Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
File: Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft (raw, json)
Hash identifier: GrY9IjYQQa5GhcsMS7SSqESYRsK02An9ZzNv54XouVw=
Subject key identifier: B9:DC:7D:E1:73:8D:19:71:6D:D2:17:FA:01:61:8B:44:62:08:28:AC
Authority key identifier: 56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E
Certificate issuer: /CN=561c7ccc52376787374092eafac2623e0571a81e
Certificate serial: 0199FC8FBC2EEB0849C7826D9F285C2ABD3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
Manifest number: 11CB
Signing time: Sun 19 Oct 2025 13:01:42 +0000
Manifest this update: Sun 19 Oct 2025 13:01:42 +0000
Manifest next update: Mon 20 Oct 2025 13:01:42 +0000
Files and hashes: 1: HGBJjgjbxKOwS-tzE8qO9Sb0DTk.roa (hash: IycrXxPRq8sHYUqWekjaODjaqQ8VZx13yD5H8Pnu6n8=)
2: Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl (hash: c8+83uU+gFdDJSMZRqrsyGP4n+Z5SdE99+SJmBSiBzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:bc:2e:eb:08:49:c7:82:6d:9f:28:5c:2a:bd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=561c7ccc52376787374092eafac2623e0571a81e
Validity
Not Before: Oct 19 13:01:42 2025 GMT
Not After : Oct 20 13:01:42 2025 GMT
Subject: CN=b9dc7de1738d19716dd217fa01618b44620828ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ac:c0:e5:0c:c4:24:8d:75:4d:f2:07:7c:3f:
bb:5e:c2:25:a8:88:50:f6:79:24:b1:50:fc:ef:33:
5b:d2:57:1c:a5:fd:88:37:0c:10:b1:04:6e:c0:f9:
78:67:d6:5b:1a:84:52:93:01:d5:43:c6:51:25:be:
e8:31:60:30:f0:03:1a:ab:42:57:43:81:d5:7a:69:
a2:96:b2:58:ee:c4:82:71:2b:6c:c5:a0:67:6c:6a:
23:10:fd:30:05:de:aa:df:17:7b:0b:96:72:6c:71:
55:3c:cb:0d:e0:fd:bd:2a:9a:73:a3:3c:5f:c8:11:
05:b1:e0:18:58:ad:63:63:e8:cc:23:3f:78:0a:d0:
df:94:e4:39:58:c4:24:15:c1:31:9c:fb:b9:f1:ed:
0f:da:01:7f:65:89:fd:ea:ad:05:eb:f7:5d:b9:da:
08:a8:ae:3e:2a:b2:6a:b5:c0:7b:84:85:ef:23:68:
02:62:4a:8d:ca:d6:bf:b6:f2:fb:30:bb:e5:49:74:
81:a1:bc:ad:b5:82:2f:91:f9:b8:e0:b3:e2:3a:6c:
c9:f8:18:96:3c:a9:66:5f:e7:da:77:6d:59:f2:48:
b8:22:74:54:47:48:4f:0c:34:da:77:42:a5:8c:9f:
81:f0:01:06:8d:00:da:0c:92:90:98:07:a6:9e:a5:
4b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DC:7D:E1:73:8D:19:71:6D:D2:17:FA:01:61:8B:44:62:08:28:AC
X509v3 Authority Key Identifier:
keyid:56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6a:93:9b:33:ae:ef:ce:ff:fe:a0:35:71:23:07:03:67:d6:
63:c1:79:dc:c8:ed:97:67:fe:cd:e5:4f:aa:23:fa:44:25:26:
c5:6f:b3:73:42:55:2d:4d:04:4c:32:11:0e:3a:40:ef:7f:2f:
e4:38:a0:89:ea:f4:c9:98:4c:e4:fd:0a:01:16:a7:44:c5:27:
f5:b6:2a:1c:cf:ee:8f:54:7a:e4:64:12:50:55:b4:90:45:c5:
82:51:23:8a:c8:78:a0:c2:35:6a:b2:03:c8:fc:e5:bb:45:e4:
0e:53:39:03:fc:d3:27:ee:50:82:69:7f:61:c1:29:4e:fb:2f:
47:5b:b2:63:52:58:a8:aa:77:ea:38:63:6e:61:a9:3e:39:71:
e2:22:92:1a:f8:71:84:00:dc:d0:f0:0f:b9:58:ae:0a:ef:22:
83:66:35:35:6c:75:d1:09:60:15:03:4b:26:d3:07:93:6c:99:
de:43:f6:67:80:5d:25:ea:ad:2d:65:69:a3:75:53:97:f3:ae:
58:79:13:2e:1f:43:b3:4b:14:fb:d2:63:cc:52:f2:2d:81:76:
5a:b3:ff:e3:34:88:b7:99:3a:26:2c:a7:b2:f3:bd:f5:f4:88:
16:b5:ab:b1:d8:2d:cd:b5:f1:62:e3:2f:28:b0:50:4e:bd:9f:
d5:c6:b2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:45:04 2025 by rpki-client