Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
File: VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft (raw, json)
Hash identifier: 177nxNq55BAGSxm0cZSOrrUtVQPk9PhIX2LSRNZWQX4=
Subject key identifier: 5A:E2:75:0F:B2:6D:64:B0:4F:E1:20:A7:D1:A7:F4:D7:DF:6E:96:E4
Authority key identifier: 54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
Certificate issuer: /CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Certificate serial: 019A72CA5D9A1ECCF096638190BCE4953F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 12:00:56 +0000
Manifest this update: Tue 11 Nov 2025 12:00:56 +0000
Manifest next update: Wed 12 Nov 2025 12:00:56 +0000
Files and hashes: 1: QgsJlqJcTUYG8ULdRGgE3NFD82g.roa (hash: js71yBiScUO+PfDSCeaEzOg8Fh9K6ktXB24Y7dBG/Eo=)
2: VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl (hash: AbZHlR62iJytnweP4loXmls/EQdXsoVzyYg1QAc+Ygk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:5d:9a:1e:cc:f0:96:63:81:90:bc:e4:95:3f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Validity
Not Before: Nov 11 12:00:56 2025 GMT
Not After : Nov 12 12:00:56 2025 GMT
Subject: CN=5ae2750fb26d64b04fe120a7d1a7f4d7df6e96e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:54:7a:5d:b5:44:aa:20:09:ce:fe:87:e7:fd:
7c:53:31:1f:cc:6b:54:ce:99:81:47:89:cd:4a:09:
1d:ce:bc:b4:1c:4f:45:d4:53:3c:8d:0f:ed:cb:b8:
1d:26:31:9a:b5:0a:f5:01:52:6e:45:3d:96:d0:04:
ec:84:fa:6e:80:05:ab:25:22:f3:6a:8b:9f:12:ec:
de:51:50:98:a4:03:25:26:6f:be:c5:ed:a0:b4:a6:
60:77:89:76:75:6f:3a:5c:70:fc:42:3d:0b:9b:42:
d8:f8:e7:fb:33:ee:eb:14:85:f3:ab:25:7f:de:06:
6b:b2:fa:35:d3:85:e9:1e:f9:d1:5d:3c:41:56:06:
67:60:e2:64:d9:0b:87:0e:45:26:02:8a:4a:62:bf:
30:08:d4:ae:e8:ed:6a:33:1e:99:f5:c7:59:b6:ba:
a1:ac:bf:db:ae:c5:09:fb:c4:0c:28:bf:e1:f6:62:
4c:e7:4a:3a:46:22:f8:5d:fc:c8:10:b4:cd:8a:54:
b8:3c:be:49:c0:f6:0c:b3:e1:13:43:89:58:a5:5f:
69:ee:fb:71:ad:78:1a:53:bf:d0:c0:60:d1:08:52:
7a:20:3d:5a:93:db:58:e5:56:2e:ea:51:c1:b3:a1:
9f:9e:45:33:0f:fa:63:7b:cf:21:37:00:25:ed:04:
58:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E2:75:0F:B2:6D:64:B0:4F:E1:20:A7:D1:A7:F4:D7:DF:6E:96:E4
X509v3 Authority Key Identifier:
keyid:54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:51:97:3a:bf:ca:64:96:64:80:40:2a:ec:32:59:da:ad:36:
ce:f0:53:fd:d7:e1:47:e5:f2:59:4a:d3:b6:6f:69:ee:50:cb:
5b:84:1c:e7:64:c0:0b:10:ab:bf:88:49:1d:0b:8b:18:bb:41:
37:1f:82:2c:de:62:e6:fb:0b:d0:5b:e4:b2:ec:ae:8a:35:95:
66:6f:c4:df:85:5a:16:a3:55:2f:ba:f4:7a:6c:50:c4:fa:42:
3d:db:f1:93:d5:2c:a8:12:25:2f:c5:bd:de:34:98:84:e9:cc:
67:e8:7f:d6:10:88:03:38:0b:78:07:cb:13:de:ac:46:2a:ef:
6d:61:70:0e:e7:c3:be:86:85:6b:2e:f2:50:fe:62:98:a5:64:
ea:6a:fb:ff:32:7b:2e:e9:12:ba:cb:5b:7f:be:3a:9b:76:9a:
4e:91:67:7a:dc:dd:c4:b0:96:ab:a3:23:ad:ee:a6:2a:45:99:
c5:46:b0:d8:21:e6:06:33:b6:b1:45:a9:77:17:4c:95:76:16:
e4:a1:bb:e4:03:9e:c3:70:db:fe:a5:eb:b0:86:5a:6b:3d:f9:
92:8b:d3:64:15:5a:2b:cd:b5:11:40:5c:90:18:fa:96:3d:5e:
16:24:53:41:42:57:4b:50:23:8d:1d:9a:43:52:97:61:9c:39:
5b:32:a2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:54 2025 by rpki-client