Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
File: VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft (raw, json)
Hash identifier: Hhcp5LlqBE+MXI1XjhuN68db+CPLg947TZauO9huAmI=
Subject key identifier: EA:5A:29:52:6C:95:E7:1F:7A:AE:60:4A:8F:84:2A:D3:86:1A:D1:03
Authority key identifier: 55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72
Certificate issuer: /CN=55d5dc9e220112a27c152bc32389038974ae4572
Certificate serial: 0199FC216B8B71BD6A04575839364A88E25B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
Manifest number: 13FA
Signing time: Sun 19 Oct 2025 11:01:12 +0000
Manifest this update: Sun 19 Oct 2025 11:01:12 +0000
Manifest next update: Mon 20 Oct 2025 11:01:12 +0000
Files and hashes: 1: NgMUQ0h4d6oIArcMJtSW703L-Zc.roa (hash: TJW4OaMrgaRj7E3uX9xVvPrYH4h+lcuQwLF2jUPlChA=)
2: VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl (hash: zPcPD6KoSgNY/co7zJVXK8ClvhgYvrZEl23p32F07Sw=)
3: h9epvE3XZbxuQFOC07DHje9oldc.roa (hash: dmaD3wbg4kagfJA96eYctyQPytlbvLwfUnrstuptdyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6b:8b:71:bd:6a:04:57:58:39:36:4a:88:e2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d5dc9e220112a27c152bc32389038974ae4572
Validity
Not Before: Oct 19 11:01:12 2025 GMT
Not After : Oct 20 11:01:12 2025 GMT
Subject: CN=ea5a29526c95e71f7aae604a8f842ad3861ad103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:09:c2:27:5c:24:72:3c:38:f7:65:85:15:fa:
e6:73:82:bb:23:d2:b5:2e:db:46:6e:64:61:7b:f7:
f0:46:f9:be:b7:6e:c1:e7:ca:eb:70:ba:68:7d:c4:
97:74:26:79:1e:c3:b8:1e:dd:db:ee:f4:db:eb:ff:
89:bb:59:34:ea:7a:f4:5c:c4:4d:7a:ac:c7:ff:a4:
cc:5c:71:35:f9:16:63:4f:6d:8e:15:3a:cb:7e:81:
67:86:81:91:34:35:ab:42:e5:f6:11:ba:58:b5:1f:
21:b1:6e:68:d5:68:a3:d0:f5:35:94:61:16:6a:f1:
7b:47:fe:d4:b8:bb:4f:f4:00:e6:d4:88:56:a3:59:
ae:52:7e:12:ef:07:29:f5:5b:11:ab:4a:6b:82:f6:
a8:66:52:62:61:ad:ff:5f:8e:1f:36:59:e0:c8:7d:
a0:51:44:32:e0:a6:47:e2:e2:fa:21:4b:8a:b1:2a:
ab:8c:ac:00:cf:78:7f:23:dd:10:ae:56:79:1a:49:
0d:f9:b1:15:12:8f:c5:0a:03:55:9f:06:78:49:5a:
12:3b:85:60:64:0d:cf:69:35:72:ea:aa:6b:95:53:
8a:85:50:c4:fe:ce:2d:17:ea:5e:e1:3f:ab:37:1e:
ef:a7:fa:8a:6f:e5:af:e1:61:46:96:a1:55:fd:0e:
0a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5A:29:52:6C:95:E7:1F:7A:AE:60:4A:8F:84:2A:D3:86:1A:D1:03
X509v3 Authority Key Identifier:
keyid:55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8f:77:90:96:61:14:68:8a:67:79:a0:07:9a:03:1d:a6:8f:
cf:dc:11:50:e9:ab:fd:c7:4f:b8:a0:3e:e8:a4:8b:ed:25:4c:
ab:ad:f9:1b:a0:f9:36:de:3f:52:f9:cc:cd:1e:71:f3:bf:c8:
66:46:db:1e:57:89:f9:7a:07:6c:b7:01:c1:9a:f1:7e:e7:8a:
98:f4:9a:89:2c:e5:af:34:62:55:81:1e:56:c0:2b:cc:8e:d4:
26:eb:50:8f:b8:50:1b:22:67:95:45:f5:ca:54:a2:60:7e:27:
b1:e9:8e:eb:b1:13:48:dc:46:03:73:44:85:ef:7a:4f:ed:18:
19:09:01:99:14:a7:e0:9b:35:b6:f2:98:45:83:81:3b:34:fe:
5c:f8:13:fe:8f:48:2f:dc:74:9a:8f:7a:b4:ef:aa:06:73:58:
23:e3:e2:ce:c9:e7:a3:2c:2c:df:fe:8b:69:01:bd:7e:51:06:
5d:66:a5:8d:64:9b:21:8e:75:9e:09:f9:d6:05:af:d8:0e:f7:
2b:d0:ae:2e:5c:6e:59:40:f7:97:51:1b:fa:50:49:e5:66:80:
46:28:f4:a1:75:e6:df:c4:d9:41:5a:7f:fd:21:c4:d7:12:a9:
80:a8:7c:54:4a:6b:c1:48:d7:eb:ab:e5:7b:7f:76:d5:e4:f4:
9a:6d:84:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:35 2025 by rpki-client