Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
File: vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json)
Hash identifier: LIyUdbxUImGT+w1OfHZ6hefh+VSEcJmia8y+EoSeZVM=
Subject key identifier: DD:DC:AA:6D:A6:51:18:C8:E0:2B:68:6B:71:B1:ED:21:FE:12:D8:B1
Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
Certificate issuer: /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Certificate serial: 0199FCFD1CCBE3A7FEDC14BF903E9776837B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
Manifest number: 0CB5
Signing time: Sun 19 Oct 2025 15:01:10 +0000
Manifest this update: Sun 19 Oct 2025 15:01:10 +0000
Manifest next update: Mon 20 Oct 2025 15:01:10 +0000
Files and hashes: 1: hKsPJ4MnZD2pYCjFxua95M8Pd_I.roa (hash: doF91Tq6urawTtlcrWXugjS7shhgWKPbbEAfjccw0S8=)
2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: 56IGoI9rsQ1qxEcixMhB964H7FTE9eKXh/cjXceCeU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:1c:cb:e3:a7:fe:dc:14:bf:90:3e:97:76:83:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Validity
Not Before: Oct 19 15:01:10 2025 GMT
Not After : Oct 20 15:01:10 2025 GMT
Subject: CN=dddcaa6da65118c8e02b686b71b1ed21fe12d8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:06:8b:cf:3c:fe:13:85:f4:af:cd:8e:85:
57:1d:33:c2:d7:23:d1:15:22:04:5f:50:b4:0f:f9:
a9:f6:69:d9:d8:f6:2b:ca:02:6a:69:40:ee:42:50:
79:69:82:45:b8:1b:89:99:83:6f:b4:ac:9f:af:28:
3e:6d:cf:73:3f:c2:dc:52:c5:0e:12:aa:f4:97:3e:
99:f1:f3:f2:7a:bb:e3:5e:3a:42:92:01:2c:a5:59:
9b:cc:61:a6:81:90:dc:d7:73:c5:c5:63:ec:80:51:
ae:73:7a:3a:8f:f7:31:1d:b2:69:08:f4:6c:b5:25:
e7:c9:71:69:81:52:52:cd:e2:29:12:c3:fb:9e:a6:
22:e9:de:fa:f9:04:fe:02:54:41:98:0e:6a:76:72:
87:fb:ae:1a:96:51:80:e9:84:b3:e9:40:53:75:79:
e6:c3:3f:f1:b3:a7:5d:c5:b6:2f:41:20:d0:41:55:
bc:d2:5a:39:26:f0:2c:b8:bb:4f:ed:eb:89:78:aa:
bc:90:c0:b0:a0:e2:c4:f1:32:c7:15:cb:b5:28:b5:
4f:9b:de:ee:a3:75:46:e5:8f:59:49:13:e9:57:15:
1f:89:90:fa:05:2a:c5:c1:c8:79:3d:96:a2:69:61:
37:a8:db:0b:1f:e4:01:4f:56:b6:de:cb:92:56:c8:
8a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DC:AA:6D:A6:51:18:C8:E0:2B:68:6B:71:B1:ED:21:FE:12:D8:B1
X509v3 Authority Key Identifier:
keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:88:b3:a4:71:39:5a:c9:d2:f4:70:0a:f8:59:2e:4a:8e:ec:
cc:37:6e:d7:ff:d1:28:34:ed:1b:59:51:3b:f2:29:83:bd:a5:
eb:a1:5b:c5:d8:02:c3:08:e9:dd:64:51:40:4e:d2:5f:e2:df:
e6:4b:6a:1e:c0:d1:d7:f6:8b:77:3e:29:01:69:cf:65:9e:fe:
6e:de:51:5c:67:cb:26:84:e8:84:c6:57:64:0c:45:10:81:bd:
44:8d:5a:68:b4:4b:dd:15:f5:02:0b:43:d9:12:68:e6:66:6d:
9a:f6:f9:03:38:ac:5f:55:2d:67:04:81:1a:5e:08:92:5d:aa:
70:cb:2e:7e:27:b4:73:48:44:22:da:52:6b:19:36:94:80:2d:
13:c3:15:51:67:7a:43:56:d9:86:5d:1e:b9:93:be:df:1f:f4:
d6:49:f0:94:24:25:8e:7e:ec:8d:b0:fc:8b:35:11:50:1a:1b:
42:08:9a:a7:39:14:21:02:aa:94:c3:19:b9:9c:1b:68:b1:e7:
9e:6e:68:53:66:c9:05:93:78:61:f3:09:49:3e:11:99:7a:d8:
4e:99:8a:77:86:f4:27:7f:9c:7b:49:e3:63:0e:ca:38:81:be:
8e:ac:e6:ac:ce:8f:94:86:ff:f2:ed:51:68:12:23:16:d0:a8:
c6:61:87:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:35 2025 by rpki-client