Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
File: V_ZNsaQq2-ncMibryAr7t11Kfxg.mft (raw, json)
Hash identifier: Kfq9rwjdnxtHn8murHVfg5RUp4okS4a726bXi8RNKyE=
Subject key identifier: 09:0D:54:A0:61:26:18:B2:2F:03:47:81:C7:0E:DA:40:07:8B:AD:F3
Authority key identifier: 57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18
Certificate issuer: /CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
Certificate serial: 019A24AEE39C44E1133E1BF00F892DEA9E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
Manifest number: 16B2
Signing time: Mon 27 Oct 2025 08:00:32 +0000
Manifest this update: Mon 27 Oct 2025 08:00:32 +0000
Manifest next update: Tue 28 Oct 2025 08:00:32 +0000
Files and hashes: 1: A8RA-KyHreMNSgmJAylrJgsQAGI.roa (hash: nePGMmr2buSknOQjxf358rj5Sl4Q3WncEvIivf/SZEI=)
2: V_ZNsaQq2-ncMibryAr7t11Kfxg.crl (hash: SsTCWNoyDDcVtuPYv0bUnJ5ZR654L5ojfQ47u+nMJmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:e3:9c:44:e1:13:3e:1b:f0:0f:89:2d:ea:9e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
Validity
Not Before: Oct 27 08:00:32 2025 GMT
Not After : Oct 28 08:00:32 2025 GMT
Subject: CN=090d54a0612618b22f034781c70eda40078badf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:cb:5b:c4:25:6c:56:e8:08:48:5d:7d:25:
e3:9d:7e:b4:c6:1d:f0:c0:8b:50:d0:90:27:3e:23:
f0:3a:91:80:4d:9d:d8:b5:d6:58:5e:ab:fc:93:99:
f3:70:f5:ca:58:e5:21:3d:f8:dd:35:ec:23:cb:54:
24:8b:4e:e6:66:49:12:0c:cc:a7:93:7d:d6:cc:98:
b4:af:da:b8:b9:e8:1a:bd:cd:c2:b8:57:21:a5:ef:
de:f0:8e:be:f4:56:8b:bb:7f:50:22:15:8d:3c:e8:
6b:b4:94:44:e8:7a:4f:be:4b:4a:fe:73:b2:aa:1e:
78:39:a5:6d:81:3c:ef:2a:c0:9e:37:fe:6c:cc:bd:
cb:f6:82:2e:aa:0a:aa:14:87:76:48:84:cb:25:61:
9b:73:19:bc:f7:d8:27:c8:e5:87:88:e8:dd:13:5d:
90:c8:bf:9c:d1:28:2c:62:04:82:c2:df:25:7d:0f:
07:43:a6:76:0e:25:a3:74:bc:9f:71:d3:ee:9e:cd:
69:89:10:10:39:10:cf:44:b2:36:3e:9e:c7:0c:a8:
56:35:87:04:5e:fa:a6:f4:d3:fc:42:ad:09:12:b5:
8c:63:46:21:8f:fa:3b:a4:0e:fb:5d:1f:e1:55:7a:
b2:10:51:2c:17:32:33:a4:35:0b:14:42:ca:c0:2d:
f6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0D:54:A0:61:26:18:B2:2F:03:47:81:C7:0E:DA:40:07:8B:AD:F3
X509v3 Authority Key Identifier:
keyid:57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:15:f8:49:37:73:23:09:be:b5:58:ae:c8:38:07:11:64:8a:
62:87:ad:52:0c:43:f5:50:00:37:6f:0e:7c:80:22:e1:94:b9:
9e:b4:ed:c8:4a:b7:83:62:01:44:37:23:9f:50:bd:64:01:dc:
b5:8a:5f:7d:97:e9:ad:83:5c:df:62:44:6c:d0:38:ae:94:f0:
ea:35:a3:95:b5:d6:27:d7:2d:08:e5:e1:19:bd:34:8f:6d:1c:
d4:dd:34:26:2b:90:00:36:0c:a8:0a:1a:b0:fa:3e:be:96:c6:
c7:58:10:24:4b:93:25:9a:fb:81:b3:6a:6c:55:94:e1:0a:17:
26:f8:fe:49:65:62:21:05:4c:cc:96:0a:bd:c4:ac:f1:72:5c:
98:a5:de:96:28:96:c7:10:59:b4:02:31:d0:7a:7c:27:cb:57:
17:cc:a5:54:20:54:09:44:25:e6:dc:92:d1:6c:4a:9b:24:2d:
6d:e0:be:ad:ed:fc:d7:e0:f8:57:0b:c0:a5:1a:b8:3c:11:76:
86:0e:55:cf:5e:28:dd:5c:8a:ec:d2:fb:35:22:51:7d:3a:85:
3c:15:df:fb:f0:91:e5:08:d1:9f:02:b7:ed:7f:27:d1:f1:07:
3c:72:51:a7:59:c9:f3:9c:12:53:0a:bb:7a:08:78:b8:d4:36:
b1:ab:2e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 11:56:54 2025 by rpki-client