Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
File: V2si8nkFl0hL-WkVqDVDwZSz_R4.mft (raw, json)
Hash identifier: osjpakdRmpFv+/dEPBm4dhU73ooQYRPA9scUeikv/54=
Subject key identifier: 92:D2:94:B2:C7:8D:3B:33:7F:DF:42:12:79:24:31:2A:BC:69:3C:37
Authority key identifier: 57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
Certificate issuer: /CN=576b22f2790597484bf96915a83543c194b3fd1e
Certificate serial: 019A1B3E688401A71875483C0960F4A46EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
Manifest number: 0635
Signing time: Sat 25 Oct 2025 12:01:06 +0000
Manifest this update: Sat 25 Oct 2025 12:01:06 +0000
Manifest next update: Sun 26 Oct 2025 12:01:06 +0000
Files and hashes: 1: V2si8nkFl0hL-WkVqDVDwZSz_R4.crl (hash: yNWkQUdQQ8osob0U8S7WUbY0kaWX9d5oM4b8luOhKsk=)
2: WnvN9eO0xROw8P2u2NunmIAmhFM.roa (hash: ICDMCpB80BuzlOdYTKVVB47BHhMFIG3MGwkKpb0Kjms=)
3: ga2NxvzjVumF5thvPvomOtqub-A.roa (hash: Fnu74FvZlaTUv1bGjbnayDCXm216CFcy4KRgAcWl9Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:3e:68:84:01:a7:18:75:48:3c:09:60:f4:a4:6e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576b22f2790597484bf96915a83543c194b3fd1e
Validity
Not Before: Oct 25 12:01:06 2025 GMT
Not After : Oct 26 12:01:06 2025 GMT
Subject: CN=92d294b2c78d3b337fdf42127924312abc693c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c9:69:5d:b2:30:e9:c3:0b:40:89:86:7c:d4:
1d:32:83:47:ab:a4:89:7c:33:5b:90:96:44:b9:25:
78:08:74:84:93:21:ac:9c:62:81:bf:9a:72:fe:b6:
61:f2:4f:dd:77:60:01:44:73:33:a4:cc:53:9c:ac:
06:03:6b:47:d3:08:c1:56:e7:e9:58:ef:0a:c5:3d:
ba:94:27:55:99:ea:ad:cf:23:8a:e6:0e:c9:2f:ca:
56:70:f7:ba:3d:34:15:6c:91:a9:b2:23:76:25:ca:
51:43:67:dc:c1:39:15:28:55:87:a0:10:48:08:03:
6e:4f:6c:02:1e:0a:05:c5:83:62:5a:6f:87:fd:67:
7f:30:f5:a8:d3:2a:67:58:39:a8:13:fd:6f:b8:48:
83:f8:5c:74:26:40:40:56:85:80:a1:34:eb:97:1f:
03:fc:77:6d:73:eb:3d:48:b7:08:89:c2:8c:a5:93:
f5:78:aa:a2:51:4f:ab:24:d4:e9:46:c5:c5:5b:50:
ee:b9:71:2c:a3:c7:98:53:04:9c:56:9a:bf:9e:b9:
15:e4:f6:f4:e5:24:08:26:73:c0:e3:6e:bc:be:db:
9e:d6:4c:17:ca:39:91:fa:da:02:48:9a:4d:a6:9a:
8d:c2:3a:e3:1e:ca:65:30:2f:c2:2c:a2:c2:56:26:
d2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D2:94:B2:C7:8D:3B:33:7F:DF:42:12:79:24:31:2A:BC:69:3C:37
X509v3 Authority Key Identifier:
keyid:57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:20:81:42:c4:28:bf:25:6c:27:9a:57:3c:8a:c7:47:41:1a:
4f:2e:0b:d4:ed:ab:13:f1:82:d6:c9:73:57:77:4a:35:97:bf:
37:bf:2c:0e:25:1d:d3:1a:26:ca:a8:ae:27:a1:eb:de:3e:12:
1c:fe:0c:4d:01:fb:d6:90:a5:cf:39:7c:b6:f0:b5:70:5f:8c:
7a:d8:a4:8b:18:63:6c:9d:9e:d5:be:79:85:07:70:ec:e2:82:
a0:09:46:9c:57:0d:82:3b:77:6b:c1:5a:56:cf:1b:b9:c1:28:
08:db:25:92:36:de:6d:a3:18:78:46:b1:21:49:e9:c3:df:d6:
1f:c9:8d:94:a5:3d:e0:cf:82:58:6b:02:4e:80:53:d8:42:9a:
bc:d4:99:11:26:36:8b:0e:63:e0:77:c4:4a:3e:38:f7:92:9b:
66:f2:0b:24:60:49:48:e6:0e:55:12:e2:fb:18:63:4d:f0:67:
60:37:be:a3:34:f5:45:08:ae:c7:a5:cd:26:b3:f6:ec:2f:6c:
13:26:21:7d:8e:42:ca:d0:5e:9e:5a:63:6e:15:2d:3d:93:77:
bb:c9:a9:e8:db:8c:95:30:c3:88:cf:0d:19:9b:96:b4:79:56:
0b:6c:8a:03:8f:f2:81:20:29:4f:48:f6:f6:19:7a:4c:b2:90:
5f:29:97:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 18:23:48 2025 by rpki-client