Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
File: VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft (raw, json)
Hash identifier: gxcfqSUOi0UGmygdIeJAqpCEb/XbGz0I6q9od17RdCA=
Subject key identifier: 37:5D:11:F8:BF:12:8B:7F:26:1D:FA:98:E2:26:08:E3:62:51:4B:1D
Authority key identifier: 55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
Certificate issuer: /CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Certificate serial: 019A1384C3EC9BECEE66D91E2114E26D7A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
Manifest number: 0BEA
Signing time: Fri 24 Oct 2025 00:00:59 +0000
Manifest this update: Fri 24 Oct 2025 00:00:59 +0000
Manifest next update: Sat 25 Oct 2025 00:00:59 +0000
Files and hashes: 1: Hgi_WtigQe-4a9mBK4OJ2dE5DEg.roa (hash: glvgmho6qzikqxgDEl6Npj+ieTiLH+pi39kY0pjWHaY=)
2: VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl (hash: /xLk28/0f4fvc7i6qF816DUt1dIe2o8TT388rzSCHfA=)
3: YHJMwPpMbGI_zFjgbXnZP4EWLRA.roa (hash: PbBfFMHu68bzOncJDtOs1K4e5CV47wx0OGKsJihA0w8=)
4: zQrSyIjUHwJboP1xxZbE_ExqSB4.roa (hash: BdysfnABpVK+6w8shMYkAFX35eeb6edXdvxWPmnVvoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:84:c3:ec:9b:ec:ee:66:d9:1e:21:14:e2:6d:7a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Validity
Not Before: Oct 24 00:00:59 2025 GMT
Not After : Oct 25 00:00:59 2025 GMT
Subject: CN=375d11f8bf128b7f261dfa98e22608e362514b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:01:93:e4:e5:7a:5e:98:97:61:67:65:50:c6:
41:55:d6:ce:fd:a0:a3:94:71:59:65:95:cb:0c:fb:
18:90:ba:0f:89:4d:c3:f1:34:0e:b8:fe:77:98:e3:
27:5f:2b:57:74:41:c1:7d:e0:1c:fe:88:a3:77:ce:
d6:32:46:51:61:d6:03:76:6b:0a:b1:c9:f0:31:b8:
ad:8c:9f:1c:25:d4:8e:db:8f:02:da:1a:94:56:a3:
f7:db:3c:35:35:e0:04:3e:1e:3f:90:b7:0d:f5:bb:
32:99:1a:67:3f:7f:c9:ce:a8:8c:92:da:32:e3:e7:
da:02:7d:84:00:1a:63:e7:5d:9d:31:48:1c:22:ff:
c3:fa:9d:30:5d:65:1f:af:14:1d:23:9b:54:3e:21:
23:cd:35:8c:1b:ec:90:44:b8:aa:cb:57:cf:e9:e7:
01:fa:c9:59:c5:a2:b2:d1:12:f2:f8:50:65:85:bd:
c9:82:f3:a6:84:dc:9d:1b:88:4a:87:b6:b8:4f:74:
56:dd:82:b6:9f:e7:ff:5c:46:8d:be:30:96:e2:75:
3a:c9:ba:f1:f6:40:4c:e8:db:97:95:d9:bc:d1:c7:
e9:af:49:d1:0f:06:37:30:9d:8a:82:ad:1e:4b:78:
a2:cd:d1:75:58:01:00:09:0a:27:84:96:0d:6f:5c:
7c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5D:11:F8:BF:12:8B:7F:26:1D:FA:98:E2:26:08:E3:62:51:4B:1D
X509v3 Authority Key Identifier:
keyid:55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:e9:12:eb:9c:ef:5b:a1:89:86:b7:3e:4f:f3:df:a4:31:65:
b7:a9:ab:c4:99:f6:e6:06:59:4b:9f:81:d6:67:43:df:94:31:
13:04:9d:02:70:df:30:81:37:2c:58:60:9f:3c:fc:e2:da:0a:
a5:4e:5e:70:32:39:00:58:ca:13:ac:ec:1e:53:ec:e4:fc:80:
99:2e:31:a1:3b:69:2f:6d:ee:c8:e0:bf:cd:1b:dd:9a:b4:a0:
b3:1e:61:48:f0:6c:fe:3c:d7:b6:4d:aa:cc:23:77:33:01:1a:
9d:b7:1a:2c:99:c8:64:d7:83:c1:1f:fb:15:55:51:7c:4a:b8:
70:63:e4:1e:c1:99:ec:bc:e3:6d:85:36:93:a3:aa:73:12:c3:
10:67:0a:c4:ea:0c:7b:53:c8:12:57:80:8b:38:58:2a:96:0c:
49:f8:bf:46:06:5a:d8:d4:6e:59:5b:77:15:a1:0d:4f:7f:3a:
f9:fc:c6:5d:0e:ae:cf:fd:9f:4e:fa:52:8a:53:15:44:11:2e:
48:12:c4:f5:a7:7b:7e:0e:e9:e4:7c:51:bd:71:9e:e4:29:ed:
1c:9f:72:66:9b:8c:b9:23:47:e0:45:ae:34:d6:0f:e1:6b:eb:
13:41:b3:5d:b1:4a:e4:f5:0b:73:fd:6a:27:d7:32:a4:1a:7c:
30:65:24:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 10:13:14 2025 by rpki-client