Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
File: VVzAtghVz-FakevLDuWExhcRb7c.mft (raw, json)
Hash identifier: S9xq25s/nc+JrLOi42WzPxWEN8qqR/VDmBKrCp6gtKg=
Subject key identifier: AB:68:83:AA:FA:D7:E3:24:F4:A7:DF:38:FB:30:BF:39:49:21:A9:93
Authority key identifier: 55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7
Certificate issuer: /CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
Certificate serial: 019A2EFB6D59387217247EF8191663E24502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
Manifest number: 04C2
Signing time: Wed 29 Oct 2025 08:00:20 +0000
Manifest this update: Wed 29 Oct 2025 08:00:20 +0000
Manifest next update: Thu 30 Oct 2025 08:00:20 +0000
Files and hashes: 1: VVzAtghVz-FakevLDuWExhcRb7c.crl (hash: sFHRg+XjzDfoZA0hFenVwO2oR1nP849k0m8zopPoX3g=)
2: WrVC9jX5kklKg1NrTkuGqJhi9ss.roa (hash: 1/eKwFnStb8NeVxzyi/3E+1woNkVGNqWnUzMqa1RbTs=)
3: zOxwHP9C2XU1qxc9gfabChAW270.roa (hash: pIK3P+kNzEGWKFk3LxEQ0gUxs9HATfITXq/XpRc4TCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:fb:6d:59:38:72:17:24:7e:f8:19:16:63:e2:45:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
Validity
Not Before: Oct 29 08:00:20 2025 GMT
Not After : Oct 30 08:00:20 2025 GMT
Subject: CN=ab6883aafad7e324f4a7df38fb30bf394921a993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6f:17:fc:03:84:86:94:61:89:01:52:e5:71:
f6:14:f1:57:fd:3c:f5:b8:ae:dc:6b:4d:be:42:a2:
69:18:74:8d:ea:ca:8e:2e:b8:6a:c1:38:d7:99:8a:
c5:55:ef:74:80:9c:b1:43:f7:93:f9:ca:e1:06:84:
b0:7a:12:f0:30:20:7a:ce:64:67:0f:71:f6:f5:11:
aa:56:4e:5e:b3:09:a4:08:e6:bd:34:ab:a8:c3:6c:
6d:8c:61:6e:58:20:c5:e3:68:0f:f2:73:96:34:ea:
29:f9:5b:20:72:e0:f2:07:69:bf:4e:2d:91:fd:be:
8d:89:05:d5:7a:16:82:f7:d8:4e:3d:1a:fb:b1:2c:
53:16:56:49:b3:4f:21:65:c5:ab:2d:0e:cb:b0:14:
63:01:83:15:13:29:37:cf:ac:e3:2a:12:43:f9:50:
22:7f:cc:2f:07:c3:b7:b8:aa:0b:1b:bb:48:ac:33:
c7:96:b2:11:ae:4f:da:fd:3f:c1:03:62:4c:98:ae:
22:68:8c:a9:98:c7:a8:d3:2a:a3:b9:ea:e7:bc:56:
de:45:66:90:13:8b:c0:c4:fc:59:b5:90:fa:ac:a4:
5c:d6:1b:8f:80:36:fb:8b:51:b4:6e:cc:c4:17:36:
15:fc:e3:42:87:cc:45:72:5a:f4:27:e7:9c:33:60:
78:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:68:83:AA:FA:D7:E3:24:F4:A7:DF:38:FB:30:BF:39:49:21:A9:93
X509v3 Authority Key Identifier:
keyid:55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:27:23:b3:38:ef:01:29:d6:c2:7b:c0:a8:df:88:15:ba:38:
eb:46:9c:5b:3d:c9:51:0f:a4:1d:2c:9e:17:6f:2e:b3:43:18:
ac:a4:c5:59:e8:93:91:5a:30:13:61:84:f6:51:3f:30:9f:50:
91:14:bc:16:dd:af:87:f6:a1:00:e1:5b:a8:33:1d:56:b1:c5:
7a:02:1e:78:68:0a:9e:43:f7:c6:66:20:67:12:1c:b0:03:ea:
47:56:cb:c8:86:8e:b5:0b:c8:01:aa:6a:36:42:ea:a4:62:ca:
b8:c8:72:c7:73:52:bf:b6:52:b9:63:ce:4f:76:ef:c5:2e:99:
26:c7:56:f0:d3:e7:60:1d:4d:37:27:b2:36:a7:46:2c:13:d3:
0b:7a:89:c7:8b:7a:91:a3:0d:fe:6a:f6:7e:e1:a7:94:8f:07:
eb:aa:2d:f0:b3:0b:d1:08:07:1c:86:a1:76:c4:e9:2d:f3:79:
56:5a:40:b9:ae:f9:d4:90:9b:1b:2e:c3:3f:4a:b3:78:51:eb:
b1:6e:6a:89:fd:d3:9a:fc:e0:d7:8f:2c:38:a8:a5:ed:10:5d:
a7:cc:d9:40:76:56:0d:28:41:89:46:a8:d6:47:9d:74:9b:e9:
84:67:9c:f7:13:b8:ed:c4:6b:c7:1a:a1:b4:c2:e9:01:ea:cd:
46:00:d2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 13:12:11 2025 by rpki-client