Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
File: VbnN-LflPvzZeZsR50D1Vf1T9MY.mft (raw, json)
Hash identifier: nUTcNZdIJEZPahnwN6QA4CbI3S3Khov3ENZ5KlKh+x0=
Subject key identifier: 0C:22:AE:D4:33:1C:B5:53:1D:0D:82:0E:D7:E5:90:07:56:0A:F2:3E
Authority key identifier: 55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6
Certificate issuer: /CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
Certificate serial: 019A500736AE209EE1E87A0A925BFB935895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
Manifest number: 14A9
Signing time: Tue 04 Nov 2025 18:00:41 +0000
Manifest this update: Tue 04 Nov 2025 18:00:41 +0000
Manifest next update: Wed 05 Nov 2025 18:00:41 +0000
Files and hashes: 1: OEIiPrXdFUp5YXOck7o4s4rBGO0.roa (hash: zsHFam+CXLhObsumxLE2+jbhXix4p0SFjtst5VLxGeE=)
2: VbnN-LflPvzZeZsR50D1Vf1T9MY.crl (hash: a9Sy7i6+P37tuFlBU04E0U3gObmAIsLXclCM8kH3KWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:36:ae:20:9e:e1:e8:7a:0a:92:5b:fb:93:58:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
Validity
Not Before: Nov 4 18:00:41 2025 GMT
Not After : Nov 5 18:00:41 2025 GMT
Subject: CN=0c22aed4331cb5531d0d820ed7e59007560af23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0f:42:01:a9:3a:bf:8c:65:dd:c0:34:21:17:
96:b5:1c:bf:93:53:ae:21:1f:6f:e0:99:35:ef:99:
af:5f:f1:30:24:30:26:15:ad:18:12:6d:3b:51:14:
9c:86:ca:38:ad:2a:16:23:fc:70:0c:2d:d8:e2:79:
fd:90:4f:27:fa:36:24:89:75:ce:69:f1:39:8c:79:
28:91:7c:a1:61:3e:2f:c0:0e:21:47:d4:80:ca:65:
fa:c5:a5:d9:c8:02:9d:c1:12:c2:bc:17:61:00:fe:
11:e9:73:05:7c:c3:32:f1:0a:0e:96:27:cc:cb:44:
c1:a3:2c:a8:0e:dc:7e:aa:e0:f4:fe:d7:13:98:f0:
5b:6c:8d:16:94:72:aa:8a:1b:6f:f5:da:3c:67:14:
13:4d:04:43:1e:b2:73:f4:fd:c7:d9:ee:0b:67:7e:
0a:f7:4f:f9:9e:42:f7:27:9c:b1:99:1b:9b:64:fb:
2c:34:72:f7:ed:1e:9e:3f:b9:b4:67:b2:6b:0e:8e:
e9:15:c5:c3:79:56:54:97:68:9a:45:a3:64:be:62:
0d:03:c9:b9:f2:2d:5e:50:10:15:60:fd:17:33:7d:
d0:9e:79:23:6d:8d:e4:c1:3d:30:0e:c9:6e:8c:e4:
be:bb:21:59:1e:8f:3e:6a:08:8f:59:1b:d2:ea:b4:
10:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:22:AE:D4:33:1C:B5:53:1D:0D:82:0E:D7:E5:90:07:56:0A:F2:3E
X509v3 Authority Key Identifier:
keyid:55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:f7:b2:ca:c2:19:aa:74:25:1f:c5:24:a4:3f:f4:65:3f:be:
ca:af:ab:1e:97:18:aa:53:62:d6:29:62:ac:6b:f6:23:93:3c:
56:a4:43:22:66:7e:08:81:2a:1e:4b:c8:3a:4d:31:bb:89:0e:
7a:56:7b:c5:75:ee:4c:d5:12:a8:aa:bf:b2:da:a6:21:52:56:
94:41:ed:dd:12:55:0f:2b:a3:f7:08:df:07:cf:ae:18:09:e1:
78:5f:69:4f:21:35:f4:1b:9b:74:ff:87:a5:63:29:78:01:cd:
d7:ae:5b:9a:d0:06:b6:84:dd:ed:d8:0e:94:4a:b2:a4:70:9f:
b5:52:f1:37:46:5c:11:fb:cb:aa:73:7d:7f:ce:e5:91:79:86:
53:30:6f:05:e7:09:d6:3a:9c:f0:3f:6a:7d:e0:12:40:b5:45:
28:33:d7:a8:79:3f:05:bd:51:09:94:d0:df:46:c9:ba:65:8f:
58:5a:45:fd:19:8a:63:fd:dc:77:69:4a:c7:8f:c1:41:bc:14:
f1:1f:c0:6e:89:b2:58:10:06:64:9e:fd:8d:6a:0e:0a:8d:ab:
eb:07:5c:03:ce:97:36:e5:7c:aa:a7:c6:b3:ac:d2:98:2b:56:
8b:48:c7:0c:77:da:36:d1:27:a2:a5:74:d4:2e:a5:45:88:19:
93:6a:5b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:22 2025 by rpki-client