Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
File: V2si8nkFl0hL-WkVqDVDwZSz_R4.mft (raw, json)
Hash identifier: u1XOfmVESoctzsFjLEcbmFi4/fksJQ0YXX7MDRkS+IY=
Subject key identifier: 03:DC:02:EE:9E:10:AD:B9:33:A2:20:21:6E:1B:EF:8F:24:A9:49:6D
Authority key identifier: 57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
Certificate issuer: /CN=576b22f2790597484bf96915a83543c194b3fd1e
Certificate serial: 0199FE46F7D4D4CE99E25F581EF46845ABFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
Manifest number: 0626
Signing time: Sun 19 Oct 2025 21:01:27 +0000
Manifest this update: Sun 19 Oct 2025 21:01:27 +0000
Manifest next update: Mon 20 Oct 2025 21:01:27 +0000
Files and hashes: 1: V2si8nkFl0hL-WkVqDVDwZSz_R4.crl (hash: uV9Y1Bfth7tPFW/Fnz3TORIJpy2ZPI/po/vcvxd/0+0=)
2: WnvN9eO0xROw8P2u2NunmIAmhFM.roa (hash: ICDMCpB80BuzlOdYTKVVB47BHhMFIG3MGwkKpb0Kjms=)
3: ga2NxvzjVumF5thvPvomOtqub-A.roa (hash: Fnu74FvZlaTUv1bGjbnayDCXm216CFcy4KRgAcWl9Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:f7:d4:d4:ce:99:e2:5f:58:1e:f4:68:45:ab:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576b22f2790597484bf96915a83543c194b3fd1e
Validity
Not Before: Oct 19 21:01:27 2025 GMT
Not After : Oct 20 21:01:27 2025 GMT
Subject: CN=03dc02ee9e10adb933a220216e1bef8f24a9496d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:ac:2d:e4:19:99:dc:96:52:f9:7b:cf:4f:
21:5f:ea:6d:f9:4a:7a:06:a8:26:be:42:68:fb:91:
1c:6f:d2:85:a8:f4:eb:c5:4c:8e:f2:64:77:60:2b:
2d:5f:f0:2b:c4:ca:92:b4:0f:61:3d:ac:85:30:40:
c7:80:04:58:0b:1b:26:90:8a:01:bd:5b:7f:46:5d:
a0:e5:d2:ba:22:1e:14:fe:1d:3e:43:ee:55:eb:be:
06:23:1c:36:45:74:70:e0:fb:e2:f5:3a:c4:95:e6:
15:39:9c:ee:bb:ce:9b:01:c7:28:89:52:15:22:04:
01:60:87:03:a5:49:64:61:47:76:87:6f:b9:13:0c:
34:f4:28:31:dc:1f:55:b6:cb:92:74:52:e6:f3:ec:
a2:06:a6:be:22:1e:b7:d3:61:27:36:4a:e5:24:71:
2c:fe:36:f7:8a:eb:27:e6:04:aa:ae:2b:43:4c:fb:
77:41:f1:b0:c5:0d:fa:e5:12:e4:e3:04:3a:28:8e:
af:a3:e4:71:1c:b9:59:62:75:db:68:79:53:73:ca:
84:36:f4:58:bb:69:8e:73:f9:91:b5:0e:e2:fc:0f:
87:81:e0:92:7a:3c:30:ae:76:4c:d9:b6:32:6d:5c:
02:b5:c5:db:b0:36:c3:86:fa:4d:93:89:03:a8:ba:
e0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DC:02:EE:9E:10:AD:B9:33:A2:20:21:6E:1B:EF:8F:24:A9:49:6D
X509v3 Authority Key Identifier:
keyid:57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:68:31:08:4c:59:30:7c:d0:52:09:97:59:8e:a6:4e:ca:56:
2e:44:80:4a:fa:47:34:3f:8d:a9:c8:88:f5:f8:74:69:6b:e3:
c0:ac:0f:2c:0e:79:eb:67:b3:ae:32:a9:f6:28:6c:f4:60:16:
c5:10:39:a4:aa:37:9c:6a:25:73:ca:74:43:d2:e0:e7:51:1b:
87:c1:cf:e4:49:09:ea:d7:15:59:fa:fd:29:c3:b3:a4:ed:eb:
2b:c8:87:0c:bd:f7:87:eb:03:1b:0c:38:a7:7e:1c:3b:e0:73:
bb:3a:da:54:07:df:27:ed:cc:44:0b:22:72:e2:da:85:f6:2b:
a4:bf:c2:2e:b7:a2:4c:9a:7f:c5:29:dc:00:57:ec:13:88:59:
60:15:dc:65:1e:72:9e:dd:99:e8:e4:c9:02:a8:dc:03:9f:b1:
87:b5:31:11:a9:36:3e:85:ad:09:1f:ff:d0:03:69:d7:e9:3b:
b9:ae:e6:9a:0b:c0:29:c5:d1:b8:ba:dc:c0:53:22:00:5c:0c:
ca:e1:c3:dd:42:25:d2:c0:ab:e2:3e:42:26:11:92:45:8c:7e:
74:1b:8b:e7:4b:14:1b:47:f8:6a:b8:a5:8c:80:45:9a:93:44:
5d:98:ad:7a:6b:91:38:cd:1a:2d:75:b6:b4:90:3f:27:81:8c:
42:45:b8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:29 2025 by rpki-client