Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
File: VffKupvV-frB4BRadWfJtFmpXoY.mft (raw, json)
Hash identifier: HMsSI2996JE1ka7wsDrv6ZsW/ymeFT7c5S8GA7I2gcc=
Subject key identifier: BD:DA:E5:1D:11:AD:D3:0C:97:85:C2:C3:D2:F0:48:1C:D4:0F:80:B5
Authority key identifier: 55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86
Certificate issuer: /CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
Certificate serial: 019A1873E08FE02552AAEE3CA3312BB0C277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
Manifest number: 0878
Signing time: Fri 24 Oct 2025 23:00:38 +0000
Manifest this update: Fri 24 Oct 2025 23:00:38 +0000
Manifest next update: Sat 25 Oct 2025 23:00:38 +0000
Files and hashes: 1: VffKupvV-frB4BRadWfJtFmpXoY.crl (hash: 4uqD0yQcAHPYO/a/VntTA8w8MHGfVH8tVhxmkpOYqTQ=)
2: h9iKJvVZnfW0FXjotXiiLLyPbso.roa (hash: w8EgDiQ9haRr92gwy4BUjwQFbUX6Z1nbUCBqudVVAGE=)
3: tzSxEqbN9RPe7WLi6GpaqxSubiw.roa (hash: NQOfRB00StYv2rpk5RfPASO+YDaJlcYUJaTmyGg5oDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:73:e0:8f:e0:25:52:aa:ee:3c:a3:31:2b:b0:c2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
Validity
Not Before: Oct 24 23:00:38 2025 GMT
Not After : Oct 25 23:00:38 2025 GMT
Subject: CN=bddae51d11add30c9785c2c3d2f0481cd40f80b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:db:46:fc:7c:c1:56:76:0e:e5:ff:2e:f5:
89:92:54:8d:ed:98:fb:3b:1b:72:26:0f:74:44:8e:
83:87:c0:59:cd:f0:57:f5:bc:1d:81:1a:4c:1e:72:
cb:b9:d9:96:18:b5:e1:5a:af:e2:04:a9:29:ac:91:
85:23:29:17:c5:6a:36:61:71:d8:a5:55:cb:4f:dd:
6e:46:d9:3a:32:64:80:32:5e:fa:88:99:4e:29:ca:
ba:d9:3d:dc:e0:ea:5a:e9:c6:72:fc:23:7b:18:31:
5f:99:55:a8:b4:e2:42:ca:ff:b9:cc:38:f2:07:b6:
56:16:b4:2a:1f:cb:04:d1:44:a0:6b:ca:61:9e:99:
80:5b:e0:e6:2e:f5:9b:bb:da:b4:b7:05:44:86:da:
58:ad:7e:8c:49:8e:36:6c:23:62:da:9e:09:67:8b:
f4:59:5e:27:e4:f6:81:80:f6:35:e1:15:8f:e6:b3:
51:b5:7b:37:47:32:a6:e0:3d:27:7b:a3:cc:eb:62:
80:c1:f3:19:8d:8a:9f:ed:f6:3b:a5:f7:db:3d:b9:
d7:5b:47:d4:ba:81:48:e5:48:d4:0d:de:b8:d5:5d:
d1:bd:4c:39:a7:d5:5c:f5:87:b3:0f:27:d9:51:f9:
26:b4:74:ee:40:c8:f8:be:16:82:c9:f0:ea:85:9e:
1f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DA:E5:1D:11:AD:D3:0C:97:85:C2:C3:D2:F0:48:1C:D4:0F:80:B5
X509v3 Authority Key Identifier:
keyid:55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:60:5a:63:43:2f:3d:02:0b:cb:fd:78:26:98:0c:19:28:57:
19:e0:28:d1:fc:0d:83:36:ef:3b:f3:43:29:15:39:5a:b2:52:
0f:c8:df:55:24:bd:30:97:9e:a5:1f:87:81:68:03:28:0f:03:
75:f0:d2:be:9e:9e:0b:c2:19:eb:bc:12:a5:4a:51:15:a6:0c:
19:eb:30:80:f3:8b:a5:ee:6e:d9:aa:91:9c:44:d8:53:bb:dd:
ba:e4:44:d1:7c:fe:81:ce:55:33:ec:eb:ef:d0:3c:3a:03:7b:
f4:23:23:f0:4c:16:16:46:d1:17:d0:2c:02:51:b9:78:44:a3:
5a:13:7e:cf:25:b4:11:51:00:a0:c0:94:df:e1:65:fd:09:0e:
3b:3d:57:4b:08:8a:7e:7f:c8:b1:d7:c5:a8:bc:d7:11:8e:ef:
dd:82:3f:c8:52:93:95:16:b0:2c:45:b2:cd:5d:0a:d8:1b:e1:
69:1f:6c:32:72:be:b0:88:ed:65:fc:59:36:12:71:42:bd:aa:
83:31:c8:22:52:49:49:24:cc:20:be:5c:b1:09:fe:1c:0b:49:
5d:07:f6:ab:c0:ac:91:61:a9:57:07:64:f2:2f:69:76:ed:3a:
03:11:c4:d7:01:38:04:14:30:27:b5:e7:91:ee:0d:4c:0c:22:
c2:e7:77:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 09:24:15 2025 by rpki-client