Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
File: VayAK4V_5CVyI6jlUIWlCzt3DsY.mft (raw, json)
Hash identifier: OCb4L8Dg47d8ezloBMsaOKtwBuiFrIKx9ZJSL/tBD74=
Subject key identifier: 3B:46:33:65:D5:DA:3E:63:7C:ED:F2:59:46:36:EB:55:20:1F:7F:3A
Authority key identifier: 55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
Certificate issuer: /CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Certificate serial: 019A4EF590FA488A0167868A6B08F278A48E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:01:47 +0000
Manifest this update: Tue 04 Nov 2025 13:01:47 +0000
Manifest next update: Wed 05 Nov 2025 13:01:47 +0000
Files and hashes: 1: 1INwuWU-BYXL6ew4aT-a1pXEbrQ.roa (hash: qzk46/IpEpqqazhTfDJLjV42Dwol04vFzCxQ5m0qkLc=)
2: VayAK4V_5CVyI6jlUIWlCzt3DsY.crl (hash: GpXoh4SKGB3ORAH2ZxHcUWIuflHT2KMGVgTqCiP3w0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:90:fa:48:8a:01:67:86:8a:6b:08:f2:78:a4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Validity
Not Before: Nov 4 13:01:47 2025 GMT
Not After : Nov 5 13:01:47 2025 GMT
Subject: CN=3b463365d5da3e637cedf2594636eb55201f7f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:77:28:20:a0:40:45:b1:23:94:d2:d7:1c:73:
ea:d1:31:1f:06:aa:77:04:61:91:64:d5:92:a7:74:
06:77:e7:85:02:39:6d:fd:26:55:1e:fe:53:5d:31:
a6:e6:0e:3f:b9:ab:a9:74:f1:06:84:2d:a8:02:ef:
6b:c0:44:cf:e4:0c:81:0f:fa:f4:a9:2c:0c:cc:0b:
df:7d:45:27:06:eb:3e:9d:da:c4:c6:53:b8:da:bf:
9a:58:d1:23:28:3b:40:e8:7a:87:26:99:f0:00:ae:
21:da:92:61:7d:a7:4e:b6:9e:ed:a0:95:5b:38:b8:
69:8f:b2:2d:7c:bc:0d:7e:2a:86:7f:9a:b3:f5:1a:
31:0d:79:a9:fc:8e:d5:e6:6f:6b:83:e3:5c:29:34:
63:79:11:4b:d2:eb:04:01:56:4e:cd:72:be:e4:87:
8f:e3:4c:17:56:32:77:e8:9c:93:e9:70:3e:ff:3b:
34:3c:f7:4f:57:f6:a3:f4:33:0f:70:92:ee:45:cd:
60:70:a8:eb:3d:04:44:6c:36:fa:2a:cf:1c:7d:3a:
3d:1f:08:04:30:60:66:09:8c:df:b5:b6:84:0f:69:
fc:c6:58:90:68:5b:c8:18:4c:9c:11:3a:ee:cc:bf:
8f:f6:08:36:fb:ae:cc:e6:80:b7:c2:18:4f:5f:d8:
5a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:46:33:65:D5:DA:3E:63:7C:ED:F2:59:46:36:EB:55:20:1F:7F:3A
X509v3 Authority Key Identifier:
keyid:55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5b:3c:e1:d2:95:4f:65:87:35:fb:2c:b8:90:84:c6:a4:51:
1d:d3:c2:2c:79:bd:fa:18:4e:e0:07:d2:68:69:21:07:3f:16:
7d:ca:b2:c8:42:57:a5:1c:e3:91:2f:83:ec:a6:48:75:9c:9e:
3b:5b:9c:4e:de:1e:f5:45:39:e1:02:f1:ac:2b:44:be:21:dd:
b3:36:38:67:ec:57:05:a9:10:5e:cc:2e:8d:01:79:a8:f8:5b:
e7:42:2d:82:f0:5a:e6:69:b0:fc:18:dc:f4:cc:13:29:df:19:
45:e9:8b:55:85:7a:bf:af:3a:6d:39:74:63:53:e6:ed:c8:c6:
45:2b:af:31:a1:23:c9:16:c3:85:a5:07:51:b3:a3:7c:9d:9e:
d3:dd:8a:4f:8e:85:47:7a:64:e5:a5:e5:ac:00:90:bf:2c:2a:
ec:97:56:3f:e9:1a:2a:ef:a4:04:c4:90:46:a7:2b:92:d3:12:
8d:e5:48:ee:9f:91:ec:bb:5e:c8:43:4a:db:1b:71:5c:e7:11:
9f:6a:88:1e:89:16:65:dc:d4:c7:4c:45:ca:f4:a8:18:62:5b:
76:bf:81:69:a1:25:a2:cc:e8:0b:4c:48:c8:cc:e8:2e:20:bf:
f0:dd:5c:1f:80:ce:ba:65:92:7e:0a:b5:bb:0e:5f:42:8f:c4:
cc:6f:69:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:37:37 2025 by rpki-client