Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
File: 1-VA8B1ppBVa9RiEiskaZ4baxkng.mft (raw, json)
Hash identifier: wUvftNJ/p9SazIeeK5x13NLlCpKLeiEoVJnW9FBiQFg=
Subject key identifier: 9C:AE:BF:EE:5D:21:0F:03:C0:B3:5D:F2:75:05:13:B3:6A:98:1D:1A
Authority key identifier: F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
Certificate issuer: /CN=f9503c075a690556bd462122b24699e1b6b19278
Certificate serial: 019A71EEA260C09755DB3628C284AF67D941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
Manifest number: 1727
Signing time: Tue 11 Nov 2025 08:00:55 +0000
Manifest this update: Tue 11 Nov 2025 08:00:55 +0000
Manifest next update: Wed 12 Nov 2025 08:00:55 +0000
Files and hashes: 1: 1-VA8B1ppBVa9RiEiskaZ4baxkng.crl (hash: dvAEpwBSXLRjLYug6NemvOZV1EO5s6gIanckKbsB69M=)
2: p2SVo4qsSiAegswh4Tt4B2CgnX0.roa (hash: ZR7WcDeaKIDHi9EqUsqBzkr/KcnAMrpHKscQ/Pybjlk=)
3: q2ZLX08w7-Dcrgr57h1hgcnfkXY.roa (hash: uFC0sIXPmgIMFYS0E5zDcKQoPca0pnQPm/3b/35uS2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a2:60:c0:97:55:db:36:28:c2:84:af:67:d9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9503c075a690556bd462122b24699e1b6b19278
Validity
Not Before: Nov 11 08:00:55 2025 GMT
Not After : Nov 12 08:00:55 2025 GMT
Subject: CN=9caebfee5d210f03c0b35df2750513b36a981d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:64:ac:e8:09:6b:cf:85:8a:d5:51:5b:85:d9:
3d:d2:b9:33:a6:69:aa:e7:40:60:eb:c2:e0:50:3b:
39:1c:9c:63:47:8b:f5:fa:fa:fa:74:5b:21:87:b5:
09:cb:dc:d1:31:43:a2:98:63:67:a9:af:4a:46:2e:
a3:e1:01:30:b4:14:d7:ab:0d:84:d3:bc:a9:21:7c:
76:3c:9a:9b:d6:1a:5c:d1:a3:33:96:c2:4f:28:26:
78:38:30:de:7b:96:0f:02:2a:c9:2a:8d:9f:80:35:
2a:b0:f0:ab:5f:1c:a9:51:f0:6b:ca:03:51:19:b9:
72:78:fe:1d:fb:0f:11:f8:8a:91:65:b1:48:06:95:
bc:c3:6d:50:d3:6d:36:02:c9:b1:c4:23:a8:9d:53:
56:f5:ba:16:60:f4:84:5c:1c:b8:ef:05:f5:b2:d0:
da:0a:2a:9f:f4:61:e6:da:23:04:05:68:ac:a1:1e:
8e:3b:ed:59:aa:4e:0c:37:12:6a:07:82:54:ae:e4:
dc:a8:5f:18:7d:84:01:71:fe:b4:83:93:1a:33:76:
0d:f2:29:72:42:f5:c8:5a:61:f1:9a:7c:e3:c2:8a:
fe:6c:20:24:6b:a8:34:f8:09:0c:95:ed:a8:e2:30:
df:7c:a9:6b:fc:62:d0:1a:92:86:1a:1c:4e:70:04:
04:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AE:BF:EE:5D:21:0F:03:C0:B3:5D:F2:75:05:13:B3:6A:98:1D:1A
X509v3 Authority Key Identifier:
keyid:F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:82:06:a6:12:bf:ee:fb:b6:88:af:54:2a:ec:08:81:09:3c:
26:02:3e:3b:62:36:84:dc:63:31:85:08:cf:1c:5f:ea:6a:45:
02:81:97:13:77:5f:37:01:24:95:d5:36:25:dd:95:14:01:48:
d6:f4:ba:71:ae:36:33:99:fd:45:de:0b:eb:7a:e5:89:b3:e7:
c6:11:03:78:1a:4c:fb:7a:22:4b:57:de:26:2f:bd:6f:5c:83:
ac:85:f0:27:3e:d5:e9:25:a8:08:23:7d:b0:d6:ac:31:29:1f:
cf:f9:1d:e1:a2:93:1a:cd:67:56:b9:f8:46:42:65:7f:98:1c:
14:6c:7d:5c:a3:07:8a:dc:73:4e:88:73:ca:c9:1f:72:b3:79:
d6:12:65:77:f8:e8:67:aa:38:fd:d7:ef:ed:78:ba:a8:bb:65:
06:39:00:01:bf:db:b8:2c:75:8b:52:c2:7d:5d:12:8d:96:2a:
b1:8d:84:29:30:15:a4:42:97:b2:25:72:be:24:47:36:00:bb:
5b:07:e4:80:a0:0d:9b:80:0a:2a:86:f1:5e:89:54:41:03:0f:
41:f0:62:97:29:7f:b0:26:74:fa:b6:3e:a0:04:b4:41:ff:89:
e6:b1:a0:09:75:b2:1a:cf:1d:b1:5c:17:e6:62:c9:35:68:3e:
46:57:60:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:41 2025 by rpki-client