Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
File: VW22ld3zHiiYRm757fukiA2OGfs.mft (raw, json)
Hash identifier: I8Tb/vcwNsnXj3W/jes0mKNtTBO6mvIL/lzpgEfSLZk=
Subject key identifier: 95:80:22:EB:00:F2:8A:DC:AC:4A:5F:29:6C:E9:F5:08:33:B8:06:B8
Authority key identifier: 55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB
Certificate issuer: /CN=556db695ddf31e2898466ef9edfba4880d8e19fb
Certificate serial: 019A00356E5F5985EDBDF31CE4CD4CC7296B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
Manifest number: 01DE
Signing time: Mon 20 Oct 2025 06:01:32 +0000
Manifest this update: Mon 20 Oct 2025 06:01:32 +0000
Manifest next update: Tue 21 Oct 2025 06:01:32 +0000
Files and hashes: 1: EslCT3gxkxtf5DQ7QkwYmLYeFlo.roa (hash: Uhm0SZdyDhhQLcGTvxZ7EAQVgtjflrvk9JNzMwkUJ7I=)
2: VW22ld3zHiiYRm757fukiA2OGfs.crl (hash: yd0b3mzQhHfAlQ0XS8i364DvpmK/yuw1aik+WbKcJo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:6e:5f:59:85:ed:bd:f3:1c:e4:cd:4c:c7:29:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556db695ddf31e2898466ef9edfba4880d8e19fb
Validity
Not Before: Oct 20 06:01:32 2025 GMT
Not After : Oct 21 06:01:32 2025 GMT
Subject: CN=958022eb00f28adcac4a5f296ce9f50833b806b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:15:df:9a:de:d7:df:6f:73:49:6f:89:a9:
d7:25:4c:d3:e0:20:0e:11:b9:52:eb:7f:58:1e:13:
cd:a2:05:0c:6e:9f:96:cb:c8:87:17:57:39:9c:6e:
01:ab:d6:48:79:d9:2c:64:bd:72:33:57:5e:97:44:
f5:93:dc:7f:68:c2:59:53:e4:2b:e2:74:cd:d4:d6:
51:15:2a:82:9d:62:a7:1d:eb:ab:25:5c:15:9a:17:
02:f3:62:aa:9d:b6:5a:65:4e:83:a9:e1:25:3e:ad:
ac:9b:d8:3b:57:12:f6:8d:33:78:9b:fc:46:20:8f:
07:cd:86:32:2c:d3:d5:52:72:e5:a7:cc:62:57:e2:
7a:46:32:26:04:06:61:e0:cb:a7:48:8a:91:2b:dc:
37:d5:d5:6e:6a:a1:e3:fb:52:ec:ed:42:6e:53:47:
2b:20:07:d2:82:be:83:78:0f:62:7f:5f:8d:9f:3f:
7e:24:23:75:95:b3:81:60:75:a5:3a:e0:e1:73:c7:
2a:17:36:c9:da:12:42:93:b0:3d:e8:ed:9b:cf:3d:
b7:89:0a:93:f0:aa:0b:b0:39:e7:87:f0:69:a8:43:
2f:a0:af:2d:bf:54:ae:6e:9c:90:f8:59:f4:f9:98:
69:50:0b:d3:01:86:0a:ef:7f:f9:f8:af:bd:41:1d:
5a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:80:22:EB:00:F2:8A:DC:AC:4A:5F:29:6C:E9:F5:08:33:B8:06:B8
X509v3 Authority Key Identifier:
keyid:55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:92:bb:6a:b7:96:5e:74:ed:09:f5:55:3b:93:28:62:90:f0:
db:76:b4:4e:5e:c7:06:82:64:3f:52:b1:80:39:2a:4f:28:7f:
aa:c2:71:36:9e:51:91:f7:38:30:e5:62:78:a7:0b:1b:84:d3:
e5:1c:eb:cc:00:cd:bc:b9:62:9a:15:cd:f9:d9:ec:df:88:e4:
11:b8:77:13:c2:4e:55:38:75:1d:91:0c:0f:32:fb:df:6d:08:
01:b6:04:48:72:c8:bd:3e:55:de:c6:4a:43:e9:18:4d:a8:f9:
a8:a9:6a:16:bb:8a:90:04:8d:b7:4e:0c:2a:2d:eb:15:b7:f2:
7b:10:2c:38:f6:25:d3:da:71:b2:2a:e1:27:17:1f:97:b3:09:
70:b8:1d:d9:c5:0e:38:46:fd:77:23:cb:3d:af:af:2c:bb:cc:
83:17:de:79:bf:95:f9:e2:53:81:76:7f:d5:1b:aa:e0:73:03:
96:20:f1:54:d3:e5:0b:4e:77:42:9a:1a:01:62:79:e6:2e:0a:
62:2c:2f:76:ca:8b:49:f3:b0:1f:c1:5c:c4:a9:88:a2:7d:e6:
67:c4:dd:9a:bd:95:ca:9e:92:04:ac:29:34:42:47:ae:3e:a7:
9c:70:2c:c6:0f:de:c6:7c:5d:af:ee:7a:f1:38:34:96:b7:10:
3b:4b:f5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:04:48 2025 by rpki-client