Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
File: VY3MXX5oh8lBrjsozjy_L7TyBgM.mft (raw, json)
Hash identifier: FmxucfD3CsViajgnhfIvwnlN07Tqez+4uFI3jtL+ijs=
Subject key identifier: A9:98:23:A5:C1:1D:65:92:A6:52:8F:8C:71:7D:AA:15:C7:AB:37:D1
Authority key identifier: 55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03
Certificate issuer: /CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
Certificate serial: 019A51BED8DB342BE7A1664F6C7F55A30028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
Manifest number: 165E
Signing time: Wed 05 Nov 2025 02:00:53 +0000
Manifest this update: Wed 05 Nov 2025 02:00:53 +0000
Manifest next update: Thu 06 Nov 2025 02:00:53 +0000
Files and hashes: 1: O6XxnBxdjAHrB6cqnybF-q5zhEI.roa (hash: I3o5BuOlE43DLGmjrJZTKVLwzcox6qkRQGzuUzhTBPQ=)
2: VY3MXX5oh8lBrjsozjy_L7TyBgM.crl (hash: tkwrmbIyqiesdP/JrvofFaw5F3u0M1VxnK7PKcEpw7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:d8:db:34:2b:e7:a1:66:4f:6c:7f:55:a3:00:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
Validity
Not Before: Nov 5 02:00:53 2025 GMT
Not After : Nov 6 02:00:53 2025 GMT
Subject: CN=a99823a5c11d6592a6528f8c717daa15c7ab37d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e9:68:18:10:2b:02:dd:68:ce:86:cb:3b:38:
e2:81:ab:57:f7:37:c8:21:a1:c6:be:cc:c9:4e:7b:
6e:f8:08:20:2d:dc:24:c5:aa:2f:66:5f:1e:c9:26:
44:d7:17:6c:b2:2c:e3:c9:92:52:d4:9d:0f:bd:8f:
85:82:e0:23:4f:e5:fd:d1:c9:54:9c:37:b2:73:38:
92:5f:13:90:54:c3:88:e0:65:fb:1d:aa:5e:42:bd:
1e:ff:b7:d4:76:82:4f:ee:98:37:13:60:59:85:c4:
f0:b3:30:64:01:e7:77:89:9b:ed:51:cd:59:2b:c9:
0d:b1:d7:30:1b:49:25:41:fc:a3:c4:8a:1b:2c:c9:
a1:05:51:47:81:16:84:06:99:fe:ef:a3:9f:8f:c2:
8c:f0:69:f3:61:47:85:87:66:2b:c7:df:80:fe:2d:
b0:0d:a4:10:86:ba:12:df:c8:e9:e6:1f:b1:0c:80:
8e:0d:d0:57:8b:a7:0c:68:4c:49:54:f4:29:7e:3a:
2f:46:50:9f:f7:5d:2b:72:a6:fb:8c:a6:f4:59:2c:
31:11:41:76:69:74:3c:1a:39:46:65:51:2e:67:7e:
2b:11:04:35:25:5d:da:f3:dc:05:3a:a1:12:b6:62:
03:13:25:d2:9b:2c:9a:4a:e0:df:72:93:e1:4c:33:
ac:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:98:23:A5:C1:1D:65:92:A6:52:8F:8C:71:7D:AA:15:C7:AB:37:D1
X509v3 Authority Key Identifier:
keyid:55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:cd:7e:e2:22:83:82:73:01:00:84:2f:ab:c7:05:85:78:e1:
90:0c:91:83:19:ab:aa:d5:54:ea:26:b4:e2:95:2c:5a:ce:bc:
d4:86:79:a9:da:13:aa:75:43:ff:7d:36:29:af:a0:69:a8:5a:
c4:3d:09:ec:01:49:6e:f4:2c:9a:ce:68:aa:49:17:16:f6:3c:
fd:58:40:6d:66:88:f8:86:e8:24:38:3a:aa:38:35:c6:9b:cc:
90:83:9a:96:1c:ac:9c:18:a3:76:b0:0c:d7:96:89:2a:44:7c:
9f:d5:8c:e9:8e:78:78:b1:65:65:85:e4:3c:56:2f:17:41:4c:
a0:c2:28:b3:ac:da:de:f1:02:4d:e9:fc:8f:1f:f4:f5:4c:ed:
fd:22:b2:13:c6:09:d4:0e:62:70:01:c5:0f:f2:6a:ef:2f:57:
91:eb:0f:e3:e7:5c:de:fc:8a:cf:21:53:19:b3:ee:ec:15:76:
8a:94:aa:cf:81:c7:67:66:67:05:7c:92:cf:ff:63:64:7d:19:
be:d7:20:2b:c1:91:1b:ad:7a:60:ee:64:4a:3f:2f:a0:84:1f:
81:54:08:8b:83:74:bc:cb:2f:62:e2:15:24:39:3c:69:2e:1a:
d9:cb:00:8a:ca:9d:62:88:73:d2:66:ba:27:4a:df:7b:13:5c:
95:23:2f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:14:49 2025 by rpki-client