Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
File: VY3MXX5oh8lBrjsozjy_L7TyBgM.mft (raw, json)
Hash identifier: 6xKlFYDb4SlPeaV1orihe/F6Vb00hBHcb4UYel+sszI=
Subject key identifier: FD:67:9D:22:98:3D:AE:27:D0:AD:6F:A7:4B:D6:D2:90:F1:49:A8:74
Authority key identifier: 55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03
Certificate issuer: /CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
Certificate serial: 0199FEB4C5A726B43CFFAA51130C1014A238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
Manifest number: 1633
Signing time: Sun 19 Oct 2025 23:01:23 +0000
Manifest this update: Sun 19 Oct 2025 23:01:23 +0000
Manifest next update: Mon 20 Oct 2025 23:01:23 +0000
Files and hashes: 1: O6XxnBxdjAHrB6cqnybF-q5zhEI.roa (hash: I3o5BuOlE43DLGmjrJZTKVLwzcox6qkRQGzuUzhTBPQ=)
2: VY3MXX5oh8lBrjsozjy_L7TyBgM.crl (hash: AHY+fkEyNgG7H9anvK1OMPDscVcLqb8C5JGLuOGftvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:c5:a7:26:b4:3c:ff:aa:51:13:0c:10:14:a2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
Validity
Not Before: Oct 19 23:01:23 2025 GMT
Not After : Oct 20 23:01:23 2025 GMT
Subject: CN=fd679d22983dae27d0ad6fa74bd6d290f149a874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:ef:bd:d2:aa:01:2b:e2:4e:e9:e7:18:f5:
f3:33:d9:f6:c1:9f:e7:41:74:a8:02:38:c3:3c:a4:
64:a3:f1:93:c0:b3:d7:34:37:dd:39:9b:72:85:f8:
0a:38:ac:4a:ac:2c:39:b8:74:cc:75:32:16:c3:7a:
1c:a4:d0:d0:06:df:c1:bf:b5:81:35:40:5c:0f:01:
b8:fb:f6:99:8b:44:1a:97:88:89:8e:23:0f:9b:1c:
b6:b7:8d:d8:ac:54:b2:c5:ba:a8:46:55:f2:e8:2d:
df:d5:e7:fe:9c:ce:fc:d7:46:8d:97:cd:08:69:18:
f0:ac:a1:59:8e:12:c7:e6:3f:0f:ca:76:8c:f3:df:
87:50:ae:62:7c:a6:c6:e0:2d:be:39:00:4c:0f:f8:
9a:b1:f4:bb:66:0d:22:8b:de:fd:f0:6e:8f:d4:46:
af:7b:3d:bf:79:f0:04:9a:48:c2:73:18:13:0c:f5:
90:65:c1:dc:06:72:68:2f:87:bd:5c:dd:45:fa:0d:
a5:8f:31:9a:30:a0:f3:ec:1f:12:6f:2f:02:6c:76:
f7:d7:2c:f3:6c:9c:bb:58:a2:9a:15:7d:16:5a:3c:
a1:ad:0c:47:c9:1f:08:48:57:fa:e2:ad:55:de:ad:
69:bd:2d:33:2a:cd:87:fd:28:b0:ce:67:80:1c:68:
65:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:67:9D:22:98:3D:AE:27:D0:AD:6F:A7:4B:D6:D2:90:F1:49:A8:74
X509v3 Authority Key Identifier:
keyid:55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:9c:8c:cb:4a:00:df:69:33:6a:9e:97:49:fa:52:ab:09:d4:
5b:06:7c:ae:61:a6:94:bf:af:04:55:61:b9:04:44:44:02:f4:
17:7f:a2:2c:7a:37:1d:93:2a:d4:99:9d:13:9e:cc:9d:62:1e:
03:33:2f:6d:20:24:ab:94:ef:9a:bc:8b:76:dc:93:c3:37:0f:
fd:58:83:ff:49:f0:a7:ac:2c:dd:da:18:97:dc:85:51:5f:ea:
09:1f:0c:48:6c:bf:d7:77:96:18:b2:de:10:3c:eb:8c:ac:fe:
65:f2:17:5b:77:95:70:ec:ef:21:9b:9e:df:3a:71:af:5e:1e:
8f:70:e9:e2:3f:a2:25:74:5c:b1:98:ef:a4:32:f7:fe:f3:33:
4f:b2:8a:8c:1d:82:fe:a2:cf:97:10:30:1c:f0:bd:b1:1c:d1:
b4:bb:15:bb:c5:7a:f0:b6:ff:78:90:09:93:11:06:1b:a8:9b:
b1:7c:31:d1:26:eb:e6:54:54:0b:c8:89:01:25:83:fe:5a:f1:
45:cf:28:f7:88:df:59:8c:f8:7e:12:87:32:df:5d:a4:01:b7:
66:2b:7b:4a:e2:83:8e:3b:f0:19:7a:d5:27:45:23:85:9f:6f:
f2:a0:f4:4c:e5:c3:d3:c8:7c:b6:b6:f5:5a:d3:c0:40:4d:ac:
d2:9d:e6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:56 2025 by rpki-client