Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
File: VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft (raw, json)
Hash identifier: sXeGLa8jCegy2URw40T3kiXeVTLbhqbtBdWiU89lcQg=
Subject key identifier: 58:B1:AA:62:70:07:FE:13:7C:CC:3B:46:8A:1A:2E:28:F5:75:BD:B1
Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Certificate serial: 019A52D1CB070A0151313BF27601CB061AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
Manifest number: 0E18
Signing time: Wed 05 Nov 2025 07:01:11 +0000
Manifest this update: Wed 05 Nov 2025 07:01:11 +0000
Manifest next update: Thu 06 Nov 2025 07:01:11 +0000
Files and hashes: 1: 1evcMDo7pi-aA6SWjQJ5C1thyaU.roa (hash: xYDgN0KV8Q5QXfbFX/hw20fHK9cnWhX/isL2BXocmSw=)
2: BFOQ1xipYhPtnW3G70pfAnmzwzg.roa (hash: /+UHFdHIIgWbmriMU+n5ynXyWKvmniC4nJpXONs4/qY=)
3: ISS1nVoFj6vql40oL7xs039XkbE.roa (hash: Uj1JIR2yGWgQKTO1hh05hzaRctOY0c3hfi9SPLtZHjc=)
4: VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl (hash: Q92S+q6BdbnsMa+M0YwwW4mSCj4kTIXAAgc2MBbUljI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:cb:07:0a:01:51:31:3b:f2:76:01:cb:06:1a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Validity
Not Before: Nov 5 07:01:11 2025 GMT
Not After : Nov 6 07:01:11 2025 GMT
Subject: CN=58b1aa627007fe137ccc3b468a1a2e28f575bdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:16:95:b4:ad:fe:33:24:ad:de:42:38:c7:8f:
d6:ba:e4:9a:f8:7a:92:2b:80:d9:bd:9c:3b:b7:a9:
43:3c:1e:52:6d:02:ee:d8:22:6d:55:0b:7b:52:29:
69:2a:88:2d:10:aa:9d:a2:ae:38:0b:c2:3d:03:08:
43:7c:c7:67:5e:90:ef:83:7d:c9:64:f3:33:27:e3:
b6:da:33:9b:8d:6f:10:57:b8:b8:00:76:aa:40:c9:
ff:52:b7:97:e6:9a:92:b2:f1:1c:7b:e9:e5:05:3c:
02:84:51:48:7b:3c:c9:46:a8:be:b5:0f:c5:d0:cf:
c2:43:90:c6:07:87:b1:ce:6b:27:ad:cf:51:14:75:
c0:3b:ad:42:9c:4b:22:56:dd:27:e7:0a:e9:a6:59:
49:c8:0d:63:b2:17:94:94:2b:e1:52:f2:ce:77:73:
b2:46:68:a0:45:9a:1a:d6:f8:1c:89:13:53:ed:7b:
50:9e:0d:cd:7b:f1:30:07:3e:eb:97:91:eb:7e:08:
78:0d:c0:aa:34:4a:93:d4:6c:ee:e2:7a:9a:a5:6e:
82:96:82:39:c0:3d:f4:97:06:19:0e:49:ac:84:d3:
ba:20:0a:19:90:16:60:46:cd:13:ca:45:33:e0:a3:
f3:06:d4:dc:0c:08:76:97:b1:3b:a7:22:84:85:5b:
87:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B1:AA:62:70:07:FE:13:7C:CC:3B:46:8A:1A:2E:28:F5:75:BD:B1
X509v3 Authority Key Identifier:
keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:43:f5:c2:fa:1e:a3:99:95:80:2f:c7:51:14:90:04:a3:ac:
b2:23:0f:8d:27:80:c5:b4:1a:f6:ba:73:48:4f:6b:ff:cc:77:
71:90:44:08:d3:7a:4e:e3:0f:68:a2:56:c1:48:b1:88:4e:bc:
7b:09:a7:7f:29:61:ad:65:4e:84:25:53:f1:e5:16:0c:6c:f0:
d4:c4:41:ec:3c:c5:cc:54:1e:74:23:fe:be:16:cd:a4:77:64:
3b:7e:78:68:3e:ff:8c:e4:a7:df:82:dc:18:83:20:9d:a7:ad:
28:44:1b:47:81:90:96:df:d7:5c:9c:de:59:e7:6d:72:40:52:
21:8a:de:fc:4b:04:96:fc:e2:26:8f:74:21:47:2e:a4:b9:19:
d6:84:56:8a:cd:b6:bc:03:69:a4:6b:f0:96:9d:31:d3:77:68:
61:d6:7d:32:f2:f3:7e:fc:45:11:a9:58:80:96:06:b7:2d:82:
d7:29:6c:de:40:02:1f:bc:17:eb:a4:f9:d0:0f:6b:29:6b:9a:
53:05:d2:7b:02:56:9e:04:7e:dd:bf:a4:8a:cf:bb:ea:09:ef:
e8:9d:50:3c:8d:5f:3a:46:5c:c9:83:7a:8d:db:2d:0e:21:53:
62:56:3a:12:76:f5:c3:a1:0d:75:be:4f:50:eb:36:ab:df:25:
23:96:2c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:05:56 2025 by rpki-client