Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft
File: vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft (raw, json)
Hash identifier: 9vC7joSmk1L/m1vaIom6B/Jcew0uPZywt24D8Ci9Gvo=
Subject key identifier: 9B:1F:56:89:2E:2B:48:56:98:FD:16:3A:D9:17:A3:0C:72:BD:08:7E
Authority key identifier: BE:9F:15:9B:AB:83:66:1F:D9:3E:AD:43:0C:3B:DB:1E:AA:7E:AF:08
Certificate issuer: /CN=be9f159bab83661fd93ead430c3bdb1eaa7eaf08
Certificate serial: 019A4EF54560DBE09ED2B9CCEEBA71173BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft
Manifest number: 0F35
Signing time: Tue 04 Nov 2025 13:01:28 +0000
Manifest this update: Tue 04 Nov 2025 13:01:28 +0000
Manifest next update: Wed 05 Nov 2025 13:01:28 +0000
Files and hashes: 1: UTTH-IaK-KygVMC3443mlQMx1tE.roa (hash: KaccohMbQWCa0xUtmGU3VvPQYUMzJjUZd1bKqbI3gbU=)
2: vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl (hash: X4+Sd/u3Afb4M/ZNf/3ujUnDDXYwwO/cVN0iTKBY/3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:45:60:db:e0:9e:d2:b9:cc:ee:ba:71:17:3b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9f159bab83661fd93ead430c3bdb1eaa7eaf08
Validity
Not Before: Nov 4 13:01:28 2025 GMT
Not After : Nov 5 13:01:28 2025 GMT
Subject: CN=9b1f56892e2b485698fd163ad917a30c72bd087e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:51:c2:35:a1:d3:06:b0:f1:80:d0:5c:ff:2a:
9a:c2:66:6b:10:28:06:4d:7f:31:73:f6:b3:95:6c:
d5:8d:a3:48:f5:d0:16:65:34:5f:53:43:21:de:4e:
dc:2a:1e:b7:cd:b1:a9:3c:f0:29:43:a8:21:a9:84:
fd:3a:13:ff:36:e4:d8:06:4b:ed:b1:49:82:57:3c:
1c:60:42:b4:af:2e:b9:89:02:09:7d:86:6a:5a:40:
a7:b3:45:72:dd:2b:08:33:9c:0f:d4:f5:90:eb:b8:
54:38:42:d8:f6:8d:97:10:3d:d3:71:21:c8:eb:9b:
1d:e6:1c:ce:fe:1f:c7:ba:e9:82:c2:c6:8a:b1:9a:
57:70:15:a0:65:24:f6:15:2f:9a:64:15:67:95:fe:
19:b3:c1:69:06:aa:48:fa:9a:30:ab:22:6e:05:6e:
4b:a9:52:28:ea:b7:9a:ff:a7:14:15:ff:e6:9c:46:
eb:ca:30:fb:3a:16:26:43:bd:b0:de:03:8e:a0:d8:
21:79:45:fa:d5:81:92:24:d3:bc:a1:cc:9d:cf:90:
21:d3:40:47:9f:2f:d9:b8:2e:f0:6b:ec:b9:85:d6:
31:e4:a9:4c:e4:02:66:9e:fc:8f:7f:73:22:30:a5:
d9:29:d3:21:5f:9d:c9:42:6d:cc:b3:77:16:48:f0:
de:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1F:56:89:2E:2B:48:56:98:FD:16:3A:D9:17:A3:0C:72:BD:08:7E
X509v3 Authority Key Identifier:
keyid:BE:9F:15:9B:AB:83:66:1F:D9:3E:AD:43:0C:3B:DB:1E:AA:7E:AF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ed:ba:0e:c0:6c:79:42:ce:84:c4:90:e8:98:06:b0:e2:96:
81:d9:fd:96:24:5e:27:4c:71:09:2d:a9:69:46:e3:27:43:34:
9f:17:c5:1e:68:f6:e1:d5:44:ed:c0:26:83:bd:e1:67:3f:65:
4e:1b:88:27:d0:9b:24:fb:4a:d5:45:c1:db:6b:09:24:f1:b9:
d1:78:0f:21:3e:ab:88:57:90:99:9f:45:b1:46:b9:ff:37:8c:
3e:4d:26:78:75:3f:15:41:ea:c5:a2:60:00:cf:ed:68:94:24:
68:bb:b5:9a:ac:29:16:a4:e8:90:3e:69:1c:39:5c:78:8a:30:
16:14:8a:93:f5:c2:43:4a:bd:c6:a8:0d:ae:67:6e:a8:f3:3d:
b9:5e:6d:3f:d0:69:ec:36:c6:cd:7c:c5:d7:99:9c:0e:8a:15:
3e:7d:99:4b:fa:e1:47:e2:c0:44:10:0e:c4:f5:0f:83:e8:69:
3d:10:6a:19:0e:70:25:5f:fa:5d:25:83:0e:2f:83:a8:33:0e:
88:bd:97:f9:64:46:86:a0:8b:12:b6:0b:98:bc:06:64:3d:5c:
28:a2:31:b8:e4:f7:31:b7:7b:1d:00:35:86:4d:05:7d:3f:14:
f6:9b:5b:e2:2f:23:e3:0e:89:c9:33:f5:1f:40:29:cf:75:25:
ae:9c:e1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:27 2025 by rpki-client