Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
File: VxRWZJaS5gVm3gCOEmu90dLr7UU.mft (raw, json)
Hash identifier: t5+HP35cVnWNw1bq4Fea4hGWZ4brr0y+Htpq5gpfpGQ=
Subject key identifier: F2:8D:2C:8C:44:70:98:5E:76:B0:5E:50:8F:7B:A0:CF:48:77:E3:BC
Authority key identifier: 57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45
Certificate issuer: /CN=571456649692e60566de008e126bbdd1d2ebed45
Certificate serial: 019A71B8788B8B552B95636A17B23DE4D38F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
Manifest number: 0F9A
Signing time: Tue 11 Nov 2025 07:01:46 +0000
Manifest this update: Tue 11 Nov 2025 07:01:46 +0000
Manifest next update: Wed 12 Nov 2025 07:01:46 +0000
Files and hashes: 1: VxRWZJaS5gVm3gCOEmu90dLr7UU.crl (hash: DtXJbfEpm5azMtqa7oONnJpihnhMCOAm2oqgEQNBCPo=)
2: t0KxoFR4-v-aF7ApZp5a51UCPdE.roa (hash: wDmBNX7FNw1Byb+j/pduuukElypr1eZvZiRjB9AwIB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:78:8b:8b:55:2b:95:63:6a:17:b2:3d:e4:d3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571456649692e60566de008e126bbdd1d2ebed45
Validity
Not Before: Nov 11 07:01:46 2025 GMT
Not After : Nov 12 07:01:46 2025 GMT
Subject: CN=f28d2c8c4470985e76b05e508f7ba0cf4877e3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f5:64:16:1a:a0:3c:cd:37:9d:30:30:f0:1c:
9a:d1:ad:4e:4e:91:11:50:56:25:52:80:b1:97:5e:
90:8f:38:3c:72:ed:f6:1a:0f:76:8e:fa:28:79:9b:
bb:ae:94:22:93:9d:5f:39:52:3f:e8:03:09:37:41:
35:c5:84:b4:5d:4c:64:8e:e5:04:3c:72:8d:6c:21:
84:e6:6c:21:51:c5:4e:d9:2a:2e:da:d7:c6:07:28:
da:00:9b:08:68:af:f7:5f:72:bf:bb:a3:e7:ca:42:
f5:66:d5:7b:27:51:f0:9a:e5:d3:75:bd:18:ae:7e:
08:7b:b1:1f:28:3f:ee:60:6a:49:f6:1a:06:ae:b6:
6e:01:e9:1c:88:ce:4f:fb:c0:bc:e5:ee:32:78:13:
07:b5:06:c7:5c:fb:13:7d:2c:6b:99:60:7c:0a:9b:
a5:0f:6d:18:c6:22:f2:74:50:4a:5c:f8:24:58:54:
8a:1e:7c:6e:c5:f0:38:ca:84:e9:7f:5d:e9:7d:b8:
f9:f3:b6:9e:e3:74:38:2e:25:56:6f:a6:cb:84:0c:
8d:7d:a0:c8:4d:ba:e6:e9:93:a8:3f:f4:63:98:46:
99:b6:42:84:e5:83:84:34:92:fd:7d:be:21:c4:34:
63:49:28:27:73:ec:37:3b:f6:02:7a:87:6e:46:41:
b7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8D:2C:8C:44:70:98:5E:76:B0:5E:50:8F:7B:A0:CF:48:77:E3:BC
X509v3 Authority Key Identifier:
keyid:57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:b2:08:d0:19:84:98:d6:c1:d6:a2:f1:5e:71:e9:e5:10:0c:
6a:c2:d0:82:a7:33:c8:1a:c3:d8:3c:c7:db:99:95:20:0f:15:
25:99:ec:ce:c1:35:4d:91:12:db:e6:76:af:51:70:21:9f:87:
42:23:8f:a4:7e:e2:0e:43:84:2b:f1:4e:76:a7:f4:4f:be:5e:
ea:f0:eb:5f:86:ef:b0:8e:e4:24:b0:7e:46:5f:95:5f:82:71:
4c:96:9c:05:8a:1d:98:73:cd:58:f5:83:00:c9:6d:39:43:5f:
52:31:74:5f:ff:83:39:a1:3c:3f:ff:91:e1:7d:c6:4b:2a:23:
bf:92:13:eb:e2:19:63:0c:a6:b6:40:b2:43:66:c7:42:ce:e5:
4a:c8:ce:ef:ee:cf:3a:63:5b:46:00:77:b8:9b:e2:8b:f8:b3:
82:35:e4:b1:42:eb:fd:bd:64:93:c2:16:c1:62:4a:a9:76:df:
1e:8a:3b:be:6d:64:75:98:bf:be:b3:74:db:95:a7:47:f5:55:
7f:a2:b4:b1:8f:12:12:16:68:3e:9b:77:9b:25:c2:d7:20:c8:
3f:df:a0:1c:a6:2c:1f:cf:9e:93:cf:cc:18:22:c2:22:fc:bf:
9b:d0:37:45:29:c6:3b:61:bd:28:eb:f9:0e:10:6e:ab:a6:6b:
8f:b5:e3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:40 2025 by rpki-client