Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
File: _VOKrk7E0KLzwKZfifSHRrUV5Xs.mft (raw, json)
Hash identifier: veSiY5UF/R9Caky21b6Rleg22pOtBBrI6wrkUhTiAM8=
Subject key identifier: 70:7C:2F:BE:44:91:BE:D6:CF:1C:80:B7:20:0E:79:77:88:E2:3D:EC
Authority key identifier: FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
Certificate issuer: /CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Certificate serial: 019933B6F1B5412F01A4D295D11FD6665DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
Manifest number: 0D13
Signing time: Wed 10 Sep 2025 13:00:51 +0000
Manifest this update: Wed 10 Sep 2025 13:00:51 +0000
Manifest next update: Thu 11 Sep 2025 13:00:51 +0000
Files and hashes: 1: YD_zTsYXZHwOdGihQ9GGGJD2yQ4.roa (hash: MiVKISLoY4yTYfozn6ttBVBGLS9pCG7wKWYNtkMouG8=)
2: _VOKrk7E0KLzwKZfifSHRrUV5Xs.crl (hash: VelpjD0BJ/AjxbvzLNIJKoLgiKPk10ggbWz6PJ5UeAY=)
3: wcV-PUcCwSD1_bZOyNtF92C9c9E.roa (hash: YHNUenZzn6rHgL2dA2+pXb/I7NXwkpjXztGNWnA0xb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b6:f1:b5:41:2f:01:a4:d2:95:d1:1f:d6:66:5d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Validity
Not Before: Sep 10 13:00:51 2025 GMT
Not After : Sep 11 13:00:51 2025 GMT
Subject: CN=707c2fbe4491bed6cf1c80b7200e797788e23dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:95:a9:e1:0e:5e:b0:9d:b7:7d:1e:8a:da:26:
93:82:ff:29:b9:fe:bf:0e:88:75:3f:35:dd:5f:36:
39:bd:7e:d5:07:ed:8f:da:b6:d2:8f:79:3e:a3:36:
c5:3d:81:81:ec:08:32:49:2b:04:3e:73:14:ce:1b:
59:87:53:ee:49:8f:3c:72:e1:3a:2b:0e:46:60:cc:
b9:f9:72:38:45:44:50:f8:05:56:64:ec:47:34:9f:
1e:f5:87:f0:21:85:69:a8:1a:3b:09:cb:d4:26:9d:
74:49:17:2f:2d:2a:4f:a6:74:4c:6b:a8:74:c2:14:
5c:fc:cb:5f:2c:b1:05:76:d3:48:f9:05:5a:9f:dd:
aa:4f:57:9e:db:62:24:0d:1f:0e:3e:f9:e4:11:42:
22:23:d8:55:04:dd:d2:14:5b:66:8e:94:88:43:46:
2a:59:f7:c4:6c:33:18:7b:b0:7d:b2:27:e3:55:04:
40:88:74:e7:51:7a:57:5c:7b:97:5c:de:b6:f3:8a:
02:54:77:e1:d1:ab:65:64:6c:d6:0d:8b:62:38:bb:
c4:d0:b6:5c:c8:e8:d1:2e:00:3d:8a:94:f1:0b:42:
2f:46:9a:98:04:ae:d2:16:bc:c0:cc:d1:f5:ac:3f:
bc:44:af:a9:3d:21:96:d3:03:20:6d:ca:3c:28:b0:
e4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7C:2F:BE:44:91:BE:D6:CF:1C:80:B7:20:0E:79:77:88:E2:3D:EC
X509v3 Authority Key Identifier:
keyid:FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7e:ba:2c:9b:a2:87:ac:ac:c8:4b:56:b4:05:cd:5e:28:78:
95:bd:43:eb:2f:17:62:2a:a8:3b:00:1f:61:75:fa:c7:fe:0c:
a1:c4:83:36:39:2d:ed:4b:87:0e:43:f3:bf:1e:19:34:a5:c5:
6b:8a:4c:f8:64:76:7a:96:e2:93:97:a1:bf:06:a2:ad:50:4e:
df:31:ba:a5:2e:ab:2c:5c:7a:ae:6f:35:ce:dd:60:c2:82:d5:
ab:1a:e0:4f:bc:ea:ec:f6:4d:60:d0:b0:96:61:97:64:b2:fa:
46:0d:3c:f2:13:f6:3e:b2:af:7f:53:3f:ab:49:67:0c:0b:80:
60:74:4e:66:3c:5f:87:41:cc:ad:4f:24:4c:2a:dc:ba:0d:11:
ba:ea:95:5f:10:df:b0:91:d4:b5:db:b1:a5:70:6c:7a:05:4b:
a0:dd:80:b6:97:58:5a:53:98:d7:d3:02:a5:37:8e:a8:3a:e0:
9e:a7:72:f8:4b:17:ad:fa:93:6e:95:a0:ec:68:f6:dc:6b:5b:
04:b8:1e:70:b5:73:81:49:78:0a:88:ce:4d:d7:8f:fa:23:2e:
2c:75:5d:6b:35:27:cd:c6:49:e7:58:22:eb:22:44:fc:e6:25:
3d:84:9f:57:7c:f0:ee:ae:b4:77:e3:18:d7:b9:c6:ce:93:67:
5e:35:21:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:17:13 2025 by rpki-client