Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
File: VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft (raw, json)
Hash identifier: 2RhTBJ3lxt/5w9Pk1Ox7er76Pu/UHQF7QtUrsDPHXHg=
Subject key identifier: 05:C2:E1:46:DD:93:95:6D:EB:DA:AF:0C:02:FA:9B:DE:B9:28:55:B8
Authority key identifier: 55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB
Certificate issuer: /CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb
Certificate serial: 019A706E13FA7389A5B852357C474B723AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
Manifest number: 04DD
Signing time: Tue 11 Nov 2025 01:00:53 +0000
Manifest this update: Tue 11 Nov 2025 01:00:53 +0000
Manifest next update: Wed 12 Nov 2025 01:00:53 +0000
Files and hashes: 1: LAyDLVrlWC7GYrIpkUltJFolhC0.roa (hash: 5fqulNX0pe/944CBeE9O8m/kZ++wdZNRG9xqatGIqks=)
2: VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl (hash: wyc2JTP/apP+WzdJ5I0RoLBT6LIrBogOxrK9Kx2ans4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:13:fa:73:89:a5:b8:52:35:7c:47:4b:72:3a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb
Validity
Not Before: Nov 11 01:00:53 2025 GMT
Not After : Nov 12 01:00:53 2025 GMT
Subject: CN=05c2e146dd93956debdaaf0c02fa9bdeb92855b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:d7:18:1e:fe:8a:cc:23:6b:0b:7c:1b:c1:
62:9c:e7:ac:c9:d4:2b:31:d5:19:29:e6:98:39:28:
21:eb:76:2b:a0:d1:81:fa:b1:b5:d0:be:a7:97:62:
ac:50:8f:18:9d:15:05:52:3c:fd:12:a8:cd:87:a0:
27:d1:c5:19:88:38:89:f2:b6:a2:de:58:e8:48:d0:
70:4e:71:d6:00:a9:4b:34:f6:0e:5a:6f:10:f7:62:
e5:5a:58:31:5d:c3:e6:1d:0e:75:01:e2:23:94:26:
0b:98:f8:ad:d1:af:a6:b8:88:9f:7e:c3:16:91:1d:
4b:8b:bc:79:2a:94:03:38:af:0f:92:bb:b8:25:a7:
c7:9f:36:f6:54:30:19:ee:17:14:38:3e:53:4d:1a:
b1:96:1c:ff:01:00:c3:4c:73:e6:69:f8:f0:4b:5c:
3c:b3:1d:03:0c:87:72:5d:9f:27:8e:12:94:13:5e:
bb:e6:4b:67:20:d4:71:3b:14:c0:d9:32:b6:09:49:
79:99:4c:7b:25:61:bb:5d:e6:6a:17:4a:76:7f:60:
ff:e0:0e:56:9f:81:b5:27:8d:cb:51:a7:1e:0b:ab:
aa:66:04:ab:ca:14:d8:0b:ae:63:2b:6c:c6:19:37:
3a:1c:1b:e7:29:19:24:63:dd:0c:16:11:b3:e0:05:
2e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C2:E1:46:DD:93:95:6D:EB:DA:AF:0C:02:FA:9B:DE:B9:28:55:B8
X509v3 Authority Key Identifier:
keyid:55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:4c:12:d6:d6:a6:18:e3:ba:2f:4c:09:bc:2d:35:ab:ae:e7:
54:81:f3:a7:eb:06:d4:ec:0f:3a:c0:fb:ca:c1:45:1a:78:11:
73:63:49:f1:27:5f:93:fa:08:b1:75:9a:2d:4e:79:53:02:d6:
32:a1:3b:86:fd:92:e6:cf:e0:aa:ec:4f:7d:35:57:87:8b:c6:
3a:ae:e1:34:f4:5d:c0:46:d8:3e:ef:b6:8c:1f:e1:a3:62:eb:
9c:2a:3f:7f:14:fa:38:20:82:d3:c0:f8:b1:1d:ec:dc:20:02:
e3:49:c0:e3:00:a8:69:1a:0a:8b:39:b3:fe:f1:a4:22:eb:28:
3f:3a:61:c6:cc:84:2e:01:d7:6c:b1:09:e9:5b:3b:e2:a1:16:
87:8c:09:d9:4c:39:74:a9:7e:07:b0:c7:5f:11:5c:2a:fd:28:
52:34:b8:61:19:bb:44:db:35:5d:8e:e3:06:ff:2e:d1:39:e4:
ad:6e:7c:f5:64:ac:bd:16:e0:a1:5d:d2:eb:cd:b7:7e:3c:a3:
ba:07:f5:a4:7c:ee:13:4a:69:91:f3:87:5f:81:08:07:57:e1:
4d:8d:60:e8:0a:18:bb:e2:01:1f:d3:34:a2:66:7a:8a:17:ed:
55:5b:7c:73:ff:83:76:bc:5d:64:84:98:0c:8e:98:ed:ab:3c:
b5:26:cc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:50 2025 by rpki-client