Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft
File: VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft (raw, json)
Hash identifier: T15LzH3FSwbEw/MFLNsQy9luoeKVNbBQio0acjK0dOI=
Subject key identifier: 3F:67:96:BD:5C:F8:98:5A:86:8D:23:D0:DD:75:DC:19:8F:83:62:87
Authority key identifier: 57:2B:C9:3F:15:80:FC:95:27:4D:98:39:40:F3:EF:AE:DE:30:4A:E5
Certificate issuer: /CN=572bc93f1580fc95274d983940f3efaede304ae5
Certificate serial: 019A71B85BE5BE368EA084C765DFA8A718AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft
Manifest number: 0AEA
Signing time: Tue 11 Nov 2025 07:01:38 +0000
Manifest this update: Tue 11 Nov 2025 07:01:38 +0000
Manifest next update: Wed 12 Nov 2025 07:01:38 +0000
Files and hashes: 1: M1JW_FKXqFnt6Im00lE7zjh_jCo.roa (hash: vOsH4Wy7uW8mjyCfxBJ6jJ4GPqxod09m04HGmvnUFqw=)
2: VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl (hash: AqXyTp5b1Ibhi2ZehEoTwPp313BJCCFN6b6k8T/oHE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:5b:e5:be:36:8e:a0:84:c7:65:df:a8:a7:18:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572bc93f1580fc95274d983940f3efaede304ae5
Validity
Not Before: Nov 11 07:01:38 2025 GMT
Not After : Nov 12 07:01:38 2025 GMT
Subject: CN=3f6796bd5cf8985a868d23d0dd75dc198f836287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d4:25:a7:96:9a:3f:62:e6:96:7b:aa:ef:32:
a0:c7:8d:c4:93:dc:ed:86:f1:eb:4e:4c:a5:5c:ac:
e3:a9:d2:e0:2d:64:1e:7b:a9:4d:5a:f0:0c:12:ff:
47:4b:2e:ca:25:47:35:2b:6d:5d:eb:87:00:da:77:
3c:b4:64:72:21:6c:92:60:58:7e:3d:66:73:ee:9d:
b6:62:c2:fc:51:9d:c3:31:49:0c:a1:eb:13:6d:80:
00:64:8d:33:4b:f3:76:34:d8:95:5c:e6:5d:0d:38:
da:2b:f9:ae:96:e6:4a:c2:2b:b2:87:49:b2:32:4c:
95:08:9e:70:8d:35:14:f6:9c:a2:4c:ba:fc:da:7e:
0d:9d:26:64:39:04:83:64:77:1e:f2:c2:1b:66:31:
a1:e4:ac:49:fc:72:18:5f:6b:cf:6f:82:b5:4e:dc:
92:ac:23:1e:bb:d6:e0:4a:d8:3a:47:23:08:14:28:
3b:a4:2d:cc:c0:0f:2c:d5:63:c4:ee:36:bf:2f:68:
f9:f6:c9:71:58:9d:23:aa:fe:74:a9:31:e5:57:5e:
bc:e5:81:7c:2b:db:2a:90:af:02:c0:94:4d:66:61:
a3:fd:64:ef:db:d2:8d:ec:ed:a2:a8:5f:c8:dc:2d:
27:11:84:90:96:ce:3e:cb:d8:06:78:fb:a8:1d:17:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:67:96:BD:5C:F8:98:5A:86:8D:23:D0:DD:75:DC:19:8F:83:62:87
X509v3 Authority Key Identifier:
keyid:57:2B:C9:3F:15:80:FC:95:27:4D:98:39:40:F3:EF:AE:DE:30:4A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:86:c2:c2:7f:88:f8:81:5b:6a:e3:a0:9f:6f:94:8e:ed:dc:
9d:5d:ab:a0:38:dc:75:41:5c:78:54:96:1b:57:cc:25:d8:54:
2c:4b:2e:ae:c9:7e:b6:64:84:d8:f8:7b:26:0f:a7:10:c7:1a:
47:12:3a:a8:5e:07:24:cc:32:5b:0a:44:24:67:5c:bc:ac:3a:
f5:aa:80:ed:d2:31:3a:aa:7a:0f:24:44:ce:be:76:e1:db:cf:
0c:24:77:87:42:16:c5:cf:a0:30:ca:ba:10:fb:5e:4b:c1:e5:
ad:b7:6b:79:ef:e2:1a:17:5e:54:85:6b:64:dd:d4:c0:34:1e:
b6:c3:46:04:27:70:de:0a:cc:d4:8c:e0:c8:eb:1b:0e:d5:c6:
82:ff:e4:2a:f3:30:37:e0:fd:ab:14:71:6a:53:41:93:e0:e2:
93:6c:24:7a:02:c7:5e:22:cb:e9:0d:6d:e1:ca:95:e4:a4:2b:
b2:d5:aa:83:85:73:3f:94:03:82:17:dc:b0:74:e4:ff:76:80:
2e:cc:f6:8c:b7:c6:63:04:aa:61:8d:36:e3:e8:1f:52:9b:a2:
89:3e:40:69:12:5f:c3:0d:ab:f0:f8:8b:6f:a4:4e:ee:66:7b:
5a:e5:3e:f7:49:2c:e8:17:81:23:e6:31:71:c7:5d:f2:a0:2e:
a5:5c:c4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:07 2025 by rpki-client