Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
File: VC9jP3bo2Krqoytazhaj2zlD2Aw.mft (raw, json)
Hash identifier: AELwMV47E4d9HiSlIOfFMsLdWNLr9oAr/OW6h5LcVTk=
Subject key identifier: 77:91:25:FC:C5:17:8F:58:52:A6:88:68:88:D1:FE:58:7A:1F:C1:CB
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 019A1AD0CABB6410148DDEA2EE24852F68F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
Manifest number: 170D
Signing time: Sat 25 Oct 2025 10:01:22 +0000
Manifest this update: Sat 25 Oct 2025 10:01:22 +0000
Manifest next update: Sun 26 Oct 2025 10:01:22 +0000
Files and hashes: 1: 9_Mv9ZEtP5jzBp-veVmAU5Me26w.roa (hash: 7xIRl7rk4EGTHFHDXuf8JFK1gbSXSJDUaqeJThSJ4B0=)
2: NvhPFVk9oyGz8ptuRFIjsEfx-34.roa (hash: rMiBv5wATJ5SuuGpYjDvqo3voyvSBHCSUHAwCjhyOqc=)
3: VC9jP3bo2Krqoytazhaj2zlD2Aw.crl (hash: 6wf0rzfUaShs/+Yoodgctd5t6D9mB69xNZVABsUilA4=)
4: W8VYUTscWXm_5fPXK391Lev4Y8I.roa (hash: jqzmOKHuREPVfrtcJ/0te/zL0kTBbKMBx+WS1zBrGeg=)
5: ZL2VPZ_9luxtBoeAANKmQq7yRd4.roa (hash: jO9zoicMR89BbaUoFzRifxO6s+pERNBb9LZTtsx4HAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d0:ca:bb:64:10:14:8d:de:a2:ee:24:85:2f:68:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Oct 25 10:01:22 2025 GMT
Not After : Oct 26 10:01:22 2025 GMT
Subject: CN=779125fcc5178f5852a6886888d1fe587a1fc1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:85:29:05:5f:39:b5:5d:a6:da:ff:ae:5e:
1c:9a:41:b5:95:65:af:46:8f:95:64:74:23:f3:b5:
30:3f:ff:70:75:09:d2:f5:5b:1d:ee:d3:76:2b:a3:
47:ad:e3:70:73:b1:32:1a:d4:ce:a2:bc:be:4c:5c:
27:f0:b6:a3:65:c5:56:3e:34:81:5b:d5:62:f4:f0:
8a:c6:b3:99:cc:b8:ba:52:5c:cb:b1:fd:62:cf:ab:
cf:04:82:b3:89:94:7a:b3:1b:10:a3:da:fc:8b:d3:
92:93:2f:b0:9d:29:1c:85:80:ed:13:38:b3:d8:99:
c7:70:9e:e3:8f:78:d0:34:9d:23:e4:00:c5:b6:9a:
0e:84:07:bc:e7:39:c3:e7:7d:df:f8:6f:37:34:1c:
f7:6d:fb:e7:cf:d5:1f:17:6e:38:0a:81:cf:3a:7d:
e8:65:ec:db:b5:c2:df:82:24:42:65:a5:de:d9:d8:
47:a0:77:c2:e6:58:fe:75:07:ef:12:4a:f2:cc:9b:
91:8b:ad:95:03:8a:ef:22:87:34:a5:89:2e:e8:cd:
22:3a:68:17:eb:e9:fa:21:94:f0:f8:c4:ec:c5:4c:
2e:5e:cb:b6:e3:42:35:92:de:46:1e:2e:ee:aa:d5:
8f:8b:e8:6b:3d:42:fc:37:93:f3:89:54:f0:91:3e:
a8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:91:25:FC:C5:17:8F:58:52:A6:88:68:88:D1:FE:58:7A:1F:C1:CB
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:f7:53:13:0e:49:98:34:33:d6:75:5b:4a:62:57:71:60:b3:
0f:75:4a:a5:61:69:dc:a0:b9:92:d4:db:b1:67:cf:87:8c:d6:
64:e8:be:23:64:9e:ea:91:d4:50:16:e9:85:27:5d:7d:ce:82:
c3:8b:ab:38:47:24:ed:cc:2a:70:73:9d:2c:c7:4a:e4:bf:30:
d0:97:e7:5c:7f:59:59:80:a5:93:b3:1e:44:d9:b1:96:3c:80:
68:c5:b6:a9:5b:54:91:7d:b0:fe:d5:50:0e:29:4d:f3:67:3a:
44:ef:dc:a7:37:f7:2f:70:ea:1a:eb:f8:f1:2a:f5:90:fd:cd:
da:ec:13:dd:8a:54:39:29:f0:4e:2b:80:0e:a5:d5:04:a0:e8:
ed:2f:41:7d:d7:9d:16:aa:0d:bd:ab:38:62:27:30:dc:33:d3:
aa:87:2d:c5:9c:4b:ae:86:4e:c0:f6:b1:1a:07:26:27:b6:25:
71:df:45:2c:fd:17:3c:78:6f:c7:47:c4:ba:79:d4:b1:da:fe:
dc:d4:8f:37:49:98:12:b8:da:3c:dd:60:59:da:17:6b:a2:c8:
19:dd:e5:06:b9:12:a7:12:36:17:94:f8:21:5f:6b:13:94:60:
cc:0b:a4:aa:a5:87:b6:12:d4:1e:3b:db:23:b2:79:72:19:ce:
51:96:21:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:18:20 2025 by rpki-client