Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
File: VyumSzqQYLRkM3rTCgK-xLEaVR8.mft (raw, json)
Hash identifier: gFWvQjzgJ+BhFilP1nMVrFDLoNTTi51ZkHwGiAIVfaE=
Subject key identifier: 90:D9:30:20:95:8A:C3:52:EB:7B:ED:EE:7C:8E:B9:98:42:2A:1C:54
Authority key identifier: 57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
Certificate issuer: /CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Certificate serial: 019A2477E8EE598DED657DF854C3121B944B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
Manifest number: 138C
Signing time: Mon 27 Oct 2025 07:00:29 +0000
Manifest this update: Mon 27 Oct 2025 07:00:29 +0000
Manifest next update: Tue 28 Oct 2025 07:00:29 +0000
Files and hashes: 1: VyumSzqQYLRkM3rTCgK-xLEaVR8.crl (hash: fHA5qHdjsrBY7BjlGvKDhe1RlSVZeywycyl2pd14Ew8=)
2: k3QEGek6OEeL5SsPbREF1e2K4Yk.roa (hash: NiaroSVfhsYQcW9nN+bvyMvN1j0QK242NmOTmwcSA2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:77:e8:ee:59:8d:ed:65:7d:f8:54:c3:12:1b:94:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Validity
Not Before: Oct 27 07:00:29 2025 GMT
Not After : Oct 28 07:00:29 2025 GMT
Subject: CN=90d93020958ac352eb7bedee7c8eb998422a1c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:0b:a1:46:a8:2c:14:41:db:8f:e5:ad:e3:
cb:84:e7:8f:dd:6c:08:c8:44:d1:fc:88:d6:f0:37:
61:bb:52:da:4a:e8:a2:d5:a0:49:12:e7:3f:5f:70:
44:5a:9c:34:c4:37:c3:e5:80:1a:c2:b1:9b:9a:89:
21:75:8f:ea:59:c0:01:51:b1:09:cb:a7:e5:31:f8:
d3:51:86:7f:a1:37:5b:77:a7:7b:81:95:2c:55:d7:
02:a1:12:df:ff:b1:06:68:cd:0d:f6:06:8b:fc:94:
68:b8:b9:e5:35:3d:01:27:07:50:72:5f:f4:7f:d1:
5b:fa:1f:b8:9c:7e:d0:b3:68:31:e7:af:92:b5:1c:
fc:d0:d1:75:f8:86:4f:f8:09:a1:4d:4d:3f:61:1f:
23:eb:97:0f:03:50:2c:ba:3f:1f:f0:44:94:fa:23:
e8:7a:77:3c:dd:cd:64:e5:fc:a2:5e:6e:40:53:ec:
f9:d5:e2:83:4f:55:c5:09:bd:31:ed:60:6a:af:54:
a7:e4:09:1e:ef:30:c5:e9:74:12:40:f4:60:f7:bb:
4d:2e:b6:67:0e:d8:c0:53:24:fd:0a:f6:69:f4:3b:
ed:5e:ad:c1:47:42:10:a2:4c:9b:25:ac:7c:4f:69:
34:eb:fb:5c:9e:ff:df:7b:59:d2:c2:86:7b:61:07:
af:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D9:30:20:95:8A:C3:52:EB:7B:ED:EE:7C:8E:B9:98:42:2A:1C:54
X509v3 Authority Key Identifier:
keyid:57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:cd:21:3d:e5:4f:45:c4:0a:42:66:5e:2b:f4:af:1d:b2:ee:
7a:5e:b5:4f:21:c7:b5:35:24:87:b9:b5:38:8e:e5:79:4b:1a:
5a:b0:46:30:4b:0f:55:1e:59:c2:d7:fc:0d:ef:e3:24:89:d4:
b1:e5:6c:b8:f3:aa:75:07:9f:8e:7f:5f:13:f3:14:88:bb:9c:
cc:bc:0e:f4:aa:d3:7d:d3:59:ca:0e:e8:65:b3:9a:cb:cd:1c:
f6:c5:db:b5:ac:94:38:6b:c4:69:4f:b2:6b:3d:c4:a0:26:c0:
37:f3:4f:9b:af:d7:8e:8f:76:ae:3e:0f:4c:60:51:d0:91:92:
0e:62:0e:f9:08:1b:86:5b:25:5d:0b:f7:a9:fe:0e:bd:87:a7:
49:35:ef:aa:f6:b1:4d:77:aa:03:87:c3:95:0d:99:c1:fc:54:
e0:4b:b4:09:86:a6:96:9c:83:89:74:18:85:2e:d0:c3:57:a5:
69:39:0c:1b:39:5f:82:1d:97:8e:1a:86:17:25:e2:ef:2b:ac:
eb:0c:84:3f:d8:c3:53:59:83:4c:e6:5c:e7:3e:f0:8c:21:a9:
e0:0b:0c:d5:98:ec:82:45:81:57:cb:c8:04:de:4a:03:3d:79:
c4:d8:ba:e2:39:b0:63:85:32:fe:ed:f7:be:72:17:96:cd:3b:
d1:78:5f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:04:39 2025 by rpki-client