Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
File: vatssugHrs69fgOoCAj6sj2cRxY.mft (raw, json)
Hash identifier: /VHIAGWCT4Pigv82OEUdvJ27eZ8gWI2yRgYzZ5eDmts=
Subject key identifier: B2:2F:B4:3B:F2:2A:F4:18:36:73:0F:B8:F3:1A:02:A3:EE:E1:46:48
Authority key identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
Certificate issuer: /CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Certificate serial: 019A4D3CF3D457DFF55A5FF7086950FA9771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
Manifest number: 0A01
Signing time: Tue 04 Nov 2025 05:00:31 +0000
Manifest this update: Tue 04 Nov 2025 05:00:31 +0000
Manifest next update: Wed 05 Nov 2025 05:00:31 +0000
Files and hashes: 1: FiQ6326ULjytbcRmbnTQT53B6qI.roa (hash: oVfk3zFCZV+aJ9BHrRH3g14/uV9d1uVQ7Jx5xhv/0d8=)
2: P26iBMzDxpvH-LQZESUQTHncYxo.roa (hash: 3+DbSLlopFDVY7Piu2/Wt1KhQBxlA0+iBBO7seLQMiE=)
3: vatssugHrs69fgOoCAj6sj2cRxY.crl (hash: Eg5RNxBTYwlVokbHNNTnktluBsNkkjHIIRYHTg+cgic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:f3:d4:57:df:f5:5a:5f:f7:08:69:50:fa:97:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Validity
Not Before: Nov 4 05:00:31 2025 GMT
Not After : Nov 5 05:00:31 2025 GMT
Subject: CN=b22fb43bf22af41836730fb8f31a02a3eee14648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2d:6c:63:c9:63:f2:20:97:a5:3c:b2:50:47:
e9:0c:3d:3b:d7:67:fb:08:2b:cf:d5:59:0b:bc:77:
09:d9:c8:b5:49:e1:d3:aa:0d:49:7b:1f:c4:6e:97:
35:7b:0f:54:71:62:60:74:8b:44:5d:26:20:40:58:
4a:c6:01:0d:1d:51:f5:59:04:5b:02:df:9b:32:76:
5a:1f:54:32:6f:c6:45:bc:57:10:42:3b:ad:f6:c5:
9b:c8:52:dc:6e:34:7b:80:81:20:cd:a2:c8:94:b2:
e4:ee:54:a1:15:27:bf:6d:c9:10:fa:4e:d5:43:ea:
a3:b8:02:89:01:9d:a8:c1:ae:1e:cd:05:a1:1d:34:
d0:76:bf:e9:1c:12:e1:a5:3b:1c:c2:96:41:40:fc:
67:0a:ed:53:b5:af:1c:4d:a9:33:8d:89:73:96:83:
58:64:c0:3d:cf:8b:e9:6f:86:69:e0:50:a4:4b:67:
d4:45:3c:4e:e6:cc:21:b1:07:e3:13:64:6d:98:25:
d1:00:b0:70:8b:c5:ed:2f:b4:35:bc:ee:f4:15:af:
20:55:c7:9b:57:cc:fb:75:4d:3e:c1:ab:8f:89:3f:
16:27:c9:72:27:03:b5:01:cd:33:fc:01:39:09:d6:
55:f9:ae:e5:bf:c6:a4:a8:58:9e:11:56:40:e8:20:
74:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2F:B4:3B:F2:2A:F4:18:36:73:0F:B8:F3:1A:02:A3:EE:E1:46:48
X509v3 Authority Key Identifier:
keyid:BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:51:ac:c3:a1:04:e5:9b:fd:5c:44:8a:19:32:47:2e:0b:32:
de:b6:a5:e5:32:32:fa:35:b7:05:bc:ec:7d:6a:99:56:19:74:
1b:1b:c5:ca:1b:9f:8f:9f:7a:11:27:4e:19:74:39:ae:7a:b7:
3c:20:4f:20:38:08:68:55:e6:4c:40:e0:4c:83:15:a7:cf:02:
88:84:39:5e:e4:cf:66:c5:be:0d:73:87:84:be:d4:9e:f0:2d:
7e:d6:76:8b:e4:06:10:4f:48:61:35:aa:b1:28:10:8f:6f:f8:
08:63:5a:e7:d8:b8:8a:22:d2:f9:bd:7c:52:95:31:53:4e:af:
2d:79:bc:48:fe:ed:02:11:71:fb:b4:f8:05:86:8b:03:54:80:
d8:63:ad:3e:d6:5f:62:48:c9:a2:af:1d:98:f3:d4:2e:95:34:
bb:38:f2:6d:fb:fc:db:5a:10:32:83:e5:3a:a2:37:57:72:d0:
10:27:22:a5:0b:5d:81:84:e6:8b:82:77:dc:af:94:fb:6c:1b:
d6:a7:85:ed:7e:29:eb:62:ff:af:e0:1f:86:86:63:e9:8f:fa:
d4:e3:d7:6b:f4:25:b0:54:08:f4:6b:66:96:af:3b:31:06:a3:
28:c5:f9:7d:1b:64:0b:fe:31:1c:d9:ca:a8:8b:b2:22:30:d0:
48:6b:53:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:54 2025 by rpki-client