Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
File: VytO2SaC1xio_ESIFAAnQGlgeV8.mft (raw, json)
Hash identifier: J2zN7LQtIRXdmoee4FXjWz4ZM+cHj/AStmQmvMhNxqk=
Subject key identifier: 0F:14:0B:05:89:C5:71:E3:79:32:0F:20:65:A4:53:A1:E1:72:A4:94
Authority key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
Certificate issuer: /CN=572b4ed92682d718a8fc4488140027406960795f
Certificate serial: 0199FCC65676C2764FB988E6619AFAEE84F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
Manifest number: 0D3F
Signing time: Sun 19 Oct 2025 14:01:20 +0000
Manifest this update: Sun 19 Oct 2025 14:01:20 +0000
Manifest next update: Mon 20 Oct 2025 14:01:20 +0000
Files and hashes: 1: 8R_SRNPLxmibFS1usJIWud4x3Z8.roa (hash: b2dIcGiMsdbDXAx7DhwSvU4UC5F6aoWQ/Pjpo9tIfQA=)
2: HSPZejR5lJB8cqlG1i1XbvBd4AY.roa (hash: LYg4VkRRLjikz7I2hzCQk0ST28urIdVmK83g08e6nBA=)
3: VytO2SaC1xio_ESIFAAnQGlgeV8.crl (hash: xKmrD8I+KBuG08keRrXPUrnLupO3qzqnpztz4khN3QE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:56:76:c2:76:4f:b9:88:e6:61:9a:fa:ee:84:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572b4ed92682d718a8fc4488140027406960795f
Validity
Not Before: Oct 19 14:01:20 2025 GMT
Not After : Oct 20 14:01:20 2025 GMT
Subject: CN=0f140b0589c571e379320f2065a453a1e172a494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d2:f2:a0:aa:2a:78:5a:63:34:e5:1a:7d:c8:
6b:3c:ee:90:f6:db:34:b6:61:8b:a0:28:e7:71:a3:
71:c9:2a:4f:b4:0a:fa:27:b8:ce:9a:2a:f3:ef:94:
55:23:7c:16:a0:d1:ba:06:9d:18:ee:5c:d9:4a:43:
9f:fd:ad:5c:d8:63:3a:fb:a3:61:8c:be:99:63:10:
b0:67:08:7f:2e:e5:53:d0:58:58:2c:be:3d:a8:1d:
a4:0b:e1:0a:3f:0b:3e:72:00:cf:d2:e5:ea:96:a0:
08:62:3d:52:be:31:6b:9a:df:29:3b:99:7b:e5:c2:
bd:51:f5:de:ca:7f:1c:42:3c:40:25:24:de:e0:98:
fa:56:34:55:86:a6:d6:c6:6d:0b:f7:61:8d:f1:ed:
07:0d:0a:c6:ea:0b:f9:1f:8a:b5:99:c3:f5:9b:21:
41:9b:53:df:52:51:78:3e:86:ba:7c:d3:5f:77:63:
ca:84:e6:5b:86:a6:b0:01:f4:a7:07:91:a0:26:87:
94:db:1c:de:d5:34:a3:5c:f2:f7:ce:40:db:06:0f:
cb:a4:f0:ce:8f:52:fd:a5:3b:20:6e:07:7d:96:74:
f4:fc:27:20:15:dc:14:15:80:72:46:bc:0a:ea:da:
b0:39:af:ea:0f:f2:49:fc:db:64:bb:9d:97:8a:16:
34:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:14:0B:05:89:C5:71:E3:79:32:0F:20:65:A4:53:A1:E1:72:A4:94
X509v3 Authority Key Identifier:
keyid:57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:dd:5a:4d:20:6e:d2:73:54:9f:e4:cf:9a:fc:10:9a:91:b3:
2d:a5:27:52:28:2d:7f:78:e7:6f:ed:72:63:31:cc:70:57:0a:
f6:59:a7:ae:1b:0a:d4:7f:92:1d:25:e6:b5:60:7f:c2:b9:a8:
47:a3:c6:67:03:30:d4:d0:6f:b4:50:d2:12:df:70:c7:90:0b:
11:9a:27:32:cd:2a:ea:d3:e1:70:69:5b:b6:bf:85:24:12:4d:
61:c5:6f:f6:0a:ce:ad:2d:fd:ed:b2:98:19:93:d5:f0:a4:ac:
13:84:c5:c6:3a:d2:92:e1:d1:15:86:67:a3:08:74:3b:27:80:
4b:9f:b6:c3:6f:8d:5c:27:c7:20:2f:3d:62:21:ad:23:2a:58:
34:46:28:f5:4e:41:9f:82:03:b6:2b:f7:8e:3a:53:9d:12:05:
93:a3:86:a1:9c:f5:6b:67:8f:73:5a:de:42:82:52:29:34:03:
b1:6f:d1:57:d5:4a:28:b9:4d:59:b6:b1:b7:93:eb:6e:62:ad:
78:c3:71:9f:2d:00:28:23:23:a1:0b:10:bf:e5:03:e7:4b:d1:
9f:52:f9:c9:60:66:7f:a1:32:3c:fa:e9:4a:53:93:81:a3:ce:
de:c1:2b:ae:4a:98:bd:59:0a:5b:d6:26:9f:32:2f:f8:e4:c8:
ae:ef:75:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:18 2025 by rpki-client