Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
File: VWEKWd3_vSTuSymemySxvwNvjkM.mft (raw, json)
Hash identifier: /SWJ/L1QpvYOx0Ru7Xfz5eFv/lhnl+4h7I8UBQ7Jk6A=
Subject key identifier: 8A:D1:F4:DE:AB:BA:90:FB:A5:1E:78:64:A4:B6:61:CD:9F:06:EA:FF
Authority key identifier: 55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43
Certificate issuer: /CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
Certificate serial: 019A28F9B6D0ACE54F7E9CF75E945817C74E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
Manifest number: 09DA
Signing time: Tue 28 Oct 2025 04:00:45 +0000
Manifest this update: Tue 28 Oct 2025 04:00:45 +0000
Manifest next update: Wed 29 Oct 2025 04:00:45 +0000
Files and hashes: 1: Lh0KUJ3V35wYz2i99gYTrV6dktc.roa (hash: Svr4T1ZPQxakxnAH0s4zkcIB6ko9R8TkXB+xdSHMUeE=)
2: VWEKWd3_vSTuSymemySxvwNvjkM.crl (hash: Jh1KCcCQJe3Dth8BVoAdkmxM1c0u34Wu/LhTXTyID00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:f9:b6:d0:ac:e5:4f:7e:9c:f7:5e:94:58:17:c7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
Validity
Not Before: Oct 28 04:00:45 2025 GMT
Not After : Oct 29 04:00:45 2025 GMT
Subject: CN=8ad1f4deabba90fba51e7864a4b661cd9f06eaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:12:95:af:19:68:5d:94:5f:2e:ef:5c:83:
a6:45:2d:dd:9e:3d:9e:2d:c3:9b:13:b6:b5:0f:7e:
66:f9:87:19:ff:b9:98:b3:f4:23:10:26:17:c7:3d:
a7:4a:f6:b0:d4:4d:89:01:8d:85:71:69:81:ac:b5:
c4:02:30:12:9d:4a:ed:bb:08:dd:8e:1c:92:82:01:
2c:73:dd:01:28:a8:e0:bf:1a:fe:67:29:3e:58:83:
b3:0b:46:10:0b:db:9c:25:19:d0:1d:1c:3b:7d:be:
5d:1a:c0:24:d5:49:10:14:7c:c5:34:90:5e:b9:45:
b2:11:1d:fb:9f:3a:74:d5:88:7d:f6:3a:b4:39:31:
b5:a7:5c:89:1d:83:fe:8e:cf:6f:8d:9d:ae:c8:4e:
2f:12:f8:38:37:f1:72:33:68:95:9d:c4:cf:77:cb:
61:e7:41:48:25:01:0c:01:d7:56:ab:05:b6:5b:09:
fa:ea:df:3a:a2:7c:25:97:5a:d2:6e:91:1a:b7:a8:
90:1f:2e:d2:d9:ae:e7:f8:ed:21:64:00:21:50:24:
b6:1f:a0:0c:72:c2:2f:0d:c5:0a:6b:ac:ce:75:60:
f2:94:71:7a:85:02:9f:2c:8c:00:86:84:d8:36:dd:
44:aa:36:80:4b:8c:8e:b2:2e:f2:28:92:e3:23:a5:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D1:F4:DE:AB:BA:90:FB:A5:1E:78:64:A4:B6:61:CD:9F:06:EA:FF
X509v3 Authority Key Identifier:
keyid:55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:a8:d7:ba:a4:b3:5a:bc:9e:db:4b:0c:2d:ea:d1:89:16:90:
37:99:e4:48:d5:95:7f:24:d5:f1:1c:40:0e:9c:82:3b:14:6b:
0e:79:75:fe:d0:ef:f2:88:81:5e:ea:7a:8f:52:42:7a:e7:ce:
d7:e9:fc:80:33:c6:4d:68:6b:0d:b0:70:20:25:94:87:8b:b1:
7c:38:de:db:f1:0c:45:26:b8:8d:f3:6e:f8:b6:dd:21:ce:97:
de:99:30:35:01:62:ab:01:61:6e:c4:7e:b8:63:c9:96:a8:ce:
ee:61:12:5f:1b:fc:f8:73:1e:97:96:f6:28:57:ab:3a:9e:19:
13:5b:55:e1:67:c2:e8:b8:82:50:1a:8f:a2:9a:e3:4b:12:5f:
a1:eb:94:fe:74:98:4b:98:a4:1f:8b:1c:89:b7:6c:64:50:b4:
1b:10:d8:4d:04:25:1c:81:03:86:5c:1d:87:f2:59:40:36:40:
b8:6c:b0:22:db:d3:41:c9:c4:f4:42:49:3d:2d:a4:00:aa:06:
bd:82:37:b3:e2:9f:82:7a:f9:82:b0:cb:1a:58:91:b4:65:74:
51:bc:e4:36:15:97:16:4b:18:6c:de:9d:af:ce:3f:33:a8:4b:
1d:58:af:12:c1:6a:fd:c7:e3:87:20:71:ba:18:7d:13:bc:f1:
71:6a:f0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:04:03 2025 by rpki-client