Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
File: VytO2SaC1xio_ESIFAAnQGlgeV8.mft (raw, json)
Hash identifier: VV/X6F7ATD+NcxYRYXzVudsLhQPLxnT0FgH5HYO0nIg=
Subject key identifier: 25:8D:A7:6F:53:90:46:ED:99:3A:D2:A2:0A:B9:41:30:F6:98:8F:87
Authority key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
Certificate issuer: /CN=572b4ed92682d718a8fc4488140027406960795f
Certificate serial: 019A51BEF2E7390E681A1CACD52135589EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
Manifest number: 0D6B
Signing time: Wed 05 Nov 2025 02:00:59 +0000
Manifest this update: Wed 05 Nov 2025 02:00:59 +0000
Manifest next update: Thu 06 Nov 2025 02:00:59 +0000
Files and hashes: 1: 8R_SRNPLxmibFS1usJIWud4x3Z8.roa (hash: b2dIcGiMsdbDXAx7DhwSvU4UC5F6aoWQ/Pjpo9tIfQA=)
2: HSPZejR5lJB8cqlG1i1XbvBd4AY.roa (hash: LYg4VkRRLjikz7I2hzCQk0ST28urIdVmK83g08e6nBA=)
3: VytO2SaC1xio_ESIFAAnQGlgeV8.crl (hash: 4b+D3fb3HbiX8y34jusVQCRlSwerh3XGmsQnvptZgSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:f2:e7:39:0e:68:1a:1c:ac:d5:21:35:58:9e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572b4ed92682d718a8fc4488140027406960795f
Validity
Not Before: Nov 5 02:00:59 2025 GMT
Not After : Nov 6 02:00:59 2025 GMT
Subject: CN=258da76f539046ed993ad2a20ab94130f6988f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0b:fa:fb:0a:de:2a:0d:c4:d9:ce:2e:e9:f2:
f3:ac:71:97:76:9d:7d:fc:04:38:02:ed:57:86:14:
fc:d3:18:53:73:6f:f9:6c:95:18:3f:0e:02:0b:56:
d7:c9:cc:31:8a:52:ee:6e:de:a1:3e:5a:59:b5:6e:
fe:b2:cb:2a:9d:1f:0c:8d:78:08:34:30:5e:6d:cb:
00:cf:31:f5:ba:c4:09:5e:b3:eb:58:d4:35:f6:d5:
b1:44:41:b1:d3:eb:4e:05:5a:33:48:cd:af:75:a1:
5a:9d:83:49:56:93:2a:14:28:a4:b1:25:4f:c7:58:
dd:a4:9e:9d:1e:5e:e2:8a:c6:be:50:a0:d3:21:b4:
43:e4:3a:47:df:70:6a:3e:41:c6:08:bf:09:aa:61:
bd:df:b8:c6:19:a3:5b:aa:45:35:9c:93:aa:c4:4f:
a7:29:54:82:36:ab:be:87:a0:eb:c2:32:7f:32:88:
16:b2:f2:55:72:0f:ec:f1:3b:eb:ac:ff:d5:58:be:
7d:46:af:08:63:39:1e:da:a0:44:ce:20:09:29:3b:
30:93:cc:8c:ff:22:49:9d:97:fb:64:cf:15:26:14:
45:2e:6f:da:81:39:55:bb:6c:19:73:c8:58:73:2c:
93:34:e5:0c:d9:6c:e9:53:c6:a4:6e:de:71:8a:bb:
d1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8D:A7:6F:53:90:46:ED:99:3A:D2:A2:0A:B9:41:30:F6:98:8F:87
X509v3 Authority Key Identifier:
keyid:57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ea:a7:f3:68:fa:ff:5f:86:28:03:ab:ec:0c:ad:c4:5c:70:
c0:da:8e:9d:fc:dd:7f:31:37:3a:75:15:09:bc:e3:d6:79:49:
8b:7d:49:f0:84:f6:9f:8b:a1:d7:e9:e6:07:fd:83:c6:2a:a9:
0c:ad:ff:90:cf:7e:51:fe:56:0e:54:bd:4d:0d:fc:5d:42:73:
93:09:cd:21:5b:a5:09:fb:5e:c9:d5:2e:e6:57:a1:cb:04:53:
70:c4:46:34:b8:dd:b2:3a:1b:72:dc:b8:4c:88:16:d6:8b:83:
ae:e8:86:af:2b:40:b0:70:b0:4c:01:97:7e:62:44:17:db:8e:
72:b2:d3:64:d2:bd:b8:eb:c0:16:6a:6b:88:3e:79:9f:c8:4b:
d4:8f:40:b2:9f:c5:ab:33:03:ff:f2:f7:20:13:44:b6:f2:42:
c1:c7:4e:e1:f9:1b:e5:84:c6:ed:2b:4e:80:6b:65:3b:e6:c3:
83:88:7d:98:47:6c:e8:29:c3:fb:6a:4c:b7:12:ea:67:d7:9a:
b6:ab:68:29:92:55:a0:87:ca:7f:ad:99:b3:ff:d6:27:fb:a8:
69:41:d3:e2:91:f7:b4:0a:3e:0b:57:b1:ab:61:f9:c8:77:43:
48:ac:86:f3:b9:1e:60:7c:4c:0c:aa:74:99:5d:6c:3e:0f:29:
09:f7:9b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:11:52 2025 by rpki-client