Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
File: VSV3WnBqwAyC-ikzniLkMQgJnnk.mft (raw, json)
Hash identifier: Nltr09z8cKcz3YrznMGh39EUi93xWPP6Ze8CVR6e8Ng=
Subject key identifier: 92:42:E5:45:11:91:DA:D1:E8:3D:EA:AA:3B:DA:52:62:17:A0:41:A3
Authority key identifier: 55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79
Certificate issuer: /CN=5525775a706ac00c82fa29339e22e43108099e79
Certificate serial: 019961D9DA9D4FE4CCF1FEBFFEEBE15AADA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
Manifest number: 1168
Signing time: Fri 19 Sep 2025 12:01:31 +0000
Manifest this update: Fri 19 Sep 2025 12:01:31 +0000
Manifest next update: Sat 20 Sep 2025 12:01:31 +0000
Files and hashes: 1: 7Hysv3h3cIK_WddtBkhV4eeOKec.roa (hash: vqkbaBvGL81dJNu1I/whqip6EIOAqXAyhwvf9zKaCBc=)
2: VSV3WnBqwAyC-ikzniLkMQgJnnk.crl (hash: G2MrilrlNOOvUE/+JNF2hWDgi08mXZzNDxlNUYzDIQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 12:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:d9:da:9d:4f:e4:cc:f1:fe:bf:fe:eb:e1:5a:ad:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5525775a706ac00c82fa29339e22e43108099e79
Validity
Not Before: Sep 19 12:01:31 2025 GMT
Not After : Sep 20 12:01:31 2025 GMT
Subject: CN=9242e5451191dad1e83deaaa3bda526217a041a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:ca:f1:e2:2a:54:13:bd:cb:ea:c7:0b:d2:
67:88:8f:64:99:88:bd:6a:fe:fc:b5:ac:35:c7:9e:
27:e4:11:66:eb:f8:63:09:25:42:46:2f:e7:5c:57:
dc:bb:d8:5d:02:00:f2:ea:a3:c8:1f:8c:ff:1f:06:
6f:40:89:47:55:5c:30:18:56:24:79:15:fd:4d:38:
a9:f4:e9:dd:5b:4d:62:03:32:b8:e6:2e:bc:10:4f:
8c:2b:ef:2f:91:45:b8:08:e1:13:0a:d5:f4:f1:45:
d5:a4:00:20:1c:4c:f7:7f:c0:c8:74:0b:ac:ba:29:
a4:5e:ad:0a:41:22:81:cc:c7:c1:18:e6:3d:3c:f2:
e5:62:1f:b6:2f:e0:f0:18:e8:bd:ee:ad:f1:69:0c:
20:8f:86:ef:ff:be:94:7b:e6:d5:ae:6e:9c:50:9f:
98:2b:a1:7e:1a:e4:be:d1:e1:bb:cd:02:4a:6b:48:
b3:c9:59:e2:33:34:4f:3c:1a:e9:90:40:13:67:50:
3e:b2:9b:e8:18:1a:40:0d:0e:f1:2b:b5:d3:83:22:
01:03:69:b3:9a:bb:12:2f:71:9a:97:de:c2:81:4f:
35:c0:91:50:6e:65:f7:13:6e:fa:01:3b:f6:46:4c:
7a:94:a9:1d:e2:ff:21:dc:dd:e0:84:9e:10:67:88:
da:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:42:E5:45:11:91:DA:D1:E8:3D:EA:AA:3B:DA:52:62:17:A0:41:A3
X509v3 Authority Key Identifier:
keyid:55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:91:b0:61:26:78:1d:a3:d1:85:76:d3:18:7c:00:55:78:9f:
de:8e:15:80:6c:02:8a:4d:85:cf:5b:22:b1:5a:4d:19:eb:94:
0c:22:7a:b2:94:f9:0c:cd:a6:fe:d1:a2:55:00:91:70:5d:62:
01:8c:02:ae:1a:b2:da:92:d3:d6:a9:9a:0f:ae:70:02:59:76:
a6:20:68:42:6f:29:15:b7:d3:c5:a1:d5:c6:f0:87:14:12:59:
fc:08:28:ba:3c:7a:a5:9f:fa:27:4d:4d:00:ac:94:25:00:bc:
0c:d9:e6:1c:82:73:b8:57:fe:2b:4a:28:74:05:70:c4:4d:51:
b2:a6:8d:c6:60:9a:85:bf:ea:1d:ab:c2:3b:a4:09:e4:c9:cb:
e9:4d:e7:24:ae:81:59:56:25:bf:03:77:f2:5f:1b:45:37:38:
b2:39:cf:ed:ac:70:8a:7b:5e:3e:76:0e:c4:9d:7d:d3:c2:92:
72:c9:73:6b:e3:b3:08:d0:00:3a:0c:a3:80:53:92:79:ce:5f:
a7:88:93:64:a5:b8:64:ab:5b:6a:ab:35:c5:71:cb:69:a1:3c:
f7:6f:43:28:9f:3a:ee:93:33:14:39:0c:32:26:69:34:df:37:
62:e2:a9:d6:67:02:ab:fb:c7:83:b6:c5:67:4a:09:16:8d:f3:
90:c0:be:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:35:37 2025 by rpki-client