Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft
File: V-K4ajPJ-XIUU22MopGdfzw4AM4.mft (raw, json)
Hash identifier: vwHygQa4L2ryJPTt5UexaSxPzI4Q6FvVccsVHvGSbOw=
Subject key identifier: CF:B2:6F:D2:36:46:C6:CD:FB:DF:B6:5B:00:5A:15:A5:30:CD:67:F6
Authority key identifier: 57:E2:B8:6A:33:C9:F9:72:14:53:6D:8C:A2:91:9D:7F:3C:38:00:CE
Certificate issuer: /CN=57e2b86a33c9f97214536d8ca2919d7f3c3800ce
Certificate serial: 019A01B57403FC61B716B4130D8CB3309A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft
Manifest number: 084D
Signing time: Mon 20 Oct 2025 13:01:00 +0000
Manifest this update: Mon 20 Oct 2025 13:01:00 +0000
Manifest next update: Tue 21 Oct 2025 13:01:00 +0000
Files and hashes: 1: DnRh90F6ngW2Q_l8KyvAvTFYNhk.roa (hash: jU7eitkasCXaSHRJrOwhJr50g3LZ5XZllbkxukDWdO0=)
2: SW4Yp7z-czq3Wyk3SkqgTnWrKpk.roa (hash: YmIRklQ+efQc+b8RqPf+ZXpsg1COSPp4Bv5KKeWEZK8=)
3: V-K4ajPJ-XIUU22MopGdfzw4AM4.crl (hash: pdGEawJ9Cfwu2SG0HTIkooEztXLajlJdBUVw57Y7TRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:74:03:fc:61:b7:16:b4:13:0d:8c:b3:30:9a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e2b86a33c9f97214536d8ca2919d7f3c3800ce
Validity
Not Before: Oct 20 13:01:00 2025 GMT
Not After : Oct 21 13:01:00 2025 GMT
Subject: CN=cfb26fd23646c6cdfbdfb65b005a15a530cd67f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:1a:e8:8a:39:91:4e:d1:a0:14:86:d8:70:
c6:1f:94:e6:08:de:a5:23:00:5f:ef:22:6c:24:49:
42:43:11:a4:bf:26:e5:3c:1d:f2:16:d8:55:c4:e7:
ba:45:1d:32:d2:1a:1d:a4:9b:95:e7:5d:bc:d1:03:
aa:c9:f7:7d:23:99:db:ca:a0:fe:78:02:20:5d:3e:
f7:fc:e8:1e:5d:93:15:85:17:00:93:7d:2f:c6:a9:
32:2b:8b:52:2a:dc:7c:14:85:3d:da:ee:a8:04:d5:
fc:09:e5:57:9c:27:16:ea:64:e2:4a:02:8e:de:4b:
a0:f5:1f:d2:7a:4b:1f:c0:21:99:7e:1c:51:cc:e7:
d9:f8:76:b4:c8:d8:fb:28:11:bf:ae:34:0b:b4:db:
f0:7d:e9:70:c7:ed:b1:66:d3:b6:bf:5b:93:9f:a0:
9a:58:09:5c:cc:d0:d9:a0:0b:31:af:e0:30:a3:18:
10:f2:e5:a3:52:cd:0e:0a:d6:a6:ce:31:84:9b:29:
74:94:f7:27:ea:5e:cc:50:25:95:1d:f9:5f:f2:f7:
bb:3e:bf:31:60:ac:56:c2:2b:63:d8:7d:57:14:cd:
5b:63:c7:63:bf:d5:d9:f8:77:75:8a:6d:2d:58:7a:
1f:f9:c2:31:bc:3f:31:ba:e3:8d:ac:26:67:69:c7:
5a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B2:6F:D2:36:46:C6:CD:FB:DF:B6:5B:00:5A:15:A5:30:CD:67:F6
X509v3 Authority Key Identifier:
keyid:57:E2:B8:6A:33:C9:F9:72:14:53:6D:8C:A2:91:9D:7F:3C:38:00:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:9d:e0:b1:55:3d:c7:64:6f:37:14:eb:07:ae:1c:b6:94:49:
3d:15:77:18:a7:75:5f:3e:1f:c4:31:6e:a1:d8:ed:55:d2:25:
d4:e2:49:d8:76:d9:b5:c7:70:d6:6f:00:ba:65:a0:48:fc:8c:
6d:3e:14:49:ce:cd:82:4b:15:92:75:9c:f4:f5:c1:26:8a:d4:
90:7e:cc:1b:4d:0c:7d:c9:31:f3:04:bd:9e:72:5c:7c:fe:fc:
2a:51:7d:8a:d0:64:82:da:4b:ce:a4:f4:b3:10:b1:e3:9d:c8:
4d:f7:4c:2d:7a:aa:d2:99:64:e4:20:d7:78:84:23:65:68:95:
a4:fd:72:9d:3e:bb:c2:3f:84:30:d2:84:3b:bb:d7:cf:69:c9:
f9:33:35:23:56:e3:f4:62:d1:87:2d:a4:66:97:b4:11:71:c3:
50:72:d4:bd:8f:01:f8:ae:af:c3:6d:dc:e0:42:bc:df:30:39:
bb:64:e2:1c:0d:9c:d2:be:ea:73:92:67:e3:20:d9:c5:6e:68:
dc:c2:db:3f:bf:ac:73:eb:e7:51:6d:5a:81:69:2d:a6:da:c6:
ab:01:6d:44:7c:f5:87:18:8e:c0:38:0e:9e:29:93:43:0f:c6:
3f:51:11:ca:2d:35:57:88:60:73:f1:6d:64:3a:28:53:be:5b:
7e:63:e7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:47:42 2025 by rpki-client