Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
File: Vi6OBQ04RQLreX9elEkxpm_dVVo.mft (raw, json)
Hash identifier: O6ZE9qS1dH8L9uDcsCQDm+RCa2FSFW1dVZeZcr/08T4=
Subject key identifier: 31:7B:AF:F1:2E:DC:2B:B2:E6:98:0E:3B:3C:A7:ED:D8:F4:5E:96:B9
Authority key identifier: 56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
Certificate issuer: /CN=562e8e050d384502eb797f5e944931a66fdd555a
Certificate serial: 0199FD6B360F7E2E474A8FE76595717494C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
Manifest number: 0434
Signing time: Sun 19 Oct 2025 17:01:25 +0000
Manifest this update: Sun 19 Oct 2025 17:01:25 +0000
Manifest next update: Mon 20 Oct 2025 17:01:25 +0000
Files and hashes: 1: FZWMDDQMo_y8JJ57vskoxtwrzBc.roa (hash: htvNKiRY5N1vCsM0n5CFd0XNCYmHCVpMo5jU+IUCul4=)
2: GWxeu1y_CzxjapRD6Erht2PYQd8.roa (hash: YAm4XFVWKwDXQd0Bp/cmWH42UfuLzbVp2eD58NsLJok=)
3: Vi6OBQ04RQLreX9elEkxpm_dVVo.crl (hash: co79Socekiq0O3SHBXdhiGk3ZcJq9AvYTGu/r/J7mDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:36:0f:7e:2e:47:4a:8f:e7:65:95:71:74:94:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=562e8e050d384502eb797f5e944931a66fdd555a
Validity
Not Before: Oct 19 17:01:25 2025 GMT
Not After : Oct 20 17:01:25 2025 GMT
Subject: CN=317baff12edc2bb2e6980e3b3ca7edd8f45e96b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:3d:bf:31:9e:ec:7f:3e:5e:fc:33:98:46:
a5:22:0f:eb:2d:01:31:e6:dd:e0:6b:aa:15:fa:2a:
f2:a1:65:bf:2f:cc:38:01:a4:72:3e:38:9d:de:d6:
34:0e:32:d4:90:96:70:52:7f:93:5d:7d:0b:5a:92:
9d:4c:21:bc:65:04:8e:6e:d7:28:31:fc:3a:3a:e2:
8d:15:c6:b6:2e:99:9d:85:f9:e1:a5:94:bc:33:df:
68:0a:ec:41:d6:c7:d6:7e:08:e6:18:b6:f3:73:1f:
35:c8:0a:30:09:43:3d:d9:35:24:be:dd:1a:f3:74:
66:b2:c9:c9:27:a2:af:4a:b1:58:00:c5:8a:a3:a0:
41:d7:71:15:dc:6a:cf:2d:a7:9c:e6:e3:17:d0:7f:
44:ab:a9:10:cc:29:ec:8e:e0:8e:61:ba:c9:79:ba:
94:0b:90:c3:cd:24:aa:7b:dc:cc:4b:f0:24:26:44:
55:2b:99:46:25:a6:01:16:93:e2:14:f7:80:4c:b9:
17:1d:3c:39:e0:08:c7:43:55:74:fb:56:c7:8c:a2:
a9:8b:3f:e8:b1:55:51:f3:2a:65:a5:33:88:46:b4:
3e:31:36:55:39:4e:8c:15:8b:d0:7e:01:dc:a3:83:
2e:4d:5d:f0:60:20:2c:7f:1c:b9:b2:b7:6f:ba:5d:
22:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7B:AF:F1:2E:DC:2B:B2:E6:98:0E:3B:3C:A7:ED:D8:F4:5E:96:B9
X509v3 Authority Key Identifier:
keyid:56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c6:a8:d0:b7:25:af:44:c7:27:cf:cf:19:b4:e6:bd:9c:34:
f2:77:7f:51:2b:b6:fe:ff:46:cd:d6:1e:df:9a:d2:9a:cd:06:
a5:72:bc:af:0d:bd:a3:46:40:d8:2b:2c:59:c1:6a:9c:c7:0a:
f3:db:69:d9:0c:3b:ca:3f:3a:14:a0:cd:52:2a:90:91:5f:21:
7c:df:64:66:ab:5c:5f:3d:93:d7:87:9f:24:0d:6e:27:c5:08:
5a:b7:da:81:91:3c:80:90:c4:52:dd:7d:d9:18:d2:7c:c5:8d:
48:21:4c:5e:2f:66:2f:4f:ad:84:da:e5:d8:cd:45:56:f5:98:
ca:7f:fd:dd:ac:b8:09:26:f2:e8:03:22:9e:17:fd:cd:0c:ed:
68:6d:d1:51:9e:3d:f5:38:d6:f9:05:0e:59:1a:1d:d9:ba:bf:
01:08:ee:45:4d:df:2c:e9:83:91:43:08:06:d3:56:b5:3c:10:
39:cb:dd:80:aa:40:d9:98:b8:ec:1e:a4:bf:a6:ec:a5:0a:43:
83:f8:ae:14:a4:10:65:50:41:6d:8e:9b:c0:99:65:88:d2:7e:
0f:60:0e:e0:6f:2a:f9:97:68:7d:c2:ed:3e:80:dd:dc:35:7d:
b3:e1:a0:10:45:f4:c4:3b:57:20:4d:fa:59:cd:3d:dd:64:9f:
81:78:c3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:48 2025 by rpki-client