Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
File: _VOKrk7E0KLzwKZfifSHRrUV5Xs.mft (raw, json)
Hash identifier: 149myY4jsVaQBi2QbQOWI5vWCcr+/JYQhP36WYS5ozg=
Subject key identifier: 9A:41:E2:A5:E1:F1:8C:2B:A0:8A:87:1D:7C:F7:55:44:24:81:55:44
Authority key identifier: FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
Certificate issuer: /CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Certificate serial: 0199FC8FACCB895C9F0BB211928102C282AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
Manifest number: 0D7B
Signing time: Sun 19 Oct 2025 13:01:38 +0000
Manifest this update: Sun 19 Oct 2025 13:01:38 +0000
Manifest next update: Mon 20 Oct 2025 13:01:38 +0000
Files and hashes: 1: YD_zTsYXZHwOdGihQ9GGGJD2yQ4.roa (hash: MiVKISLoY4yTYfozn6ttBVBGLS9pCG7wKWYNtkMouG8=)
2: _VOKrk7E0KLzwKZfifSHRrUV5Xs.crl (hash: ceaT/gIpUnAKDFLq4OQO8Kg2evbtJv1IFmvGgR3KMQg=)
3: wcV-PUcCwSD1_bZOyNtF92C9c9E.roa (hash: YHNUenZzn6rHgL2dA2+pXb/I7NXwkpjXztGNWnA0xb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:ac:cb:89:5c:9f:0b:b2:11:92:81:02:c2:82:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Validity
Not Before: Oct 19 13:01:38 2025 GMT
Not After : Oct 20 13:01:38 2025 GMT
Subject: CN=9a41e2a5e1f18c2ba08a871d7cf7554424815544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5c:5d:15:76:76:95:10:6b:d9:cd:04:89:20:
07:95:a5:43:ca:92:c8:9b:79:dd:6a:12:ce:97:89:
93:2c:e8:ca:3a:4a:7f:83:5d:b6:37:5a:9a:64:6b:
89:56:34:f5:31:8e:af:2f:bb:49:55:60:97:4d:f9:
ba:b2:11:12:c5:22:ae:79:b6:28:47:a0:db:7f:93:
3c:8c:3d:e1:b1:3b:a5:78:94:e0:62:13:fd:9e:cf:
d8:a8:46:40:92:92:d3:33:b0:29:3f:7c:2d:ac:68:
35:9b:27:ab:ec:04:a9:29:9d:00:b5:f4:ce:6a:cb:
1c:f0:07:bb:34:41:72:86:2a:f0:12:da:05:58:3f:
fc:f1:10:a6:a2:c9:c9:ef:ec:11:01:42:15:59:07:
61:fa:d1:03:88:6a:91:0f:74:82:30:bc:ad:89:c7:
33:f8:16:92:c4:37:63:5b:6d:cf:6c:2a:b2:24:3e:
ee:9e:f9:da:76:d8:3c:24:ee:0d:42:36:c0:db:ee:
cf:6b:b4:2d:95:54:17:6e:80:d2:40:14:df:9a:21:
a5:48:02:1e:bd:89:1c:3b:bb:21:05:08:c1:b1:91:
33:36:8e:e1:dc:b9:98:0b:67:4d:59:12:ac:f1:62:
1e:63:cb:95:b2:b4:82:c0:a6:65:31:a3:3e:31:4a:
9e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:41:E2:A5:E1:F1:8C:2B:A0:8A:87:1D:7C:F7:55:44:24:81:55:44
X509v3 Authority Key Identifier:
keyid:FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:63:62:c0:0b:3a:0a:67:07:ef:51:0b:92:b5:74:b9:22:17:
19:98:55:51:df:ce:f7:70:79:5d:e1:e4:46:05:9d:fd:7d:e0:
f2:65:21:00:ec:5b:8a:5e:cd:2a:68:75:93:81:20:e1:c4:18:
0b:3c:98:cc:dc:34:5a:db:6b:41:36:e0:23:a0:93:a1:15:95:
cd:bf:65:7f:fd:52:f6:e8:2c:34:b0:01:95:a8:8b:27:82:c5:
1e:cb:6e:1f:d4:2b:6e:52:4b:c0:cf:20:71:93:b8:4e:bd:08:
24:39:9f:79:62:5a:da:bc:ed:08:27:a6:9e:8f:d2:16:0a:86:
85:0b:9d:cd:fb:95:12:32:3b:e9:57:df:86:0d:e9:99:66:b1:
03:0e:11:1b:00:65:54:9a:8b:dc:2b:dd:24:8d:58:9d:86:e4:
b7:7d:8b:10:cb:04:51:a3:7e:58:c0:c2:3a:1c:2a:1e:44:89:
f8:9f:36:ea:42:21:14:55:09:ba:64:21:7e:c0:96:e8:d6:1c:
a0:a4:4a:88:46:55:f9:6e:71:51:ad:c5:30:4d:c4:e4:e5:73:
cf:d8:1b:6f:90:14:0f:a1:ca:ab:1d:22:cc:0e:6d:8a:20:54:
c2:fe:7e:14:69:77:1d:f7:d8:57:e9:69:11:3c:a9:d5:ac:b3:
ee:09:fa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:40 2025 by rpki-client