Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
File: VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft (raw, json)
Hash identifier: bAnpN+SAxNyN6+rKDgJ0O2SsORuqd+/N20WjAKooAe0=
Subject key identifier: 4E:03:6F:7A:5B:81:F5:D0:FF:D0:C7:44:A0:CF:9A:DE:C9:3A:6A:6F
Authority key identifier: 57:0A:18:1A:A0:90:CB:97:06:05:A2:5A:7A:57:D6:53:54:7F:23:24
Certificate issuer: /CN=570a181aa090cb970605a25a7a57d653547f2324
Certificate serial: 0199FC584C60D3AC5FB5C7826AF130772BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 12:01:09 +0000
Manifest this update: Sun 19 Oct 2025 12:01:09 +0000
Manifest next update: Mon 20 Oct 2025 12:01:09 +0000
Files and hashes: 1: 46uMqFoZIbx_W9-E8n9u53LtPPw.roa (hash: 2dilAY9A0HBjLWWldEcSomY7yF95pmwR+zYOHTlJZo4=)
2: IZTqsNkTgWjmY4RtPaRP8pP_4y4.roa (hash: snBSRgtB4DOLpSGdb4h6kFLqnhtBFWYeDh0vluESnyk=)
3: VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl (hash: 16JgY0QB/ik/bGJmkWurw3auUVr/VdUmfZEWpfAwDnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:4c:60:d3:ac:5f:b5:c7:82:6a:f1:30:77:2b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570a181aa090cb970605a25a7a57d653547f2324
Validity
Not Before: Oct 19 12:01:09 2025 GMT
Not After : Oct 20 12:01:09 2025 GMT
Subject: CN=4e036f7a5b81f5d0ffd0c744a0cf9adec93a6a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b8:d6:8d:54:8c:3e:85:23:95:1a:aa:9b:42:
e3:68:b2:98:1c:69:96:05:82:c8:ca:2f:8a:f9:a7:
b7:46:a2:3d:a6:2f:c9:28:d4:2b:9c:0c:26:70:f8:
23:97:b0:31:5d:71:0d:89:59:75:38:b9:44:9b:2a:
ac:33:72:6d:44:e7:36:55:5e:af:2d:58:d5:24:6a:
28:6f:70:49:b7:bb:91:6e:a0:67:bf:a1:90:4a:b4:
66:3e:89:ca:0d:52:8c:8a:7f:54:75:00:b9:81:c5:
12:08:18:7c:74:9a:ad:bf:a6:40:96:ab:1f:32:e4:
8c:df:e2:d8:57:da:c3:f6:50:61:fb:ea:72:29:50:
4d:14:e1:8f:91:1f:9b:0b:10:2a:2f:c2:49:85:18:
ce:42:ea:82:c6:f4:e3:f0:f6:11:d7:d6:42:57:d8:
c5:87:1f:d7:36:9e:05:df:3f:7c:73:f5:f7:54:48:
25:6d:c9:29:d4:0c:9d:54:23:7f:ab:5f:dc:01:9c:
48:2c:65:30:61:7f:9f:5a:24:5e:0f:d3:46:ba:ed:
08:8f:b6:d4:df:68:66:e5:ff:19:4f:75:51:4a:98:
5d:ab:e0:7b:3a:f6:c6:7a:c6:0e:fc:4d:fc:83:1a:
c1:8e:16:a3:8f:b2:e3:e4:a0:69:11:00:04:a5:b0:
b2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:03:6F:7A:5B:81:F5:D0:FF:D0:C7:44:A0:CF:9A:DE:C9:3A:6A:6F
X509v3 Authority Key Identifier:
keyid:57:0A:18:1A:A0:90:CB:97:06:05:A2:5A:7A:57:D6:53:54:7F:23:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c1:5d:54:8e:ab:20:4c:49:6b:51:82:7f:5f:47:3b:c0:fa:
ee:70:f2:31:00:f7:a3:1a:30:d4:7b:5d:2a:2a:49:27:34:4d:
b7:80:5a:25:9f:12:f7:cf:a7:70:5f:53:4d:f8:5e:9e:c2:de:
56:34:62:6b:1a:7b:9b:89:b7:76:c9:09:00:ac:86:f8:c4:0f:
c9:8d:48:a0:10:83:9b:f5:92:fa:36:81:83:51:31:34:05:2e:
ad:80:9e:5f:06:87:22:42:75:4c:7a:6d:b6:9f:a7:2a:9f:d1:
0a:c8:75:4e:1a:49:8a:eb:87:66:ea:63:3c:8e:ee:b1:85:56:
cb:15:d1:79:21:77:1c:4a:ca:32:52:b2:18:46:89:12:84:a8:
b0:d3:cd:db:ad:a8:28:56:b5:6a:bc:df:6f:b1:c8:f6:81:58:
92:76:3c:7e:2d:49:45:36:b5:26:3e:dd:19:00:de:25:32:a5:
9c:5a:2a:43:b5:c5:31:8f:f8:88:71:ab:5b:5a:4a:9a:ee:46:
de:76:43:df:bb:65:68:03:de:3a:13:66:d5:45:94:5e:7a:62:
50:84:67:f1:b6:76:9e:67:fa:31:d8:f6:46:57:04:0c:b3:86:
87:5a:e4:be:93:14:bb:30:ec:15:b6:87:e1:e1:a0:2c:14:d3:
8b:2a:3d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:21 2025 by rpki-client