Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
File: VQlsYRU9KrVQd_GjDCRZhgAbodk.mft (raw, json)
Hash identifier: ArRIbY9y/HLXoB6k5IWcrIPhClK5goSuyc4pNMykQIE=
Subject key identifier: 77:70:D5:72:7B:C9:1D:32:64:24:F4:D8:6B:65:2F:16:C7:E0:2E:8F
Authority key identifier: 55:09:6C:61:15:3D:2A:B5:50:77:F1:A3:0C:24:59:86:00:1B:A1:D9
Certificate issuer: /CN=55096c61153d2ab55077f1a30c245986001ba1d9
Certificate serial: 0199FCFDAA16C47DEDDDB6018ECEC22875BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
Manifest number: 163B
Signing time: Sun 19 Oct 2025 15:01:46 +0000
Manifest this update: Sun 19 Oct 2025 15:01:46 +0000
Manifest next update: Mon 20 Oct 2025 15:01:46 +0000
Files and hashes: 1: 2UJUcXgEXfunFA21jmeL2YNS9MM.roa (hash: 6FVHb9+rMImArAonsBYihu+wIYZJbNNs1MntdRcJc2I=)
2: VQlsYRU9KrVQd_GjDCRZhgAbodk.crl (hash: UvFegBWI8O4W/GLUmOs1oQ81PXxgJlSl62gbf7/PyLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:aa:16:c4:7d:ed:dd:b6:01:8e:ce:c2:28:75:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55096c61153d2ab55077f1a30c245986001ba1d9
Validity
Not Before: Oct 19 15:01:46 2025 GMT
Not After : Oct 20 15:01:46 2025 GMT
Subject: CN=7770d5727bc91d326424f4d86b652f16c7e02e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7b:c0:90:d2:93:3c:87:ec:41:4e:c7:de:77:
86:10:6a:3c:9f:ee:5b:c7:92:7c:99:6f:eb:75:f2:
d8:5b:63:98:52:21:4d:ac:2c:2a:54:6b:a6:35:02:
27:45:3d:4d:a1:3f:40:68:3c:5a:aa:cc:09:7b:8b:
7c:d6:bf:59:48:96:8b:7a:a8:2c:13:42:24:54:cf:
e9:77:fe:c7:72:70:e7:42:b0:83:52:7e:b1:7b:ad:
bc:85:32:b8:b2:2b:7e:31:bd:a0:c1:a4:6c:d2:d3:
4e:50:7a:09:f7:d9:94:19:08:1c:ee:df:61:82:68:
c4:c6:d8:e9:9d:9a:db:2d:34:4e:34:22:6c:37:2b:
63:be:77:7f:52:00:da:6a:bf:28:9c:01:a3:30:a0:
f7:a8:39:5c:1f:1a:b9:4a:34:8e:94:e7:1e:34:cf:
15:6f:e8:3e:5f:d3:2c:2d:c7:59:c9:e9:19:97:d5:
44:4c:18:a2:53:49:52:69:91:ce:4e:fc:03:8e:26:
7f:96:26:6f:7c:fd:6e:4b:ad:5d:6f:1d:35:43:34:
8b:06:06:c8:d8:5b:d6:c3:c2:20:ac:b4:93:11:57:
04:e5:14:fe:40:30:a8:64:85:01:17:41:ff:67:44:
ba:5b:14:f8:13:7f:3f:9b:f5:26:ae:cc:97:da:ae:
2c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:70:D5:72:7B:C9:1D:32:64:24:F4:D8:6B:65:2F:16:C7:E0:2E:8F
X509v3 Authority Key Identifier:
keyid:55:09:6C:61:15:3D:2A:B5:50:77:F1:A3:0C:24:59:86:00:1B:A1:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:aa:40:b4:76:20:e1:42:7d:2b:59:52:c0:0c:ac:09:04:aa:
40:f9:a1:3d:1b:4d:96:27:bd:f1:6b:a9:e9:e7:e0:2f:ec:f7:
99:e1:2e:ec:fe:68:8c:91:04:ac:96:23:5c:d8:66:50:e0:8b:
71:70:7b:22:15:0d:3f:b4:1a:4b:11:4c:5f:5f:42:b2:e9:07:
ef:57:50:b1:bf:09:95:52:f0:f2:a5:36:59:da:e5:0d:2d:5b:
f1:c2:7f:2f:fc:b3:8a:61:c5:8e:4f:56:2a:d7:fe:08:d6:53:
2c:05:8e:b1:5e:13:35:f1:59:50:8d:5d:dd:65:e6:2d:10:d0:
c0:f6:85:9d:a9:2d:c7:af:4d:bc:63:98:39:55:f2:31:60:1c:
ac:24:2e:9e:47:eb:8d:d1:13:cc:03:85:92:bf:d1:05:42:2c:
80:09:84:c9:11:67:6d:66:1d:6d:37:a3:6b:5d:46:8f:a9:9a:
48:df:44:35:66:78:24:c3:d9:83:a7:af:6e:8f:7b:05:6e:08:
c3:e9:74:09:25:73:32:8b:d5:74:3b:f9:dd:12:7c:af:0e:8c:
0e:1d:45:c6:16:53:e9:38:da:7c:91:41:82:be:25:7d:41:bd:
06:c9:08:ae:44:77:6d:be:61:5a:da:06:91:3b:93:d6:8d:bd:
40:08:ae:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:51 2025 by rpki-client