Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
File: vatssugHrs69fgOoCAj6sj2cRxY.mft (raw, json)
Hash identifier: qbzwCm7RxNtEBy/cy8G8xWsk4r6KeDT9gc/KtcRPMtU=
Subject key identifier: A1:6D:84:69:99:AC:04:E6:CF:2A:62:D9:DF:C6:8E:F7:68:02:E5:91
Authority key identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
Certificate issuer: /CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Certificate serial: 019A71EEEB2F129EAC4BDACB3CF2B390BB46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
Manifest number: 0A14
Signing time: Tue 11 Nov 2025 08:01:14 +0000
Manifest this update: Tue 11 Nov 2025 08:01:14 +0000
Manifest next update: Wed 12 Nov 2025 08:01:14 +0000
Files and hashes: 1: FiQ6326ULjytbcRmbnTQT53B6qI.roa (hash: oVfk3zFCZV+aJ9BHrRH3g14/uV9d1uVQ7Jx5xhv/0d8=)
2: P26iBMzDxpvH-LQZESUQTHncYxo.roa (hash: 3+DbSLlopFDVY7Piu2/Wt1KhQBxlA0+iBBO7seLQMiE=)
3: vatssugHrs69fgOoCAj6sj2cRxY.crl (hash: PU61ALnqW4fRyApykD1x3AfA2b65TmuNXGS4zYrbm94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:eb:2f:12:9e:ac:4b:da:cb:3c:f2:b3:90:bb:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Validity
Not Before: Nov 11 08:01:14 2025 GMT
Not After : Nov 12 08:01:14 2025 GMT
Subject: CN=a16d846999ac04e6cf2a62d9dfc68ef76802e591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:66:6f:50:1d:90:19:49:fc:38:47:dc:12:
e2:59:b6:c4:50:66:dd:0a:ad:6e:e6:c1:93:a1:6b:
30:af:69:eb:35:3c:50:49:a3:6f:a8:98:af:ca:80:
ed:b4:26:f0:ad:83:a8:d8:28:29:5b:b3:07:05:94:
ac:68:73:6b:3f:ee:53:08:29:08:4b:05:99:0b:cd:
a1:fa:8f:f4:b5:f6:a3:cc:60:a6:70:9a:48:ae:c2:
0e:eb:61:ba:57:c3:15:b5:be:26:4e:53:d5:ce:52:
b3:68:4c:4a:c1:9a:d6:ba:b7:bc:14:45:e9:b8:ed:
dd:1b:2d:9c:51:be:e5:b5:7f:fb:08:e7:c9:e3:37:
64:65:d8:ee:76:7b:d4:55:e1:df:af:31:a7:73:58:
6f:fd:35:49:f7:e4:46:f9:45:ec:86:c3:9d:98:07:
ef:1f:82:aa:26:5e:0b:75:46:d3:a6:b3:30:dc:ba:
23:f6:d7:4c:fc:b0:7f:f9:6f:b0:19:e0:b8:9f:64:
15:54:10:4c:26:c7:d4:57:e2:1f:30:e3:79:0a:32:
3f:04:62:86:cd:64:3e:8b:32:f5:51:b2:ec:6c:35:
6a:a7:23:75:20:b2:c6:4d:7d:4a:77:c1:78:ee:b7:
0c:4b:3b:85:27:d9:5c:b5:5b:a3:61:5e:8f:7a:10:
fe:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6D:84:69:99:AC:04:E6:CF:2A:62:D9:DF:C6:8E:F7:68:02:E5:91
X509v3 Authority Key Identifier:
keyid:BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ef:0a:0e:79:56:ec:35:81:00:46:36:d8:a6:d4:ea:e7:6e:
88:42:e0:a2:ab:23:ba:e1:03:1d:12:2d:5c:c7:ee:1d:d7:48:
0f:fd:6f:5b:e1:6a:fa:dc:56:5e:af:e0:3a:08:9c:77:1f:c8:
71:fc:f3:41:98:2e:dd:e8:88:cc:90:2f:f8:c5:a6:b4:12:27:
1f:03:2d:11:8f:30:8e:f5:4e:9f:14:42:01:b2:3f:7e:79:2b:
d2:d7:3b:97:15:eb:d6:6b:ef:5e:50:78:e2:2b:fd:06:bf:7f:
79:83:b9:28:97:64:91:12:9d:f3:f5:e8:d8:75:5d:e9:87:01:
c4:c4:c2:a2:ff:ec:a5:2e:ff:0c:34:c9:af:22:07:50:7e:d7:
62:2d:f3:af:0e:64:45:5b:6a:34:d7:08:e6:92:87:cc:b1:e0:
e4:f7:b5:82:c3:e1:13:df:88:3a:67:cd:85:19:8e:6e:9d:f1:
a8:f5:e8:9e:bd:6b:83:4b:e5:cd:8f:e0:2f:f4:e1:34:52:a2:
c5:dc:26:54:55:dc:4c:f7:07:b2:94:2c:e9:1f:da:0e:e8:b9:
e2:e3:85:e1:3c:c2:5c:08:3b:11:71:aa:ba:99:19:dc:d0:12:
d9:db:f0:b2:35:35:fa:95:43:18:70:e5:3b:53:f5:93:71:4d:
15:19:b6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:30 2025 by rpki-client