
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
File: valtAqgi9GJTwq7mgEQdWsJ8PfU.mft (raw, json)
Hash identifier: dB66TE7Zc+580qXa3ZXCQMUc871JPjigwdv2QXvW22g=
Subject key identifier: DC:5A:20:59:56:5B:35:F6:D8:14:3E:6A:33:8D:93:F5:C1:E4:C7:73
Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
Certificate issuer: /CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Certificate serial: 019A06366137353F0F7AF8E59FFD15C53122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
Manifest number: 16EF
Signing time: Tue 21 Oct 2025 10:00:18 +0000
Manifest this update: Tue 21 Oct 2025 10:00:18 +0000
Manifest next update: Wed 22 Oct 2025 10:00:18 +0000
Files and hashes: 1: F3mmIE5e5Y4BeSDKQ3DR2L-rAk8.roa (hash: jbee28DZuoinhmMa1MpH2LACZ/XrJT7Z3vVmbAZdw7Q=)
2: Mk3OCH61bD3mOm8DSaSiAzwW7fk.roa (hash: oxlH7V9EjPMbmvgDLqeKQJs9KOwBY0gM7ZfOAxvET+w=)
3: dRiT-c0xAt2kngbyOhm_uFIV1zw.roa (hash: Wglqc09L4EahGS8AZXe98XrHNBuQBQLDeHD0KWaBnTQ=)
4: fV9G8OutvawEP_xsKieVXci-tIE.roa (hash: o9Ux/+t3JTsGEZGnq53xgSqRPo9nNu5/xoSyWOejP2Q=)
5: jx4NNkHPAbONhfyLhU8TOxw7M1s.roa (hash: g2tq87dmJIfsiGuaezvjDvuxwyvPju47/Uw+kKdECC0=)
6: valtAqgi9GJTwq7mgEQdWsJ8PfU.crl (hash: rfKQGeXoAuJaZDm7byqafPk4C5zH7wdfI12UBzu3UqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 10:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:36:61:37:35:3f:0f:7a:f8:e5:9f:fd:15:c5:31:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Validity
Not Before: Oct 21 10:00:18 2025 GMT
Not After : Oct 22 10:00:18 2025 GMT
Subject: CN=dc5a2059565b35f6d8143e6a338d93f5c1e4c773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e4:4c:32:6e:55:2a:2f:50:e4:57:3a:c8:19:
17:d0:6c:14:2c:cd:5c:54:4f:2e:c0:21:79:b2:67:
a7:a3:d2:f2:f0:92:5e:5b:86:bb:aa:f0:2b:73:6a:
13:3b:98:04:ed:b8:f9:96:a6:aa:9d:1e:b1:48:93:
cf:76:32:a7:81:dd:ee:bd:66:73:e9:b6:43:f6:32:
5d:e8:0b:4f:47:ae:3d:89:40:cd:f6:cf:42:23:ce:
1c:70:c7:4f:24:3a:4e:b0:65:cb:b5:6f:1e:93:4e:
22:39:61:de:5e:3b:af:e8:f0:81:32:a5:ed:ec:9d:
ab:80:c4:4b:18:8f:99:54:08:1b:db:d5:3b:ab:09:
91:ca:f0:35:e6:08:6f:16:5f:02:38:76:a9:2d:80:
b2:55:14:9d:89:37:ff:b3:72:28:77:8f:11:30:e2:
dc:37:1b:14:2e:3a:2a:9e:fa:8b:98:9b:60:d2:86:
f9:bd:cf:bb:c7:07:6a:63:8f:d1:80:15:73:68:8f:
42:12:bd:63:88:9c:85:f7:db:58:c1:29:7b:c1:30:
42:88:d9:9e:92:8d:6c:8e:bf:51:0b:7a:d6:cc:06:
1d:bd:3a:ac:ed:2a:4c:e2:01:53:2d:4d:1a:df:ab:
ad:09:5e:f3:8a:92:77:a7:7d:b0:f9:3f:c5:bd:d2:
a7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5A:20:59:56:5B:35:F6:D8:14:3E:6A:33:8D:93:F5:C1:E4:C7:73
X509v3 Authority Key Identifier:
keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ab:38:43:92:94:ac:1f:bd:64:04:31:fe:bf:f3:72:84:ee:
2e:e1:36:59:60:d5:76:a9:ba:71:82:e5:1f:0b:99:87:e8:df:
5c:4b:b8:53:f6:35:48:33:89:16:08:46:bb:a2:5c:65:d0:1c:
bc:e7:c2:6f:5b:c1:ff:4e:ea:9c:f9:dc:6a:d4:eb:f1:b1:29:
b6:73:42:cb:3e:87:88:3f:2e:3a:b1:17:fb:2c:cf:5b:cb:b7:
56:52:48:ba:f6:70:ff:57:96:87:ad:0a:34:29:65:58:04:4d:
0d:3d:5e:d9:34:46:a5:b4:81:70:3a:98:31:5a:79:cd:50:d0:
bd:54:e9:b7:90:39:fb:83:fc:f6:ad:9c:0f:77:dd:cd:b0:4a:
ff:fc:c2:64:de:7d:b4:ab:83:b1:9a:2a:a6:32:fb:9a:3d:8d:
f8:50:f6:89:3d:47:2c:53:25:ef:7e:9c:93:61:ba:d9:0c:db:
86:97:d4:88:4b:36:87:ce:fd:34:c0:e7:04:6c:ac:38:36:46:
25:ef:d6:81:12:91:90:93:e7:a3:c3:40:3b:ba:cd:7c:27:17:
54:4e:dc:61:8f:68:8d:67:e5:27:95:c9:81:79:60:cf:eb:24:
76:e3:17:51:7b:ac:80:3d:2d:82:1a:c1:82:da:86:66:4e:b8:
80:bc:43:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 17:03:35 2025 by rpki-client