Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
File: VAavgE71pjb0ZOcajUHo1AGn9pc.mft (raw, json)
Hash identifier: cYczjLW+/xRdXT2EQ4ksvIQI6jof3BAvIMhiZZZztdc=
Subject key identifier: 95:3C:82:73:D4:66:AD:FA:10:DA:21:1E:5C:D5:D9:1F:CE:5F:CF:3A
Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
Certificate issuer: /CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Certificate serial: 019A232E3D68997E3E3DBBA9CDAB49758D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
Manifest number: 1689
Signing time: Mon 27 Oct 2025 01:00:24 +0000
Manifest this update: Mon 27 Oct 2025 01:00:24 +0000
Manifest next update: Tue 28 Oct 2025 01:00:24 +0000
Files and hashes: 1: IxyW73OMckCNett38gRruShmhsE.roa (hash: kwXxrh4BlKqwqWrrFQAbZ+7ZY9nBQf7G/9/mLoszBNE=)
2: VAavgE71pjb0ZOcajUHo1AGn9pc.crl (hash: agCrNJw8SQFq6CpvkRSeJ+5vdwIjAHbeQKE6k+sDhIc=)
3: _FNz_oG2zcFLeFpovQJ_R2vg-vc.roa (hash: SUqY4ZQvD6jvXvZ8JF1d/vGljIMHXNiGDX2pW4O5ywc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:3d:68:99:7e:3e:3d:bb:a9:cd:ab:49:75:8d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Validity
Not Before: Oct 27 01:00:24 2025 GMT
Not After : Oct 28 01:00:24 2025 GMT
Subject: CN=953c8273d466adfa10da211e5cd5d91fce5fcf3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:b7:92:7c:cf:41:8d:53:93:e7:a0:af:c4:
fc:05:d5:c9:48:7b:68:a8:09:f0:d3:0f:e1:26:21:
41:dd:08:8d:a7:ad:0d:7a:31:6d:fd:ac:cb:4a:e1:
a5:0f:0a:b8:b9:b2:18:1b:a9:87:50:44:98:5b:bc:
0d:9b:dc:ef:e1:88:c1:64:e5:c2:47:4b:9b:55:7d:
e0:87:64:70:e5:6c:3b:d4:2d:6a:e7:5b:41:53:63:
39:af:77:79:4c:8b:41:2d:09:99:11:6a:3e:f5:92:
67:0c:c5:c3:92:c8:98:f8:a7:36:c8:e6:f4:1c:61:
36:cb:18:a1:9b:f7:de:29:f5:8f:b2:df:60:f0:0d:
f8:a2:10:b6:c5:09:01:8e:cf:9b:e9:61:f9:80:db:
a7:86:5d:17:48:f0:ef:97:f9:7b:19:1e:3c:41:1a:
01:19:0e:63:86:c6:dd:56:c0:84:64:df:2c:04:9b:
27:7e:0b:b9:01:35:85:90:2a:a4:65:11:ec:62:f7:
f1:1d:a6:d0:3c:ae:12:84:60:35:ee:b7:52:1c:e0:
90:6d:be:55:e0:44:47:7c:85:bb:6b:63:9b:5d:b4:
fe:09:aa:64:75:f7:e6:b0:21:30:2a:04:33:5e:ad:
ca:4a:c1:19:e8:20:12:eb:12:75:e9:73:0a:a8:6b:
c0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3C:82:73:D4:66:AD:FA:10:DA:21:1E:5C:D5:D9:1F:CE:5F:CF:3A
X509v3 Authority Key Identifier:
keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9b:f4:41:06:6c:ce:c1:7b:6a:4a:0f:f3:42:32:f8:79:82:
e6:21:6e:f5:1d:f2:db:39:ec:27:fc:24:26:9b:8c:c1:d9:c0:
e7:9e:01:87:69:54:8e:9a:60:c1:cd:1f:3c:95:e8:00:1f:28:
34:bf:44:6f:20:a6:f2:06:9a:86:67:4b:c2:81:3d:f6:48:87:
94:0e:b3:47:cd:72:d7:b6:21:30:26:ea:4c:85:f8:4d:de:f2:
ec:c1:4d:32:7c:f9:09:18:32:f0:ac:fb:f1:35:62:1b:80:b6:
75:07:ea:3c:15:67:40:41:94:1c:18:a6:04:d0:48:7b:08:4d:
78:2f:fc:6c:42:6f:44:8b:0d:7d:c1:b8:b6:55:bf:59:50:45:
cb:4b:34:2a:24:71:24:ec:28:74:2b:e7:df:e8:b6:7d:4a:27:
64:09:c1:b5:5a:84:ae:66:e0:db:a5:95:c3:b0:e3:94:71:8d:
7d:c7:d9:01:64:c8:dc:ba:8e:c1:98:fc:0e:c2:f4:c9:55:98:
01:df:16:cd:49:8f:a0:5a:6b:0d:a0:4d:0a:e3:97:1b:22:ac:
34:07:8e:fd:2c:f8:f1:1a:50:f1:44:69:7d:7b:51:27:07:b6:
2b:41:a6:8f:b2:a8:9f:f4:49:a5:93:ef:4a:e5:fc:f8:a0:f7:
4b:47:02:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:08:49 2025 by rpki-client