Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft
File: VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft (raw, json)
Hash identifier: Z48k/Zj4JCKxXqCQHuz/e73yFJfBgk8x3ZCEMLFIy/M=
Subject key identifier: 59:C0:9A:CB:68:E5:22:01:CD:4D:01:01:46:B9:DB:09:5A:E0:1F:D2
Authority key identifier: 56:7A:C9:BF:0B:E9:1E:0A:48:66:4E:C8:B6:A6:77:09:57:A2:10:20
Certificate issuer: /CN=567ac9bf0be91e0a48664ec8b6a6770957a21020
Certificate serial: 019A4DE1EC7EAAB1C23DF6753C883181D586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft
Manifest number: 08D6
Signing time: Tue 04 Nov 2025 08:00:42 +0000
Manifest this update: Tue 04 Nov 2025 08:00:42 +0000
Manifest next update: Wed 05 Nov 2025 08:00:42 +0000
Files and hashes: 1: VnrJvwvpHgpIZk7ItqZ3CVeiECA.crl (hash: WbWGSHTZSQ5WLHsR5RqpiCsu7TbF9TeJ1M6q6zaxTd8=)
2: fpTc9psmK7mTVjaSZo_0_yvBUR8.roa (hash: UgVFOd+QOH0JwGcBKTwjgIfFrgkGab/yr0muy+SkJYQ=)
3: gNhY-7xJdUQMRPrX1gO8ZeGI4wU.roa (hash: dZtdS8i5eIi4mWSH+iDQCD3utKdV+69DN6KDuyKoQuo=)
4: xMtzp4-tdYsNsJ-wu0ECePe81Q8.roa (hash: gr9W9qCoJ0ynru/M4KfrGWZeR9TrsFz5r0lqSWOfJkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ec:7e:aa:b1:c2:3d:f6:75:3c:88:31:81:d5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567ac9bf0be91e0a48664ec8b6a6770957a21020
Validity
Not Before: Nov 4 08:00:42 2025 GMT
Not After : Nov 5 08:00:42 2025 GMT
Subject: CN=59c09acb68e52201cd4d010146b9db095ae01fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:62:f3:21:0d:37:62:49:88:d4:2b:56:55:
87:dd:30:67:19:d1:8d:90:0f:93:96:a6:51:c6:ce:
44:8a:03:7b:4b:95:10:86:b0:c4:f9:1b:1b:72:7d:
70:bf:fc:50:42:33:0c:8f:33:95:60:ac:a3:b4:b6:
ca:b0:e3:37:84:bf:6e:af:30:64:d5:30:9a:b6:28:
4a:fa:bc:37:75:75:ff:e9:7f:91:dc:d6:22:b6:81:
15:02:ef:43:e6:d0:b3:25:25:6f:d0:dc:c0:6b:f5:
fd:e1:b5:4b:bf:69:00:49:68:aa:db:c6:2f:6e:aa:
03:90:d8:06:89:b8:b5:5c:92:82:7d:83:bf:8e:ff:
e1:09:7b:8e:dd:50:d1:3f:88:e8:75:6b:3c:34:eb:
cf:cf:5c:33:50:d5:8b:c3:ba:1b:51:b3:13:55:49:
8a:66:2f:5e:90:78:b6:7c:59:40:e7:df:fb:ea:ff:
04:aa:75:a4:d0:28:55:f2:95:e9:a2:2b:95:bd:46:
6e:12:94:68:22:69:7e:9e:d3:91:fa:47:52:36:4c:
96:b3:5f:34:65:f2:f5:0a:b0:6e:a9:d4:67:30:70:
32:20:dc:47:93:db:91:9f:72:cf:64:51:91:8c:0a:
9c:d3:41:e8:44:d7:76:75:47:58:5d:be:b9:5a:fa:
0a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C0:9A:CB:68:E5:22:01:CD:4D:01:01:46:B9:DB:09:5A:E0:1F:D2
X509v3 Authority Key Identifier:
keyid:56:7A:C9:BF:0B:E9:1E:0A:48:66:4E:C8:B6:A6:77:09:57:A2:10:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ff:82:97:c2:b6:98:6f:da:a7:99:10:1b:ba:cf:e1:6b:0c:
ea:5a:ac:76:54:45:c1:70:c6:7f:df:db:cf:74:0c:68:de:df:
bb:b1:50:7c:58:a7:c8:67:9c:65:49:af:7b:0c:e3:c1:fa:6f:
11:63:c4:1c:db:d5:9e:4d:0d:ec:23:5d:21:40:2e:cd:e3:43:
b2:11:fa:30:83:9f:73:b0:32:49:0d:87:be:70:7c:e4:d4:8c:
64:39:e6:da:7d:c8:7a:d0:21:b3:64:03:f7:ef:94:fd:e7:dc:
4e:6c:bf:75:28:be:44:ac:2d:17:06:2c:9b:ad:f3:16:9f:7b:
9a:44:da:89:25:92:61:01:76:22:e1:2c:a4:c8:5e:32:3b:4a:
37:41:2e:36:6d:0d:6b:1c:9b:49:25:4f:df:0b:f9:f9:f2:b3:
8f:c4:4a:94:03:0a:6d:f5:c0:44:f9:37:f7:37:2e:1f:87:da:
71:a0:5f:c6:a6:b6:c4:ee:37:89:f1:00:24:74:34:5a:e6:e1:
73:d6:d0:48:fb:c7:f1:9f:1a:75:f2:70:c5:4d:01:bb:13:b4:
df:9e:37:04:8b:1c:17:8b:2a:20:e9:dc:2a:3a:3d:0c:f4:b9:
d4:ad:4b:35:9b:f4:bc:3e:f0:e1:59:7f:52:38:04:c8:18:e8:
31:18:65:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:28:09 2025 by rpki-client