Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
File: VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft (raw, json)
Hash identifier: kmqUiISm9QcynQbWxK1vMPOhc6T9FX+KpCQsPIdwvtA=
Subject key identifier: 5C:98:5F:A3:D8:77:F7:E3:F7:51:27:7C:23:78:29:1C:07:26:C7:BA
Authority key identifier: 54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9
Certificate issuer: /CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
Certificate serial: 019A71EECB7978943492E63E1B9E8ECCE47E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
Manifest number: 13B3
Signing time: Tue 11 Nov 2025 08:01:06 +0000
Manifest this update: Tue 11 Nov 2025 08:01:06 +0000
Manifest next update: Wed 12 Nov 2025 08:01:06 +0000
Files and hashes: 1: OUuP-6YCe14zgkfTQMdJLc2r9MQ.roa (hash: Aex7iaImK8VF1F7ddVhsOVcjsTFE1aBCNKfli39IJNE=)
2: VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl (hash: NvEVCUbAK3p4b9T6ILkcTOFnzsp8hekfLLIqVqrolM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:cb:79:78:94:34:92:e6:3e:1b:9e:8e:cc:e4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
Validity
Not Before: Nov 11 08:01:06 2025 GMT
Not After : Nov 12 08:01:06 2025 GMT
Subject: CN=5c985fa3d877f7e3f751277c2378291c0726c7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:e0:e2:34:a7:d7:2f:b3:fc:ef:6f:6a:ef:
eb:86:dc:a7:49:ff:7d:a5:71:09:e0:2d:26:2d:a1:
20:28:5b:e0:4f:5b:9e:6d:61:59:ef:cb:b1:6d:30:
54:1e:ac:50:87:7c:aa:3a:e9:f8:94:4a:e2:88:a9:
de:c7:a9:bd:f8:05:85:b3:1c:68:6d:1a:db:3b:73:
bc:28:2b:a1:d3:81:48:14:9a:05:57:8d:18:48:1a:
d4:63:15:00:f1:f5:34:21:f0:5a:08:ff:80:e2:bb:
c4:ea:a4:77:4c:e3:dd:64:0d:b4:f9:66:64:5f:96:
4d:55:e3:a0:b4:3e:04:96:02:f5:22:7f:5b:58:a9:
38:4a:45:32:36:f9:a8:b7:e6:a4:c7:11:b6:95:30:
0f:96:b6:df:b4:84:12:a4:8f:03:67:59:ce:ec:df:
bb:f4:18:bc:ee:4f:8f:b0:47:2c:fc:8d:a9:27:26:
94:9a:98:a6:53:a2:f0:89:ad:af:0b:f3:79:b2:59:
d1:03:ad:ee:c2:9b:1c:cf:55:be:85:8d:d2:6c:58:
2f:0d:aa:99:6d:2c:26:02:e4:e7:05:d3:df:6c:e6:
cb:c8:9e:4b:e5:61:b4:f2:34:46:01:aa:a2:78:ce:
ef:dc:3a:24:6f:30:d0:54:3f:a7:e4:f5:1a:ef:8e:
61:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:98:5F:A3:D8:77:F7:E3:F7:51:27:7C:23:78:29:1C:07:26:C7:BA
X509v3 Authority Key Identifier:
keyid:54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d1:62:18:13:01:51:e6:90:dd:51:54:b4:c3:e1:18:41:79:
d4:dd:13:11:44:59:a6:5f:76:50:04:fb:89:ef:ef:9a:80:da:
dc:19:2f:80:96:88:dc:92:34:9c:5f:4c:ea:73:7e:8d:31:14:
e0:5b:54:bc:c7:37:14:4d:ce:66:38:5c:47:f5:19:db:c6:02:
58:dc:03:00:30:49:d4:8a:44:69:f7:9e:9e:21:10:c1:0c:fb:
25:a8:bc:87:81:5f:49:7e:39:5f:a5:72:7e:69:2b:99:b9:fe:
93:3a:c4:55:d7:fe:25:53:86:23:56:f6:75:40:0b:b9:b9:a2:
3d:25:2d:38:87:e5:89:74:bd:f9:2a:93:19:12:60:27:0e:ef:
10:70:38:21:dc:3b:16:bd:d6:1f:cf:91:a2:80:bc:93:2d:51:
f2:13:e3:e1:29:af:97:ef:06:87:1d:12:d0:b5:4e:b9:74:80:
46:e5:7a:c1:c7:9e:b8:c9:05:f0:61:8e:b8:3e:ae:66:fb:2b:
a7:3d:b2:27:6e:ca:06:94:bd:31:c7:cf:b3:1f:ab:b5:da:20:
0e:89:78:ad:f4:8e:db:e4:e8:dc:ba:e4:3c:1f:48:1d:7a:52:
03:19:e5:2a:7c:8c:f5:01:a1:c6:f9:99:94:78:f3:75:28:9e:
8d:4b:23:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:09 2025 by rpki-client