Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
File: Vk6tOAljA7xLah8rAuG5G-SEkUY.mft (raw, json)
Hash identifier: bsM7W6ta6KW7iPS48RgYpb5mcWowImIUXYL1YOsrn5g=
Subject key identifier: C6:25:02:AB:68:62:44:2B:93:F7:F3:EE:5D:BC:A0:3C:B9:15:3C:12
Authority key identifier: 56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
Certificate issuer: /CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Certificate serial: 019A552DE117523464AAE63EC904AD24E80D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
Manifest number: 0C57
Signing time: Wed 05 Nov 2025 18:01:01 +0000
Manifest this update: Wed 05 Nov 2025 18:01:01 +0000
Manifest next update: Thu 06 Nov 2025 18:01:01 +0000
Files and hashes: 1: Q1FzunJJgm72n4cjnOFriVc18KU.roa (hash: 9QqXBfYauaWBi+EvcV0793mlb9DkJUiHomWOWZ5zJGk=)
2: Vk6tOAljA7xLah8rAuG5G-SEkUY.crl (hash: PFJFwyytReFiAg/ytVGBnkHd9EO2AOHOYx25/ETeh7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:e1:17:52:34:64:aa:e6:3e:c9:04:ad:24:e8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Validity
Not Before: Nov 5 18:01:01 2025 GMT
Not After : Nov 6 18:01:01 2025 GMT
Subject: CN=c62502ab6862442b93f7f3ee5dbca03cb9153c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9b:6a:f9:b2:e9:e9:2e:1b:c9:3c:e1:9a:66:
bf:b5:cf:c9:dc:5d:fe:4f:3f:c5:1c:d3:78:a1:9b:
b0:e4:92:db:7e:04:10:e6:49:cc:c1:1a:dc:a1:f0:
cd:98:a5:47:8a:9b:58:dd:eb:4b:d9:35:d8:b9:4e:
71:24:0a:73:12:c2:75:f4:48:d0:74:54:23:6e:df:
c4:bb:a4:58:e2:9d:c4:c9:80:4c:bc:36:d0:81:3b:
65:6b:94:ce:ff:49:1d:4e:b3:d4:05:04:3f:63:fd:
58:d7:24:35:d6:eb:ba:6c:ad:a4:f4:74:70:97:74:
5f:5c:03:f4:45:c0:1c:8d:43:91:0b:d0:88:27:e3:
bb:f7:5d:c4:bb:7c:cd:e0:55:0b:21:e8:c6:a2:cc:
b3:ef:8e:d2:8c:25:06:47:c2:ce:15:69:57:9b:a1:
b9:b5:c0:65:8d:3b:a3:3a:1c:0c:56:30:33:66:77:
e6:4d:da:00:84:ba:62:ce:47:dd:0b:ea:a6:be:4b:
e1:58:ad:8f:6a:e2:41:d9:c8:c5:08:64:54:6e:cc:
da:5c:dd:40:ec:26:54:39:bc:8a:07:06:e4:1f:11:
05:eb:7c:41:a6:b5:7e:e1:a7:51:36:70:9f:ae:49:
5b:f4:27:59:52:43:ea:fa:cb:c4:1a:13:ba:e4:a7:
46:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:25:02:AB:68:62:44:2B:93:F7:F3:EE:5D:BC:A0:3C:B9:15:3C:12
X509v3 Authority Key Identifier:
keyid:56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:be:54:49:ba:0e:da:d1:be:0b:39:d3:2a:cf:33:e4:4f:c6:
10:3c:d3:39:b8:32:aa:1b:4c:7b:94:dd:c4:66:89:ea:75:6d:
3e:e2:50:68:7b:16:26:c1:e8:bb:43:b1:59:23:18:05:8d:4b:
a2:e4:d3:46:dc:f7:8e:76:d9:1c:ab:27:6b:8c:ab:4f:73:12:
1e:f2:28:4f:92:7b:77:65:9f:28:b0:63:50:6c:a8:f4:94:cc:
b6:5b:64:d2:25:36:8f:e8:0b:75:c8:b5:c3:57:41:fc:a0:6b:
a0:85:7c:47:91:e8:eb:28:62:81:a6:ac:ac:bf:08:2a:80:41:
16:42:23:54:af:e6:b3:00:df:3e:aa:46:15:a1:af:c1:ac:45:
bd:a7:cc:36:1e:c4:f1:31:f8:f8:cb:68:1d:b8:1c:d5:4f:47:
ae:e7:64:64:d1:60:24:71:b4:1e:f5:52:aa:8f:ba:9d:70:42:
f9:24:cc:9b:8b:aa:30:cb:0f:fd:40:12:72:76:60:82:58:3b:
b3:d6:fd:e9:0a:7a:5c:d1:5b:6d:8c:59:54:c3:50:34:44:53:
f9:ca:e7:af:31:55:57:52:67:9c:8c:6e:1c:40:76:23:9d:bc:
fa:c5:e7:54:97:40:55:3a:1f:53:99:dd:3a:95:30:01:bd:16:
9f:28:e1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:53:10 2025 by rpki-client