Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
File: VbnN-LflPvzZeZsR50D1Vf1T9MY.mft (raw, json)
Hash identifier: cVThy5bsujDNr3iu4I3hm6kZn9Y9bLozF1h5p1eGW8M=
Subject key identifier: 6A:BF:FA:6F:F8:80:4C:0C:71:1D:71:AB:95:04:46:2A:17:51:5B:0C
Authority key identifier: 55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6
Certificate issuer: /CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
Certificate serial: 019A70DC010F08C6754BA6E22B001C42C2C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
Manifest number: 14BA
Signing time: Tue 11 Nov 2025 03:00:57 +0000
Manifest this update: Tue 11 Nov 2025 03:00:57 +0000
Manifest next update: Wed 12 Nov 2025 03:00:57 +0000
Files and hashes: 1: OEIiPrXdFUp5YXOck7o4s4rBGO0.roa (hash: zsHFam+CXLhObsumxLE2+jbhXix4p0SFjtst5VLxGeE=)
2: VbnN-LflPvzZeZsR50D1Vf1T9MY.crl (hash: BZitWDBIcfbhQx3ShkYAU+N3J7g/6LftKy5OQBRUbFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:01:0f:08:c6:75:4b:a6:e2:2b:00:1c:42:c2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
Validity
Not Before: Nov 11 03:00:57 2025 GMT
Not After : Nov 12 03:00:57 2025 GMT
Subject: CN=6abffa6ff8804c0c711d71ab9504462a17515b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:53:a6:47:b2:73:52:db:79:34:22:31:7d:cc:
e3:8a:d8:6c:ba:cb:c8:a4:d5:dc:76:06:c3:2e:1a:
65:12:f5:06:9b:05:fb:18:b6:23:6b:5f:57:ca:e6:
f8:69:94:42:64:0e:0c:c5:20:ea:6b:89:5b:c4:e3:
f7:77:b2:15:6e:d1:de:7e:ed:60:9a:ec:57:c3:fe:
b0:dd:fb:4d:66:99:41:0b:1d:08:a6:df:3f:0a:3c:
bd:7a:ed:1a:c9:73:8f:28:51:93:c7:2c:4c:52:9c:
e5:af:4a:05:7d:e9:a6:c5:23:ea:0a:95:92:8d:c1:
fa:ac:bb:ef:bc:95:99:38:ec:71:49:34:b6:00:60:
ad:01:ae:c4:98:6a:b8:b8:3d:93:ef:08:55:8f:64:
3c:2d:b8:29:11:a5:c0:f0:c8:1b:1a:27:55:61:41:
af:fc:af:48:c0:51:ef:42:d9:7c:06:0d:83:29:05:
5f:10:d1:e2:b7:6c:ca:2b:21:33:37:e2:bd:a3:91:
97:4f:15:0d:f5:26:01:0d:a9:33:bb:fe:0c:c1:b0:
2d:d3:db:11:38:37:78:32:8b:31:4e:f4:70:bb:06:
16:f1:0d:2a:c7:93:83:8e:3b:27:95:89:e4:01:70:
f7:80:f5:65:e0:bf:af:cc:25:95:72:fc:c2:5e:27:
5b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BF:FA:6F:F8:80:4C:0C:71:1D:71:AB:95:04:46:2A:17:51:5B:0C
X509v3 Authority Key Identifier:
keyid:55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ef:a1:c3:c5:09:e6:2c:32:09:8e:f7:06:87:36:9d:04:d3:
ca:79:b4:e9:d8:08:68:8d:02:ef:25:85:39:02:88:aa:7c:63:
16:05:39:4e:ce:33:51:a2:59:49:8f:b7:ea:ce:a9:c0:e3:9a:
5d:6d:59:44:00:d3:91:07:4c:ab:ed:b8:4b:fe:46:61:f4:52:
02:4e:ba:2d:e1:76:23:41:04:b8:24:27:97:4f:b9:25:88:2f:
86:41:38:c4:87:34:30:97:ec:a9:b7:b7:c8:8e:e8:c5:bf:e7:
f9:ee:12:b2:ae:02:20:8a:fb:bb:95:02:de:f8:f8:b5:13:15:
a3:9c:c0:d1:4e:3b:cf:17:36:8c:a3:b9:39:ea:33:46:99:19:
60:6a:f7:bd:4c:50:85:59:58:1e:a2:f0:bd:92:3f:c4:e2:91:
59:81:6c:d8:50:31:f4:fe:69:65:45:8b:e8:58:c7:9a:d4:f2:
ef:3c:71:d0:a8:c1:24:15:e9:96:21:23:99:c7:ef:e0:70:32:
9a:10:3e:8f:c8:9a:9d:ca:f3:27:17:53:20:10:80:40:3d:4e:
8b:e5:55:66:c0:f2:27:9a:bf:49:09:7b:f7:61:4b:a4:c3:71:
0b:ad:1c:1a:44:f8:50:19:0e:3e:2d:08:6a:1b:61:89:1c:7b:
bc:e6:eb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:29 2025 by rpki-client