Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
File: Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft (raw, json)
Hash identifier: yPmYnYkc1IbfxYhjEIIGwUK+VSO1LHTLjJGb86oxkqc=
Subject key identifier: 5A:9B:14:B6:BE:7A:23:47:35:3D:9B:EB:73:71:2C:69:4E:05:6F:32
Authority key identifier: 56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
Certificate issuer: /CN=56376def1224839a6113d1d0cdd398104faaf2fb
Certificate serial: 019A71B8D872E395A94F512E316F88A427C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
Manifest number: 0599
Signing time: Tue 11 Nov 2025 07:02:10 +0000
Manifest this update: Tue 11 Nov 2025 07:02:10 +0000
Manifest next update: Wed 12 Nov 2025 07:02:10 +0000
Files and hashes: 1: 8YyDmxndvd6azClM9JTsxIv2kz0.roa (hash: 0fvpyn3lFxp2N7HhgqqjnRwit9mrT13M79B8b6kGTr4=)
2: Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl (hash: U5goh5NsIX57ts/YkGaJNDmf+5MK198GmEjoCxOkn7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d8:72:e3:95:a9:4f:51:2e:31:6f:88:a4:27:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56376def1224839a6113d1d0cdd398104faaf2fb
Validity
Not Before: Nov 11 07:02:10 2025 GMT
Not After : Nov 12 07:02:10 2025 GMT
Subject: CN=5a9b14b6be7a2347353d9beb73712c694e056f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d0:b1:d6:f9:12:d6:05:5b:64:29:ce:eb:62:
ce:ee:53:99:ab:aa:43:4a:04:5e:25:bf:a2:fc:8f:
77:62:ac:02:29:2f:ab:8f:c1:b6:29:79:b9:57:10:
9b:ef:41:c7:60:d8:08:3d:11:29:2f:d6:a0:30:d2:
da:eb:91:7b:a1:f1:15:25:ce:48:cd:04:88:26:9b:
83:08:07:7c:24:1b:ef:d8:d6:06:b6:32:48:43:d4:
69:5b:2b:4e:82:54:6e:b9:41:33:9a:1c:67:cb:0a:
85:6b:a6:c8:00:01:d9:60:b4:ec:4f:ef:19:8b:04:
3a:f4:4a:a4:3d:78:69:a1:58:e9:3a:2e:38:ad:44:
9c:9e:61:7e:4c:b8:ce:ef:33:54:2e:b2:52:dd:0f:
d5:03:b9:b2:a2:68:4b:df:18:a0:99:f4:0c:9d:79:
d6:a2:4c:7d:83:2c:91:13:07:6d:96:43:d9:8b:3b:
b9:72:a7:d0:4c:ef:f6:27:91:76:7c:e1:3e:17:6e:
7e:fd:f0:ff:8f:63:22:1d:90:d9:2f:eb:38:73:8c:
6b:72:59:38:4e:f1:73:dc:1b:ea:5c:98:a5:0c:16:
b1:83:6b:b3:a0:3e:7a:20:be:ad:31:1d:9d:52:1c:
74:27:3b:af:28:c0:b7:87:07:60:38:4e:e0:03:cc:
01:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9B:14:B6:BE:7A:23:47:35:3D:9B:EB:73:71:2C:69:4E:05:6F:32
X509v3 Authority Key Identifier:
keyid:56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:df:e9:3d:35:df:3f:0c:d4:60:1a:31:37:76:3d:a9:47:89:
5f:50:db:7f:3d:a0:22:3c:9f:73:7c:4d:3e:ae:15:1c:c8:cc:
93:c0:97:19:fd:9d:6b:5b:50:54:80:52:ea:bb:50:22:0a:ca:
a2:2d:55:54:8b:fa:0e:a3:09:af:01:67:e5:8b:f3:cc:10:94:
da:69:34:9c:e8:58:06:9f:85:22:1e:9f:d1:6c:23:75:52:ec:
e2:d3:a2:08:0f:fd:a8:27:f9:3c:79:05:04:64:f3:bf:9c:61:
01:b6:65:8c:a1:18:f1:ea:d0:0f:60:88:01:cf:c7:26:a0:a5:
f3:a4:8e:3d:4b:cb:17:cb:7d:bc:54:f3:26:f6:d2:7e:b3:7e:
ee:8d:33:48:c6:fe:74:53:79:4b:3c:19:cc:f1:9c:3d:b3:31:
e1:09:e8:41:6c:23:4b:96:0f:9a:cb:f9:5e:ac:5a:7c:e5:ed:
99:e1:c7:6d:d1:31:da:bd:80:c9:61:ea:5f:7d:a4:5a:fe:e5:
99:a0:38:db:6a:2e:01:53:56:cd:11:e1:01:76:b0:b8:97:47:
2e:0b:64:b8:ab:e6:c9:21:54:96:03:1d:da:5c:1a:6e:c8:77:
37:b7:d3:2f:02:32:ad:76:6d:c6:4e:c4:fe:31:8d:2f:ec:39:
af:c9:8e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:55:28 2025 by rpki-client