Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
File: VxRWZJaS5gVm3gCOEmu90dLr7UU.mft (raw, json)
Hash identifier: L/7pCbnYEPIrr52M5wNlZEftBf6/QyHcnGl2yHaSZNc=
Subject key identifier: 0C:45:CE:32:AC:8C:30:E4:CB:6A:25:0C:03:EE:AF:09:9F:16:91:24
Authority key identifier: 57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45
Certificate issuer: /CN=571456649692e60566de008e126bbdd1d2ebed45
Certificate serial: 019A4EF400DA78CCE0F95CB91E23825281CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
Manifest number: 0F88
Signing time: Tue 04 Nov 2025 13:00:04 +0000
Manifest this update: Tue 04 Nov 2025 13:00:04 +0000
Manifest next update: Wed 05 Nov 2025 13:00:04 +0000
Files and hashes: 1: VxRWZJaS5gVm3gCOEmu90dLr7UU.crl (hash: tqOySN3asUXWPpRTQOABxdkCfAmEhu3psW7kn/BNTow=)
2: t0KxoFR4-v-aF7ApZp5a51UCPdE.roa (hash: wDmBNX7FNw1Byb+j/pduuukElypr1eZvZiRjB9AwIB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:00:da:78:cc:e0:f9:5c:b9:1e:23:82:52:81:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571456649692e60566de008e126bbdd1d2ebed45
Validity
Not Before: Nov 4 13:00:04 2025 GMT
Not After : Nov 5 13:00:04 2025 GMT
Subject: CN=0c45ce32ac8c30e4cb6a250c03eeaf099f169124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:41:d0:29:f2:55:27:ec:57:67:6c:ea:33:
46:15:d8:fe:e7:4e:d2:eb:a7:5f:aa:9e:d5:bc:10:
0b:c4:71:60:20:80:e8:fe:94:a3:c0:14:10:ec:ab:
b2:7f:79:2d:bd:53:7a:d0:cd:7f:ce:ba:3b:db:33:
7a:e5:a2:5d:c5:7d:db:31:b6:2c:7d:3f:c1:63:62:
b7:ab:2c:62:a0:29:59:31:c4:ba:dd:e6:a0:0b:8a:
f0:86:59:38:53:7f:4d:67:d6:8d:07:47:70:92:cf:
d3:c0:00:44:f1:55:0a:14:8a:22:86:9e:d3:af:16:
bf:52:b5:e8:fa:d7:91:9a:ef:60:8c:13:b1:63:74:
04:33:1e:ff:f2:d7:bf:20:f2:52:e4:37:3a:cb:41:
16:75:91:0b:17:a0:8c:65:36:45:3b:30:69:ba:56:
b1:fe:61:02:68:65:b7:1a:ca:d3:bf:69:db:46:ea:
51:0c:e2:d0:87:34:97:a0:3e:51:bb:ef:dc:28:1f:
70:a8:b3:74:e1:67:52:01:3e:44:32:19:b7:08:62:
f5:c4:7b:14:ff:8c:75:96:78:9a:c9:55:a5:4e:0b:
9f:5b:c5:3a:f3:6d:30:5d:02:6e:fb:29:df:52:dd:
e3:37:44:65:2e:b7:eb:04:d5:46:7f:60:56:42:c8:
24:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:45:CE:32:AC:8C:30:E4:CB:6A:25:0C:03:EE:AF:09:9F:16:91:24
X509v3 Authority Key Identifier:
keyid:57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6f:fa:54:fa:f8:5e:39:70:98:09:9c:ce:76:fb:36:c2:05:
de:0a:1f:f6:bd:2a:78:f9:93:ac:4c:88:40:c6:93:81:c4:82:
25:fb:e4:b8:82:ce:d1:d8:ee:16:cc:e1:5d:ba:31:7e:1f:a3:
1d:87:98:b3:c0:f9:8d:17:ec:16:3c:52:23:ce:4b:8a:88:23:
e6:fe:19:72:ce:b6:3e:a8:fe:ff:49:8e:91:6e:c8:07:12:61:
27:5a:37:3c:c2:1c:2f:c3:c8:ef:c4:fc:fc:14:13:c0:ab:76:
71:1a:dd:07:13:fb:b9:28:9a:fb:ae:09:85:08:d0:ea:06:a0:
1f:f6:08:18:37:9b:54:70:4c:99:06:73:67:36:ef:44:81:21:
8b:62:38:35:1c:6a:1a:4e:aa:ea:f7:7c:07:54:6d:cb:0e:54:
a8:da:7b:14:dc:17:8a:67:09:5b:a6:1f:64:03:68:02:fc:dd:
b3:02:e9:69:85:dc:85:81:6f:1e:7d:43:dc:e3:21:6e:e1:ef:
dd:07:ed:35:46:6f:6e:64:4a:a0:22:9d:cd:90:a6:0f:92:ef:
db:b3:eb:81:58:b8:2a:f5:65:81:33:2e:d4:45:ac:2c:b7:ab:
de:f6:84:50:fe:46:28:61:74:d5:db:ca:55:7f:76:41:9c:63:
63:67:4c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:54 2025 by rpki-client