Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
File: VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft (raw, json)
Hash identifier: gWFTljEmX0tZtPuBZw3WjveoyOqbcyGJ/WBhLW/twaI=
Subject key identifier: 9E:BE:60:8B:9D:59:F8:75:2F:B4:68:1A:14:27:C0:08:ED:92:4B:7F
Authority key identifier: 55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
Certificate issuer: /CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37
Certificate serial: 019A4DE20853BA07B83FA2B34DB7C0C87B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 08:00:50 +0000
Manifest this update: Tue 04 Nov 2025 08:00:50 +0000
Manifest next update: Wed 05 Nov 2025 08:00:50 +0000
Files and hashes: 1: VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl (hash: h4+Xxr51jLue3h8i38uSEHZM96sCl2LO6YVStq28LL0=)
2: ViwcSn5ZRd0_PQfWGy4jthVrawY.roa (hash: TCVE8gL/0uqzfZRMUKYxUNskH8cEgUmyJYuVh+KEfZM=)
3: r8eyn-TrAFLp_6mUjXoaqs5DTU0.roa (hash: /vknbDgQuhM62eluETPZRwPfDO3C56/MY/cEqhgERrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:08:53:ba:07:b8:3f:a2:b3:4d:b7:c0:c8:7b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37
Validity
Not Before: Nov 4 08:00:50 2025 GMT
Not After : Nov 5 08:00:50 2025 GMT
Subject: CN=9ebe608b9d59f8752fb4681a1427c008ed924b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:d0:54:b9:46:58:fa:05:06:36:77:6b:6f:
5b:a3:a5:59:88:08:00:9c:96:6c:d3:ab:5c:3d:4a:
49:e6:78:fd:9f:b1:17:b8:30:f4:cf:35:ed:41:4d:
b2:55:04:94:ae:9d:3c:af:66:b7:52:85:77:98:b0:
39:45:12:5e:07:99:51:52:46:0c:a6:0a:9d:ac:aa:
ed:43:1a:45:39:ca:1a:ab:84:34:7c:53:9d:0d:c1:
ed:7b:29:89:2d:bd:a2:a7:e9:33:d3:bd:53:80:c9:
5b:a9:d3:23:09:2b:cb:5e:b9:be:e3:aa:cb:06:b3:
fb:94:6f:34:8f:d4:fa:05:b1:fc:cb:18:55:61:53:
82:aa:64:40:12:cc:53:58:00:86:d4:a3:30:c3:78:
89:3e:fd:f9:73:0e:08:6c:ee:13:76:42:a8:6e:11:
87:6e:d7:44:c7:d2:af:dd:4d:15:bc:73:80:eb:9b:
03:18:2b:10:07:97:5b:09:94:89:ae:7c:a8:4a:a7:
af:c9:65:41:d3:7a:8c:b9:58:cd:01:ea:d1:7e:af:
8f:c3:73:ed:f2:62:67:57:e9:69:30:8f:81:2a:65:
e7:0a:3e:97:56:35:c7:9f:de:06:07:4f:0a:d3:ab:
f5:d0:98:61:32:91:00:90:28:09:63:df:40:00:38:
4d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BE:60:8B:9D:59:F8:75:2F:B4:68:1A:14:27:C0:08:ED:92:4B:7F
X509v3 Authority Key Identifier:
keyid:55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3e:11:d0:2a:38:83:ca:b3:64:73:a0:ad:92:9a:e3:4c:ab:
67:d7:8e:fe:4d:b4:32:2a:d9:fb:79:ca:ee:d5:4a:35:10:ce:
66:6b:9f:50:da:0b:61:3c:a5:0d:54:31:61:be:cd:e3:fd:8e:
02:e9:d8:f7:7c:e5:75:45:87:4c:96:a7:25:40:fa:0a:c3:47:
09:3e:1e:a6:22:53:ad:60:96:eb:6d:b4:08:e6:43:c0:c7:b9:
d4:7f:f2:42:18:89:74:ea:7a:fa:7b:bf:ff:d6:41:a9:2b:45:
3c:be:f3:28:47:8c:61:3e:9d:37:f7:b5:fb:b0:3a:78:dd:4c:
25:63:20:f8:a1:36:be:26:24:54:f2:54:eb:13:eb:14:d0:bf:
2e:65:2f:e6:f2:69:8a:42:b8:64:29:c5:35:c9:30:58:37:cb:
5e:84:17:8f:9c:94:52:c5:45:c3:4a:5c:a8:3b:fb:6a:dd:0d:
59:93:79:78:8e:37:3d:c9:ad:4d:4d:05:34:8d:fc:29:3b:77:
05:6e:8a:8c:e2:13:f2:e7:96:89:74:f6:c2:10:3f:be:21:91:
06:1f:2d:92:df:ba:69:33:c1:98:c6:79:83:9f:5a:44:90:66:
e0:50:bb:c7:b4:27:e6:94:a1:1e:de:5e:e5:f2:d0:86:ee:54:
95:0e:2a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:16 2025 by rpki-client