:21:dc:83:a1:
1c:ca:6a:c0:e4:32:e3:65:4b:4f:26:46:dd:4b:07:b7:ca:43:
b0:67:4e:8c:24:b1:cc:3e:3b:ff:11:e7:98:f4:08:38:3d:e1:
a7:de:05:9a:3a:2c:41:21:72:ef:48:bb:97:ea:b7:6a:70:30:
14:18:1c:b1:c0:f3:a4:1d:51:66:81:57:f8:13:c4:69:f0:b4:
3d:68:3c:5f:35:60:13:1b:a5:f8:ab:91:2f:e7:77:57:1c:d5:
75:dd:77:90:3f:34:a2:91:b1:0c:28:05:84:61:3b:d0:4c:8c:
f6:04:b9:7c:22:01:f4:d9:c3:70:4d:e1:e0:fa:3c:81:29:7b:
80:53:34:1e:dd:e0:4e:84:02:f8:72:7d:ed:6c:02:9b:6f:40:
52:10:2f:6b:8d:7a:39:64:71:d6:b8:a8:db:be:30:0e:48:51:
b4:f4:7b:5f:95:4b:c3:4d:c0:bf:85:38:c9:21:ca:3b:82:23:
98:8b:5a:a1:7d:8b:7f:a7:9d:b7:2d:e8:62:aa:1f:ce:7c:ac:
52:f2:89:e9:94:6a:fd:05:33:a6:91:83:cd:ff:db:bd:3a:74:
7e:ae:86:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:56 2025 by rpki-client