Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
File: VmHZZN9KhtuP-5mqiVgtpoowkIw.mft (raw, json)
Hash identifier: RIFQd7cidBULL8xI1A/f33rC1F2P/dGGEozNmaRu44s=
Subject key identifier: F5:FA:E7:89:2D:3E:09:0B:D0:3C:29:1C:B7:62:51:55:63:75:AC:6F
Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
Certificate issuer: /CN=5661d964df4a86db8ffb99aa89582da68a30908c
Certificate serial: 019A02C7879FE7B758BA0E7E9B51F7381A69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
Manifest number: 027B
Signing time: Mon 20 Oct 2025 18:00:22 +0000
Manifest this update: Mon 20 Oct 2025 18:00:22 +0000
Manifest next update: Tue 21 Oct 2025 18:00:22 +0000
Files and hashes: 1: VmHZZN9KhtuP-5mqiVgtpoowkIw.crl (hash: u8GIVNbE+Hmjoy3irGwjpo3X4M2qi6uN6uJeVoG0Kgs=)
2: xMdRmutHFokxkkQckhp-estBVrY.roa (hash: B+GeVyXFQ8LdKQlX7fXVWpcWBfpc+XAscpHvCnfEhnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:c7:87:9f:e7:b7:58:ba:0e:7e:9b:51:f7:38:1a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c
Validity
Not Before: Oct 20 18:00:22 2025 GMT
Not After : Oct 21 18:00:22 2025 GMT
Subject: CN=f5fae7892d3e090bd03c291cb76251556375ac6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:bd:ac:a5:c9:77:64:1d:1f:be:23:f1:9c:
25:b2:07:76:7e:fe:03:36:78:a9:86:6f:ec:61:8c:
c6:37:61:8a:ed:ff:40:4a:70:47:9e:cf:b2:8c:a9:
cc:ee:b9:ca:81:eb:d4:0c:a0:00:9d:5c:97:cd:f1:
8a:c6:59:a5:c1:1e:a3:21:ad:67:a7:a7:e7:68:52:
07:41:f5:7b:65:a7:96:a9:ae:43:39:a0:c0:62:53:
c4:2e:0d:91:53:96:34:00:2d:60:a1:ad:6c:78:1d:
2f:6f:49:49:9b:97:45:06:07:03:bf:3e:95:96:8d:
18:88:cc:a8:de:d1:41:c6:af:d8:44:aa:14:24:65:
fd:9a:80:65:90:55:23:af:c0:82:20:33:a4:29:01:
34:e1:36:ed:de:47:37:c3:a1:7e:f5:12:39:49:75:
24:cc:68:be:e7:45:f5:34:1e:6f:e4:93:02:6c:14:
a7:d3:4a:fd:4d:43:db:5d:78:4c:31:c8:6c:eb:ba:
b2:a0:ed:66:24:76:66:01:33:1d:ef:4d:4e:8e:89:
87:bd:5c:96:02:51:e7:6e:07:61:3e:e1:c8:d8:df:
40:ae:90:21:c9:ef:81:b1:26:f7:e1:d2:d9:ff:6d:
58:a7:c6:de:46:e4:0f:c0:64:a0:a4:42:ef:d4:4b:
eb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FA:E7:89:2D:3E:09:0B:D0:3C:29:1C:B7:62:51:55:63:75:AC:6F
X509v3 Authority Key Identifier:
keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:05:af:a1:be:c1:78:35:77:92:e3:83:e4:37:25:34:2a:72:
a4:77:73:a8:ac:b1:ac:a4:95:f6:f4:ce:25:db:15:67:c0:80:
9e:69:dd:de:60:74:47:e8:20:20:9c:ae:1e:d3:39:1f:89:6c:
8c:78:6f:cc:d1:fe:6b:0e:39:65:2b:dd:f4:f2:65:69:1a:9c:
4a:0a:f4:23:92:91:72:ec:b3:04:73:b4:66:b2:09:3a:3b:79:
e5:3d:57:24:54:31:f8:e8:19:94:44:d8:33:2d:fa:d8:94:a8:
ed:be:2e:5f:12:09:02:dd:a0:e3:9d:2c:63:d2:da:5f:cf:75:
4e:1d:42:96:a5:23:7c:5a:ae:c9:17:d9:5a:e7:06:0d:34:3a:
8b:21:b2:db:72:d8:4e:62:29:8c:e4:df:ee:ae:6a:7a:70:55:
33:2b:14:6a:2c:ed:da:99:54:c3:b9:d2:8e:20:b1:ac:0a:c6:
3c:55:ce:4c:a8:6b:ca:0f:68:16:1d:e5:e9:8c:93:73:cc:99:
2c:63:ab:65:61:01:e3:1e:f3:fb:bd:19:05:f2:d9:5f:c8:26:
90:8a:8f:b4:ee:49:b1:14:ec:f5:9e:18:d3:9f:5b:08:41:87:
fd:3a:19:4c:86:7a:f0:c2:42:00:af:56:c0:b4:24:87:07:f6:
d2:a9:e5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:11:38 2025 by rpki-client