Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
File: vlR-u1wFb3ApbkCGISYfPE4tQjk.mft (raw, json)
Hash identifier: Fl0dHWMV5vvZlOzWaOSDrDxC73OT+ZYVnv2C2JlBxVI=
Subject key identifier: DA:11:23:13:E1:CA:38:B6:77:46:31:01:DB:88:DF:77:64:ED:F0:94
Authority key identifier: BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39
Certificate issuer: /CN=be547ebb5c056f70296e408621261f3c4e2d4239
Certificate serial: 0199FDD9EC3282D4C9EE8045754B851E55D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
Manifest number: 0BC9
Signing time: Sun 19 Oct 2025 19:02:21 +0000
Manifest this update: Sun 19 Oct 2025 19:02:21 +0000
Manifest next update: Mon 20 Oct 2025 19:02:21 +0000
Files and hashes: 1: CKAk2cC-uYUGuYFqMOzXbvUXtPM.roa (hash: BpxkyCoQfkm6yG5imjMFMQgDsZS9FxcArr/Be2DDC9M=)
2: vlR-u1wFb3ApbkCGISYfPE4tQjk.crl (hash: /EvfyjAT7zNfhz4ShccNA1+NViYH1ItqpMEFUdUAhyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ec:32:82:d4:c9:ee:80:45:75:4b:85:1e:55:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be547ebb5c056f70296e408621261f3c4e2d4239
Validity
Not Before: Oct 19 19:02:21 2025 GMT
Not After : Oct 20 19:02:21 2025 GMT
Subject: CN=da112313e1ca38b677463101db88df7764edf094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c2:6b:54:73:2b:dc:14:9d:4f:21:67:41:5c:
05:7d:24:83:00:6a:88:42:cd:12:8d:5b:32:53:e6:
85:ef:ba:0d:2b:5f:8c:50:ce:12:5a:ee:42:b7:11:
85:33:9a:bd:81:02:73:00:91:8a:bf:4c:9b:40:72:
d9:2f:fe:a0:e5:13:49:b0:b0:80:16:e5:af:2b:8a:
7e:34:41:0f:a5:33:ad:fd:0f:f5:f4:23:dd:83:c9:
16:53:56:f0:65:97:bd:2f:1e:e8:61:69:31:ea:dc:
cc:5e:fe:8f:81:c8:57:92:36:39:6f:c0:c4:8e:b7:
3e:f6:96:23:96:4e:de:39:37:21:11:89:30:6e:60:
db:f5:e2:63:e7:6d:9d:be:a8:7e:05:da:97:62:a1:
b6:f2:9d:d8:dc:65:70:e7:09:fc:64:23:a0:8c:24:
08:61:a8:dd:ba:f0:43:d5:f1:89:2a:99:34:a9:57:
c2:c0:c0:33:2f:d8:c8:b7:7a:13:76:c2:60:4c:dd:
2f:2c:76:bc:66:e9:02:93:a5:52:d4:2e:57:5d:ff:
1a:4c:69:f6:2d:54:62:9f:d1:ec:45:fe:e7:21:5a:
5a:16:60:ec:c9:6a:47:25:e1:33:01:3f:49:94:40:
86:bd:54:f0:0b:fa:c8:fa:a4:3e:e1:87:f7:c5:94:
dd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:11:23:13:E1:CA:38:B6:77:46:31:01:DB:88:DF:77:64:ED:F0:94
X509v3 Authority Key Identifier:
keyid:BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3b:bc:4c:34:83:b2:2e:08:9b:d2:f9:71:dd:8a:4f:61:0d:
7f:94:62:cc:f9:fd:96:b6:2c:54:f5:e6:16:7a:1b:77:58:d4:
cb:50:8c:7f:31:ca:23:84:b1:ca:4a:61:87:2d:5b:c9:42:a7:
65:2e:1c:88:1a:e1:a8:8d:88:f9:70:da:72:87:ed:93:06:c0:
c0:94:2e:84:6e:99:5c:21:06:65:fb:b1:cc:c7:96:db:f0:44:
41:10:6c:46:10:4c:71:57:74:90:06:db:f9:80:61:c2:2a:e8:
91:3e:fb:7f:a6:9f:9b:d5:f0:29:1a:5e:bc:f2:33:5e:c6:d7:
d2:81:c4:82:3d:e6:41:8f:6c:3e:93:37:66:12:a3:23:2a:81:
4f:e9:f4:27:99:b7:0a:98:38:1a:e4:0c:4e:95:5c:b3:92:73:
43:22:95:59:cd:2f:b1:bc:8b:08:2b:25:6d:1b:ea:5d:22:e4:
da:11:bf:23:ba:c1:cb:91:4c:b9:00:51:b7:fb:84:c5:e5:81:
53:f0:95:0f:df:ff:77:28:08:bb:2e:0c:ec:0a:ba:b4:0a:e7:
8b:4c:2a:9f:d7:a4:a8:ee:ab:d8:9c:86:58:d2:5a:e4:a3:ff:
a2:14:91:68:da:62:80:25:be:63:3a:74:8c:40:89:48:8c:56:
b2:8d:00:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:25 2025 by rpki-client