Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
File: Vf5QzPzvDofMGfgswJK7m3mj468.mft (raw, json)
Hash identifier: 46/d9Xl2XYCuwsN4lk3TrdbmoroMis9weJ/YKPm/nfU=
Subject key identifier: 34:AA:D0:04:FE:2C:DB:83:6D:31:EC:5F:0B:46:9A:51:81:3E:F7:F0
Authority key identifier: 55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF
Certificate issuer: /CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
Certificate serial: 0199FFFE556FC0D4066558EB576BD3A0EE77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
Manifest number: 04D4
Signing time: Mon 20 Oct 2025 05:01:21 +0000
Manifest this update: Mon 20 Oct 2025 05:01:21 +0000
Manifest next update: Tue 21 Oct 2025 05:01:21 +0000
Files and hashes: 1: FzOWVnk6UyMtU7jUCjfT7xK7jUs.roa (hash: AAnWtLc0XNLDmh8MKuv5G+x9dydvMeajmyOK9NO07jQ=)
2: Vf5QzPzvDofMGfgswJK7m3mj468.crl (hash: eTL4R4pq8jRbF14bg5N2AIgJOShUpGdj9G3DJhnfJMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:55:6f:c0:d4:06:65:58:eb:57:6b:d3:a0:ee:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
Validity
Not Before: Oct 20 05:01:21 2025 GMT
Not After : Oct 21 05:01:21 2025 GMT
Subject: CN=34aad004fe2cdb836d31ec5f0b469a51813ef7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:5e:12:7a:7c:19:5c:5f:47:41:7b:a1:fb:
52:90:30:2e:c7:6a:a6:ce:e3:c4:e0:d9:0c:bd:f3:
f2:de:00:e9:7d:14:ab:62:66:75:75:0e:64:ff:b1:
db:8f:14:ab:a0:69:da:4b:06:19:a4:29:e9:a3:8a:
f8:c4:9e:46:45:19:89:a9:ff:bf:24:fb:f2:fd:b5:
69:82:f1:6c:49:38:73:db:66:fe:72:60:53:db:bb:
8d:32:1e:c7:6b:c1:80:a8:3d:31:da:f3:07:e2:e6:
7c:d7:64:56:be:40:7b:1c:03:a3:2d:34:63:71:d3:
ee:b7:a8:ea:19:28:bd:10:f2:78:c2:6a:7e:f4:fd:
2c:a4:db:89:b2:71:8b:7b:8d:39:3d:80:08:5a:dd:
25:d0:d9:7a:e0:6a:68:a2:ef:55:4d:2b:d7:f1:99:
b7:b7:ff:32:61:82:88:26:62:f8:00:2a:92:e9:a5:
b2:cb:b7:ba:7d:c7:4f:93:4b:75:6d:5b:16:42:f9:
e3:6f:63:55:9b:97:ed:37:0f:1f:93:bc:54:f2:fc:
fc:f1:4b:cc:0f:fb:fe:b7:bb:cb:74:1f:26:b9:50:
13:e3:30:d6:c6:06:32:57:4e:30:d0:7b:77:5e:38:
6d:3c:45:bf:e5:cc:93:60:b3:84:11:06:e8:13:e8:
22:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AA:D0:04:FE:2C:DB:83:6D:31:EC:5F:0B:46:9A:51:81:3E:F7:F0
X509v3 Authority Key Identifier:
keyid:55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:39:49:ad:60:9a:d0:da:6c:c3:60:d0:a7:15:c7:2f:06:61:
a7:e2:a2:13:a7:7d:28:51:8a:5a:9f:00:9d:84:11:46:6f:53:
2c:fb:55:49:4f:a7:85:35:05:cd:a7:60:b6:8d:45:a6:bc:fe:
4e:54:b4:93:9b:fb:90:7a:af:19:5c:f3:0d:e2:4d:98:12:0a:
2b:bd:86:36:b0:d2:b8:5e:fb:2d:2a:df:56:a3:d0:e3:b7:e6:
14:f0:1f:84:04:ef:a1:21:75:c1:80:ce:ac:57:f1:eb:57:22:
4e:2a:3d:6e:c6:83:ce:f6:57:73:2c:59:c0:d0:04:5d:d4:d2:
15:04:fd:18:7a:a7:ec:54:02:d4:bb:08:ee:50:6d:3d:38:fa:
51:b3:ed:22:bd:63:18:aa:e4:6a:93:df:a8:84:91:f4:de:0f:
02:93:e9:12:be:93:ba:90:be:00:2f:48:4f:dc:01:39:e2:83:
69:fd:b4:cf:74:49:a4:5e:83:ea:bc:22:10:70:12:8b:03:de:
a4:90:d8:23:9a:2b:1f:f9:84:4f:b2:18:01:c0:cb:3b:c2:21:
08:fe:55:34:5c:e5:2c:8e:f2:2a:b0:cc:fd:e9:cb:7d:77:32:
43:14:ab:3d:3f:a5:93:24:12:22:0c:9a:26:c4:87:25:14:24:
e1:dc:50:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:22:56 2025 by rpki-client