
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.mft
File: Vw0bOThaPe0e8GPRob6TWTtx_C4.mft (raw, json)
Hash identifier: 3a+ODAXGJo1lsslEF9tZS+1eOu2MXPiRBdVDaYgX4+o=
Subject key identifier: A4:72:AB:CD:24:E6:13:E1:3B:E0:1A:73:63:4E:01:E7:18:25:18:C8
Authority key identifier: 57:0D:1B:39:38:5A:3D:ED:1E:F0:63:D1:A1:BE:93:59:3B:71:FC:2E
Certificate issuer: /CN=570d1b39385a3ded1ef063d1a1be93593b71fc2e
Certificate serial: 019A1EAD16C4EC9F46D7D49B0079775942F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw0bOThaPe0e8GPRob6TWTtx_C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 04:00:51 +0000
Manifest this update: Sun 26 Oct 2025 04:00:51 +0000
Manifest next update: Mon 27 Oct 2025 04:00:51 +0000
Files and hashes: 1: Vw0bOThaPe0e8GPRob6TWTtx_C4.crl (hash: h0o09uvcikHoSf50t6r17qx6UMvb7zdRasJM8McInRo=)
2: z0sOswKWl1BfFqaGXhPtCyAmPYc.roa (hash: Co3I3DKAzKoyofP77im0ZyVkq8yZfseQvsLlvfdI85s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw0bOThaPe0e8GPRob6TWTtx_C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:16:c4:ec:9f:46:d7:d4:9b:00:79:77:59:42:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570d1b39385a3ded1ef063d1a1be93593b71fc2e
Validity
Not Before: Oct 26 04:00:51 2025 GMT
Not After : Oct 27 04:00:51 2025 GMT
Subject: CN=a472abcd24e613e13be01a73634e01e7182518c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ba:af:8e:a0:f4:c1:03:08:f9:84:d6:6d:a1:
6f:20:58:18:a9:af:65:14:76:a4:ab:30:74:a1:cb:
35:35:17:d9:77:27:8e:6a:7c:43:08:5e:a2:a7:86:
50:ab:0a:69:84:0d:e4:90:6f:d0:90:1e:09:8a:f2:
c8:4e:32:fa:7b:ea:f3:61:45:7b:0f:40:43:f9:ce:
f4:83:19:f9:55:21:22:d3:71:21:54:90:8e:d2:6a:
c6:8c:6b:9d:78:ed:a8:ea:86:79:78:42:bd:27:c8:
dd:a5:f9:2c:b4:b3:aa:33:8f:b0:3a:4e:74:c9:10:
56:d6:c8:4e:eb:8e:8b:ec:ba:db:be:9d:e1:46:bb:
f7:89:d5:ed:1d:02:a6:d4:79:90:82:6f:89:92:6a:
f8:6a:6e:93:c8:17:af:dd:2d:98:01:82:32:c9:b1:
31:d9:db:fd:4c:a7:48:e1:8f:0f:7a:41:9d:64:0d:
3f:bd:cb:71:c2:c8:3b:1d:16:a0:63:ce:6b:f8:0d:
2d:45:4a:73:bc:1d:ce:3b:28:5d:d3:9f:c7:11:ff:
ee:a3:85:5e:b1:9c:62:b9:35:22:76:c9:bd:13:95:
95:2a:fd:29:99:3f:07:8c:fc:c2:c0:4e:06:a1:d0:
39:45:65:ab:e2:54:61:59:24:56:93:a6:1a:65:ee:
81:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:72:AB:CD:24:E6:13:E1:3B:E0:1A:73:63:4E:01:E7:18:25:18:C8
X509v3 Authority Key Identifier:
keyid:57:0D:1B:39:38:5A:3D:ED:1E:F0:63:D1:A1:BE:93:59:3B:71:FC:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw0bOThaPe0e8GPRob6TWTtx_C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8f:cf:23:91:81:84:16:45:9e:bf:1e:5a:e4:67:5b:b2:ab:
49:f5:98:d5:9d:20:31:6d:f3:59:b4:dd:ec:45:4b:15:5a:85:
5c:06:40:77:59:80:bf:c0:4e:94:09:b6:e0:ae:7e:de:17:0e:
01:73:4d:85:bc:10:09:b1:ae:e4:cc:d4:79:53:61:72:11:dc:
1c:3f:18:67:ee:68:a0:bc:21:17:20:ba:c7:9b:f9:52:6d:45:
62:20:ff:9d:be:15:ea:c3:78:93:61:3f:fb:fd:6f:30:fc:83:
53:12:b0:38:d7:5f:04:68:69:a6:13:fc:3c:b9:a7:08:de:0a:
1a:09:7f:69:75:60:6f:74:15:66:a0:cd:6a:47:ad:01:38:44:
e1:4c:80:06:20:8f:2e:33:ef:35:9c:ba:94:88:bc:50:5b:93:
4a:ee:a1:4c:70:8c:5b:1e:dc:75:b4:a4:e9:f9:28:38:bb:0e:
c4:25:6e:f2:2e:cf:50:a9:e0:94:e8:84:c6:bb:6a:4a:18:69:
a1:e9:c8:15:b0:22:c6:ab:96:b4:5f:35:2f:52:97:85:35:04:
1c:fb:1f:9f:61:db:37:f4:3b:71:8b:33:ff:75:4f:ec:bd:85:
67:45:a1:58:17:48:21:a7:a7:4c:6e:72:a3:fd:c0:7c:30:78:
bf:09:f7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:09:34 2025 by rpki-client