Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.mft
File: VbKW1rU0_joyzBw6ToE1jyFsk8c.mft (raw, json)
Hash identifier: 8KHAjlX/Yly+iJv7Wr2qLdzFZXdfC9zvuoLFbVPx1tY=
Subject key identifier: A5:15:9A:CF:57:DD:95:B0:D9:E3:A8:27:54:B5:37:35:66:21:6E:97
Authority key identifier: 55:B2:96:D6:B5:34:FE:3A:32:CC:1C:3A:4E:81:35:8F:21:6C:93:C7
Certificate issuer: /CN=55b296d6b534fe3a32cc1c3a4e81358f216c93c7
Certificate serial: 019A4F994B0A32DA22CBBA927CCCDC553CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 16:00:37 +0000
Manifest this update: Tue 04 Nov 2025 16:00:37 +0000
Manifest next update: Wed 05 Nov 2025 16:00:37 +0000
Files and hashes: 1: 5ocQoC11UYHE7MAlgaQGWvaczPU.roa (hash: iv7afAQf2xr0bGM68RWq9ferYnOWxEUOxL5FekniOKY=)
2: 68E6bn0hVePr0xGHmIxiALHVplw.roa (hash: RTyJubUMJWoye01qJ5pHvztooF0m1t5g64s97nwns3E=)
3: 8FEhHGw9wmLDDLMIvN1maiYvyrM.roa (hash: fekRImdjTCCLyjdikCkBOo7LFrsEr8qmZXKpxKLQjLo=)
4: VbKW1rU0_joyzBw6ToE1jyFsk8c.crl (hash: yHgJ2igC+nU2l2ILEp6IZ4eAuLzevrmn99KY74ByfVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:4b:0a:32:da:22:cb:ba:92:7c:cc:dc:55:3c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b296d6b534fe3a32cc1c3a4e81358f216c93c7
Validity
Not Before: Nov 4 16:00:37 2025 GMT
Not After : Nov 5 16:00:37 2025 GMT
Subject: CN=a5159acf57dd95b0d9e3a82754b5373566216e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:44:de:78:33:ad:fc:15:04:4a:2e:e6:82:54:
c4:ec:c3:c2:89:ff:23:f2:82:28:c2:16:b9:f7:14:
44:1c:22:08:33:99:7b:50:7e:41:6a:a5:3a:21:48:
c7:25:14:4a:8a:5b:8d:ee:a3:85:f8:39:38:36:0f:
c7:c2:3f:5d:f3:4c:7c:c5:95:67:86:da:d8:f1:1c:
69:16:75:d3:65:8f:50:3b:b9:cd:57:f5:cb:d2:de:
bd:f6:5f:2a:5b:dd:85:2c:30:46:77:52:93:5c:a1:
65:8c:b1:65:49:15:e6:f1:ac:e4:08:7a:6c:e4:86:
3e:db:58:c8:88:bf:c9:3f:12:05:62:8e:6f:d6:43:
a2:89:43:c3:d2:2a:00:dd:5f:37:2d:19:8b:0b:3c:
d1:3f:39:99:16:89:b4:e2:19:f0:16:19:fb:cd:d8:
fc:9f:7d:2e:75:7e:34:a5:2d:b5:87:e0:0e:1d:e9:
93:95:e3:42:3d:fe:8b:79:e0:7f:f9:35:4d:c1:87:
1c:6d:26:47:63:34:93:49:20:c5:98:3f:45:47:98:
d9:51:5b:71:42:4c:d7:5c:0a:a4:01:3f:1f:e2:f9:
89:be:76:52:a5:84:c6:28:17:54:08:64:a5:38:87:
2c:27:5f:1f:85:9b:8a:ac:4e:2d:68:6b:5d:4f:f5:
cb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:15:9A:CF:57:DD:95:B0:D9:E3:A8:27:54:B5:37:35:66:21:6E:97
X509v3 Authority Key Identifier:
keyid:55:B2:96:D6:B5:34:FE:3A:32:CC:1C:3A:4E:81:35:8F:21:6C:93:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:16:4b:99:b3:8e:7b:22:b2:97:50:2e:c9:45:74:82:b6:59:
54:bc:78:c8:d3:f5:1d:32:8c:15:31:5e:d6:56:27:46:fb:94:
94:d1:96:da:54:99:e0:d6:e6:38:2a:71:01:a2:84:46:3a:82:
82:55:d1:af:9b:5a:71:f5:c7:56:19:02:87:0a:97:06:db:9d:
e5:62:28:bb:6f:ad:22:7b:b5:e7:40:f9:bc:02:8c:e0:52:35:
08:b0:37:87:d7:5f:da:6c:6d:fb:3d:2b:a9:47:1d:ab:04:fa:
d4:df:96:e6:41:1f:e1:b1:e6:20:e5:ce:36:8e:03:97:c7:4b:
87:ed:75:de:f0:88:cd:7c:dd:38:76:86:cb:90:db:0c:f2:cc:
c1:ca:b6:9f:f3:91:d5:27:da:c2:c2:2b:4b:4b:1e:8d:9f:08:
b2:f1:a8:cd:51:d9:20:3c:1b:00:02:d1:5e:6b:1c:c3:0c:86:
ce:f3:60:9d:cb:77:04:bc:4d:6c:44:52:c0:62:bd:59:65:ea:
82:ab:26:96:a3:5c:a8:12:d8:b1:ac:9b:41:e1:4d:d7:78:89:
40:d2:47:b5:90:1c:68:71:7f:88:39:e9:4e:9d:86:13:b6:12:
1c:b2:3e:f0:ab:e8:8a:9c:b7:4e:07:c3:b2:da:46:16:4c:4b:
da:d8:26:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:15:14 2025 by rpki-client