
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
File: VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft (raw, json)
Hash identifier: Cia8h+YpDzh4f70FbXBJnmedEP6Lvbqdt9Sn5SIK98k=
Subject key identifier: E3:A6:DA:6E:5E:C9:4B:0D:4C:31:00:49:94:56:E3:FF:BB:25:1E:AB
Authority key identifier: 54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5
Certificate issuer: /CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
Certificate serial: 019A006C10433FB010B79E2ADAAB166A6ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
Manifest number: 13F1
Signing time: Mon 20 Oct 2025 07:01:13 +0000
Manifest this update: Mon 20 Oct 2025 07:01:13 +0000
Manifest next update: Tue 21 Oct 2025 07:01:13 +0000
Files and hashes: 1: VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl (hash: YXfqr3k225cdM2bLmHarHvg7I9Nz3eeRv/f5LBf1tYI=)
2: a5BvzhKkKgNIrlfggpHqvjOR9aQ.roa (hash: dEnnR8B+4ToU5y7KFBIs83RELZnLbdh/fDQM1Q9oIpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:10:43:3f:b0:10:b7:9e:2a:da:ab:16:6a:6a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
Validity
Not Before: Oct 20 07:01:13 2025 GMT
Not After : Oct 21 07:01:13 2025 GMT
Subject: CN=e3a6da6e5ec94b0d4c3100499456e3ffbb251eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:29:91:2f:9e:73:a6:07:04:0c:23:4a:49:52:
6c:1e:1e:bf:b3:85:eb:36:ea:c8:17:f0:55:b8:13:
f8:06:d0:81:96:64:21:94:b6:ec:af:96:f4:2a:f1:
c2:71:04:99:a0:27:a1:d3:e0:15:81:f3:9d:d3:e7:
18:84:27:9a:55:a8:1c:74:49:01:05:2d:fe:b6:1a:
a3:55:8b:b2:bb:50:a9:b2:8a:bd:57:5d:61:cf:e7:
8d:4b:9e:a3:bd:19:2e:a8:34:75:8d:72:48:1a:88:
6d:7d:ea:42:fb:b8:d3:6e:b1:e1:fb:2b:3b:d8:b3:
b9:38:64:17:ed:b0:af:2f:64:30:17:44:e6:54:13:
70:7a:67:89:2a:98:57:4e:7a:09:7a:e9:a6:1f:26:
9b:06:0f:b1:ca:dd:fa:23:da:bc:b4:ce:89:8c:c6:
94:1a:72:e9:9f:03:6c:27:f3:29:3f:f5:2b:cf:e0:
89:7b:e9:c5:01:0d:ed:a8:a4:a8:9e:2e:07:ee:af:
53:62:9b:00:38:b9:61:80:51:af:b9:14:b1:d2:9f:
7d:44:d4:b5:1a:af:6d:e1:45:b1:4e:db:b1:6b:a6:
ae:75:2e:3f:cc:b4:e3:4a:93:de:cb:1b:22:81:a9:
8f:81:d5:70:54:2c:fa:71:58:66:c1:63:53:00:1f:
cd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A6:DA:6E:5E:C9:4B:0D:4C:31:00:49:94:56:E3:FF:BB:25:1E:AB
X509v3 Authority Key Identifier:
keyid:54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:bd:52:b7:01:93:c3:03:40:45:f6:7a:00:f6:a7:ac:00:24:
bd:aa:f6:fa:68:3b:8d:2f:cc:aa:79:a2:58:ce:42:32:39:eb:
3c:53:df:f3:26:7b:16:32:43:af:cc:6d:ff:2a:74:09:f0:41:
03:08:14:f5:19:41:9a:da:7b:84:1c:11:3d:c4:3d:b2:10:9d:
d9:47:c8:58:0b:d8:95:56:b4:c0:dc:52:f2:06:58:2e:8a:b6:
37:6f:18:b6:ec:3e:df:25:dc:97:a1:e2:b5:26:5f:3d:9a:97:
87:b4:de:cc:2a:55:94:08:f1:2c:ac:fb:55:ea:ac:2b:23:44:
e8:7b:3b:7f:e9:e3:0a:a8:29:6b:6f:09:30:fe:a0:2c:3a:dd:
de:82:b4:55:6a:04:27:77:4a:41:0a:65:4e:8c:17:37:8e:43:
65:6d:83:4b:81:c9:73:58:3b:43:99:7a:7a:26:b0:81:c8:6c:
4d:05:a3:1e:72:04:c4:63:32:cc:2b:53:e8:28:00:ec:f2:da:
e9:b1:a1:c3:6b:6a:6a:d0:12:76:18:9d:7d:0c:1a:fb:a9:c6:
59:4b:33:d7:cd:c5:73:36:0d:c8:7b:27:4a:1c:90:21:be:c0:
7b:57:94:a3:68:f0:06:76:86:5b:b3:b2:d7:92:3d:65:d5:f1:
46:85:35:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:29:58 2025 by rpki-client