Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
File: VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft (raw, json)
Hash identifier: rAQ44Ahzp8VkmCZIxtRrWZSi+ak9zV7aFtxMHzHsiq8=
Subject key identifier: 61:A0:5E:00:AB:16:92:8E:04:84:A5:EC:F1:80:8D:D6:E7:60:EC:42
Authority key identifier: 54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
Certificate issuer: /CN=540f4a1b92338b49ca63021219059ce570ff5964
Certificate serial: 019A25C11F68C0610AA8F05542B9CB17934A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
Manifest number: 052D
Signing time: Mon 27 Oct 2025 13:00:04 +0000
Manifest this update: Mon 27 Oct 2025 13:00:04 +0000
Manifest next update: Tue 28 Oct 2025 13:00:04 +0000
Files and hashes: 1: VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl (hash: B/GyVSonGRl7froo0sJisxrVZHwzMH3g6TLJRouV+AE=)
2: _WaDfELTBc_dUmy6Cu013iGAFy4.roa (hash: 4Ui783wG8atURB8iqdX/TxaJyYCKy9S+Gr0JJXsrTgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:1f:68:c0:61:0a:a8:f0:55:42:b9:cb:17:93:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540f4a1b92338b49ca63021219059ce570ff5964
Validity
Not Before: Oct 27 13:00:04 2025 GMT
Not After : Oct 28 13:00:04 2025 GMT
Subject: CN=61a05e00ab16928e0484a5ecf1808dd6e760ec42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:0a:a0:c1:bf:2e:8e:e1:fe:7f:b5:4f:47:
aa:aa:06:ba:77:da:60:86:cb:25:8f:c2:f0:0c:eb:
9f:9a:a1:7c:c2:d8:36:c4:65:75:6c:dd:04:34:ec:
76:d2:9d:da:7b:d8:6d:16:f7:7d:00:04:e8:e2:63:
99:d2:2b:1a:b9:3b:ca:79:db:21:73:59:5a:78:fd:
87:69:94:c4:8e:46:5d:70:f2:bd:c9:4e:58:82:06:
54:20:55:de:01:55:a4:ce:49:d2:06:c1:3b:79:78:
62:90:f1:b5:aa:a8:6c:90:ea:3d:09:bc:34:7f:a8:
e6:c6:db:eb:e1:1d:42:2f:5b:6d:ee:6f:d4:34:0d:
0a:f2:98:9b:62:ad:82:bf:b4:f8:be:57:9b:84:7f:
1c:0b:13:b9:74:1d:d7:a1:af:87:5d:7b:00:8c:5b:
98:92:d5:f0:6a:c4:2c:1b:db:9b:00:8b:46:c4:71:
2d:d9:bb:f7:5a:98:61:e5:7a:ea:ec:47:71:92:01:
6d:6c:ce:fe:2a:2a:ee:36:24:23:16:c3:12:fe:86:
6a:18:9e:80:f8:b4:06:67:04:14:ee:65:7e:8b:bd:
11:f5:e3:0d:f3:ea:3d:e2:07:20:cf:cf:c4:31:66:
d0:bd:40:7a:f9:00:bc:c2:1a:e6:b2:5d:64:a2:76:
a5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A0:5E:00:AB:16:92:8E:04:84:A5:EC:F1:80:8D:D6:E7:60:EC:42
X509v3 Authority Key Identifier:
keyid:54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e7:5a:e5:30:5c:6e:5e:fe:76:fb:c0:54:c8:f9:16:8f:2a:
c4:5a:61:fb:14:65:a0:43:94:64:88:a4:2c:8c:e9:c2:d1:d2:
46:d9:47:67:b5:c4:be:13:1d:0f:c8:02:a0:2a:7c:c9:13:91:
0d:aa:0b:b8:e0:b1:8d:97:34:8e:b5:50:cd:b0:34:c4:f5:28:
a6:03:40:3d:48:ba:b4:6a:78:99:d8:4f:dd:ed:12:bc:4b:ff:
be:2f:60:65:96:5a:33:51:7e:fc:e9:a5:09:44:a3:a3:5a:6f:
34:2d:e0:2d:ad:a3:98:1b:78:92:4d:41:0a:69:40:2d:01:78:
6d:d5:fe:8d:19:eb:61:e1:ac:39:a7:2c:c7:45:9e:54:bf:d0:
bd:d5:de:7a:1b:44:6c:a4:d6:f7:42:3c:5a:9e:4e:8a:f1:e5:
bb:30:8f:36:3d:c1:7b:24:42:e8:f6:97:ad:07:3b:28:7c:ce:
e4:e9:21:27:3d:2e:db:51:93:aa:45:23:fb:b5:5e:94:c6:0f:
9b:00:88:6e:60:e8:52:58:1b:20:56:5b:fc:34:81:ea:e6:d7:
8b:bb:e8:3b:48:b7:75:d2:62:5a:ab:62:7c:15:ea:77:5b:bf:
22:16:c6:c8:de:41:9c:29:86:45:7c:59:c1:92:8f:70:cf:aa:
d2:e6:f9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:31:33 2025 by rpki-client