Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
File: VffKupvV-frB4BRadWfJtFmpXoY.mft (raw, json)
Hash identifier: nst/blAiEOBbNBEIl21sL1FID+Ko4pi3tTThOQT+zJI=
Subject key identifier: A4:F9:82:D0:B6:30:7F:AC:29:7A:70:AE:12:3E:6C:E0:9D:13:1A:CE
Authority key identifier: 55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86
Certificate issuer: /CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
Certificate serial: 019A526389383F4EF7ED705BAF064E8A26CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
Manifest number: 0896
Signing time: Wed 05 Nov 2025 05:00:46 +0000
Manifest this update: Wed 05 Nov 2025 05:00:46 +0000
Manifest next update: Thu 06 Nov 2025 05:00:46 +0000
Files and hashes: 1: VffKupvV-frB4BRadWfJtFmpXoY.crl (hash: pv4E6ng+7xj29rlMoZuURl+dzj1yd/2To7EkhJpH1JY=)
2: h9iKJvVZnfW0FXjotXiiLLyPbso.roa (hash: w8EgDiQ9haRr92gwy4BUjwQFbUX6Z1nbUCBqudVVAGE=)
3: tzSxEqbN9RPe7WLi6GpaqxSubiw.roa (hash: NQOfRB00StYv2rpk5RfPASO+YDaJlcYUJaTmyGg5oDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:89:38:3f:4e:f7:ed:70:5b:af:06:4e:8a:26:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
Validity
Not Before: Nov 5 05:00:46 2025 GMT
Not After : Nov 6 05:00:46 2025 GMT
Subject: CN=a4f982d0b6307fac297a70ae123e6ce09d131ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:13:1d:f2:fe:15:04:b5:a5:8c:0b:ff:01:54:
82:7c:f7:ba:aa:e6:a7:71:6e:db:25:4e:da:7e:16:
3d:87:77:d0:3b:9d:76:bc:1a:5d:c9:91:36:3c:c8:
9e:67:69:64:03:11:b4:b0:ed:52:21:b1:fb:ed:94:
cf:b9:2d:c2:05:28:50:c3:e0:ae:07:5c:8f:b9:fd:
05:1c:98:7c:33:d9:39:ad:da:e4:df:27:b2:55:de:
00:25:b8:f3:40:7b:5e:b3:44:c6:0e:de:5c:34:e1:
fe:79:2f:37:33:88:cb:f6:de:c0:fc:75:9d:2e:6b:
7c:95:7b:d1:ba:ff:f9:a7:f6:76:1c:99:44:46:5e:
9e:3b:9a:29:94:8e:96:05:6f:34:bb:84:08:ac:77:
4d:a6:c3:b1:c7:58:94:c9:9d:93:ed:bb:8d:60:f4:
ae:d0:2a:60:4f:55:9e:35:a3:1c:9a:ac:39:d0:37:
66:9c:f2:15:cd:86:1f:88:15:4b:73:a2:e1:6c:f1:
55:40:7a:6d:bd:62:a4:83:db:5c:33:b8:2b:df:1c:
9d:c8:11:eb:cd:85:96:f8:df:07:7b:42:5f:40:62:
24:7d:8f:ee:4c:33:7a:4e:03:7c:14:2a:96:d0:95:
8c:63:17:21:44:01:f1:17:16:f0:a6:a3:ed:c0:18:
fd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F9:82:D0:B6:30:7F:AC:29:7A:70:AE:12:3E:6C:E0:9D:13:1A:CE
X509v3 Authority Key Identifier:
keyid:55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e6:37:35:d0:7c:4c:d2:9f:03:9f:a7:bd:6f:56:aa:91:e1:
08:9b:1a:24:07:b1:dc:58:90:dd:03:6e:ed:51:77:40:ae:c2:
f7:e2:e2:9f:5a:bc:f3:65:0e:e5:ac:9c:25:ef:13:bd:52:ec:
50:71:4e:32:e0:21:46:21:a8:1c:ae:fc:e4:e6:5c:6e:91:22:
72:5b:dc:49:72:db:c1:4a:38:c8:46:71:ce:cb:3e:5e:bb:5f:
19:ee:3d:fa:99:f0:38:f6:8e:a7:0c:a0:ee:59:70:54:1a:10:
84:8c:3f:a9:6d:7e:f0:79:f8:9a:bc:39:c3:71:64:69:a1:5d:
da:67:39:33:33:8a:72:02:32:e6:05:85:3c:50:20:b2:89:b4:
9c:ce:ce:91:9f:5f:99:67:de:b0:ea:c7:3c:1f:0b:ab:da:f3:
2e:43:45:1c:05:23:98:d3:4e:81:eb:43:33:0d:4f:14:4b:5c:
e7:47:bf:3f:0d:89:fe:bf:2d:e4:c6:e2:f9:1a:62:a2:44:47:
31:cb:3c:c8:ad:c3:fd:1f:67:40:4b:95:fb:b6:df:a2:0c:6c:
86:a1:d7:50:3c:9c:d2:d6:53:14:e0:a8:33:56:f8:e9:3f:54:
5d:14:3b:6d:33:9e:c7:82:c5:2d:7e:fd:28:fc:47:96:db:06:
8c:87:3f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:50:49 2025 by rpki-client