Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
File: _VOKrk7E0KLzwKZfifSHRrUV5Xs.mft (raw, json)
Hash identifier: pBQuks+A24HwNu8gGA59k8tLm/cpxZD0ksCmnGPXsM4=
Subject key identifier: 01:C9:9A:50:7B:5A:0E:C8:3C:45:09:C8:92:64:65:56:05:42:67:4D
Authority key identifier: FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
Certificate issuer: /CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Certificate serial: 019A1F519417932C3420238B4C0DFC1C0D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
Manifest number: 0D8D
Signing time: Sun 26 Oct 2025 07:00:31 +0000
Manifest this update: Sun 26 Oct 2025 07:00:31 +0000
Manifest next update: Mon 27 Oct 2025 07:00:31 +0000
Files and hashes: 1: YD_zTsYXZHwOdGihQ9GGGJD2yQ4.roa (hash: MiVKISLoY4yTYfozn6ttBVBGLS9pCG7wKWYNtkMouG8=)
2: _VOKrk7E0KLzwKZfifSHRrUV5Xs.crl (hash: uc+o6mcPXC1ly7k191l8GhV0p0hi9cRc+5TZYLaI/6Q=)
3: wcV-PUcCwSD1_bZOyNtF92C9c9E.roa (hash: YHNUenZzn6rHgL2dA2+pXb/I7NXwkpjXztGNWnA0xb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:51:94:17:93:2c:34:20:23:8b:4c:0d:fc:1c:0d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Validity
Not Before: Oct 26 07:00:31 2025 GMT
Not After : Oct 27 07:00:31 2025 GMT
Subject: CN=01c99a507b5a0ec83c4509c8926465560542674d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:5c:49:b3:bf:5b:77:f6:09:ad:2d:bf:a4:
12:42:bd:db:d3:86:84:78:0e:77:b0:56:6b:0c:a6:
15:fc:0c:03:8c:53:b5:b9:a8:c5:3f:03:b5:7e:7b:
68:6a:ee:63:1c:55:a6:81:2e:15:33:1c:e3:aa:24:
d8:10:e1:f3:9e:31:d3:bf:96:4e:62:a4:b8:d8:2e:
f2:6e:2e:70:41:e9:0c:ef:a5:0f:2a:04:6b:95:f5:
a0:ea:a6:0f:e9:9e:36:c1:e1:ac:3b:45:4d:23:b6:
8e:4e:aa:5c:45:33:1d:a4:cf:a4:9a:27:92:79:82:
65:7c:fb:52:91:76:07:b5:25:56:6d:1c:05:cc:22:
38:24:8d:37:98:6e:d0:6a:d2:19:d7:43:b5:8c:ab:
32:50:6d:f1:63:5a:35:14:36:66:0f:eb:6e:55:26:
04:07:56:08:cc:e2:82:87:66:3a:b1:8d:b0:3b:f9:
4d:da:a6:4f:fe:82:61:f1:48:5d:dd:10:eb:42:a3:
87:0f:58:9d:eb:0d:00:98:75:a2:54:08:e3:05:65:
9d:80:16:2b:4e:9f:d9:59:5e:a4:69:09:86:0a:d3:
a7:e0:41:f1:24:be:85:6b:88:0e:a0:db:7b:f3:6b:
cc:22:28:90:3a:96:3e:ca:fe:be:3a:cf:bb:2c:43:
5f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C9:9A:50:7B:5A:0E:C8:3C:45:09:C8:92:64:65:56:05:42:67:4D
X509v3 Authority Key Identifier:
keyid:FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c4:75:35:2a:fd:44:ce:66:41:94:e2:27:f5:b7:77:be:13:
2e:e0:b9:35:e3:9a:6b:9c:56:16:55:1c:44:e9:12:99:1d:4e:
0c:fc:19:60:a6:08:6e:6f:90:bb:30:73:ac:55:dd:5f:bf:f8:
6a:7c:76:db:18:fd:9b:2f:56:a4:e3:c5:ed:10:a4:96:4b:21:
06:a1:ee:56:1a:5f:63:ad:1a:a1:2a:e9:8c:68:8f:a0:26:45:
1b:30:46:90:22:c6:1c:bc:53:f8:2e:c6:9f:d5:d4:16:15:3e:
d3:0d:4c:58:22:60:f6:85:ef:41:be:3d:8c:bc:10:af:0c:63:
a4:15:92:82:ff:53:a5:7d:6e:fc:3d:30:2f:0d:62:9d:5e:3a:
9c:67:ff:0b:bd:68:c5:20:32:51:0c:0b:d0:ba:2e:a2:5c:60:
95:05:cb:d2:ca:3b:e4:8d:a3:ac:28:ed:f3:a4:bc:1f:8d:70:
07:03:8f:85:df:9e:29:7b:61:b8:ee:bb:4e:4d:bd:b3:11:3d:
5a:6e:50:ed:ef:da:e1:22:43:70:28:0f:62:d7:19:70:16:7d:
a4:92:a6:b7:fa:68:8b:13:f8:f5:17:bd:50:4f:47:50:cb:09:
08:a6:4d:11:57:ee:3f:2e:55:fd:7b:9e:b3:31:4a:96:7f:b3:
ae:12:43:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:46:35 2025 by rpki-client