Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File: vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier: sImMsVYuuSyoDM6RoPozW9u/7u+c8lk6hvB/kg0mTIw=
Subject key identifier: 93:E8:A2:4E:55:15:F5:0B:2C:E7:FA:77:D1:B5:4C:D7:D3:5D:B6:3F
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial: 0199FBEB942B22911AB85C380B576B78215D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number: 0AE3
Signing time: Sun 19 Oct 2025 10:02:24 +0000
Manifest this update: Sun 19 Oct 2025 10:02:24 +0000
Manifest next update: Mon 20 Oct 2025 10:02:24 +0000
Files and hashes: 1: ct0pyOPI6fIxvI90voKvQ2P09kc.roa (hash: HL+IQFJP+wo1WUNFcjpb/00F+VP2TuCmZyFITiHM4E4=)
2: gW5vsz1XHWHAiEv2XrHiZAPT2LM.roa (hash: /LPDMtSPu0KMCf6GqHsTiZ0o1jWTrz0r+OipJeljVUk=)
3: smZrnk_Yoz0MEPZqDKnYUoP-Opw.roa (hash: 24G5yjs0ZUoqUy4OoFHxczQzhAIkELffXisqhuw+2DI=)
4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: aQfMmIYgwJQ+h3Kj2JRSBtueT3Bxq7GlBNfJbSc7mPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:94:2b:22:91:1a:b8:5c:38:0b:57:6b:78:21:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Validity
Not Before: Oct 19 10:02:24 2025 GMT
Not After : Oct 20 10:02:24 2025 GMT
Subject: CN=93e8a24e5515f50b2ce7fa77d1b54cd7d35db63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0d:32:4e:3d:78:12:12:35:f0:7d:27:69:3c:
46:0d:05:3d:9a:58:39:14:1c:4e:8e:8a:80:af:0b:
01:22:57:62:4e:3b:ef:76:ec:d6:91:40:28:37:34:
de:10:3c:89:fa:e4:99:03:0b:0d:fb:7b:d2:b3:86:
cd:89:a1:ac:48:a5:8d:f2:bc:43:db:ee:46:ed:1f:
b8:d9:fb:f9:41:14:a6:40:f2:a2:e4:2e:53:ea:75:
0c:e5:d5:9e:f6:5f:70:e6:05:91:3e:33:af:65:34:
6b:36:19:1a:a4:f3:40:32:55:ea:96:ba:45:d6:41:
2b:9c:dc:9b:f3:41:d7:67:11:3c:fa:aa:91:4f:ea:
c3:6c:14:a7:bf:5c:c1:b2:4a:24:cb:d1:56:b6:e5:
7e:b8:03:74:5d:f5:bf:ba:5c:0f:30:27:33:73:b4:
5d:94:68:8a:10:ac:39:63:1d:33:3f:84:ca:b6:c4:
12:7a:5f:e5:74:2b:b5:04:a3:f6:f7:f3:9c:f3:7b:
c7:0e:df:e6:d6:48:3e:ed:76:b0:7c:b0:44:5f:f3:
02:70:a4:9b:a5:3c:1c:ce:3d:54:ca:51:b7:ab:82:
53:27:1d:f1:b2:2b:c8:0b:c2:ee:19:e3:2a:f0:ff:
d3:82:a9:93:a9:7f:48:23:d1:c7:7e:5e:2c:2a:a5:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E8:A2:4E:55:15:F5:0B:2C:E7:FA:77:D1:B5:4C:D7:D3:5D:B6:3F
X509v3 Authority Key Identifier:
keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:42:1d:c7:e1:01:5f:ca:b5:4c:02:b6:e0:6e:32:ad:fa:6e:
c2:bd:4b:a3:6a:e5:cc:6e:a2:3f:b1:0a:97:6a:5c:e1:2d:fb:
91:36:b1:cc:be:86:99:8a:00:7a:7f:f5:fc:69:af:9c:a9:ac:
be:c1:d3:6a:05:57:a7:2b:cb:7a:fd:ab:9d:9f:25:e4:09:93:
34:f6:46:3c:07:45:ea:19:8a:97:4c:fe:44:56:b4:33:aa:d5:
18:67:81:e9:1f:f7:ee:7a:c7:57:20:9e:94:ca:81:46:dd:f7:
dd:e5:c8:36:3d:49:69:4a:25:dc:55:b5:91:d3:1c:c2:50:0e:
a4:de:ff:b3:94:9f:4d:07:aa:97:d4:8c:87:7e:16:3a:b1:7c:
a3:c4:d8:29:52:ee:1d:d4:cb:1b:0d:61:9e:31:9c:71:7d:de:
0c:80:d5:ad:96:a1:7b:11:a1:3a:46:14:64:30:01:a6:29:38:
fc:3b:46:a7:41:7c:aa:bd:cb:3b:ea:47:25:05:7d:bd:e2:fa:
71:94:32:8d:1b:83:df:a2:23:ef:6d:07:af:a6:f4:bc:32:01:
69:69:d6:a1:aa:85:83:d6:b6:62:a7:b0:6c:c2:bf:1d:7e:a0:
7f:ae:ed:15:54:66:10:56:5b:0e:86:5d:54:85:fd:0f:4f:97:
ae:82:29:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:44 2025 by rpki-client