
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
File: VSrToLS3ToWvVPWK11owJrffcYE.mft (raw, json)
Hash identifier: 6krehjyr/IADop8QboppERTE4wF67dC7nWcRwLzEZ+s=
Subject key identifier: 6B:A4:EE:6F:7F:99:E9:46:02:FE:87:F6:73:A9:09:90:6F:AC:96:42
Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Certificate issuer: /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Certificate serial: 0199FB7CBAEB4A6CFAD340F5F441430B27CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
Manifest number: 171C
Signing time: Sun 19 Oct 2025 08:01:19 +0000
Manifest this update: Sun 19 Oct 2025 08:01:19 +0000
Manifest next update: Mon 20 Oct 2025 08:01:19 +0000
Files and hashes: 1: 6jmBqQ69ucquob5LYoU8XO0aoaM.roa (hash: iVwx0LgAhkHT9krjXAM19RbPrDxsVzpzta/Wm4cdzGM=)
2: Tc3s-2xco0JsiKKHs4HafxTscjs.roa (hash: ldDhuMj8RJQOwqkPXb97Us2/HhGxeidwxkit00ybDDk=)
3: VSrToLS3ToWvVPWK11owJrffcYE.crl (hash: MGHRPzr9zATsdavEEmq5iKOGcR6B4WgdeuV/QVQWJbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ba:eb:4a:6c:fa:d3:40:f5:f4:41:43:0b:27:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Validity
Not Before: Oct 19 08:01:19 2025 GMT
Not After : Oct 20 08:01:19 2025 GMT
Subject: CN=6ba4ee6f7f99e94602fe87f673a909906fac9642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ee:ad:cc:b3:97:30:f7:6b:f6:0b:a7:ff:7e:
43:2a:44:e0:05:73:98:58:b4:89:7e:e5:11:c1:e6:
05:43:85:d0:47:03:45:2f:84:aa:53:32:8c:3f:50:
c9:99:61:58:bc:d7:f6:c0:98:57:ac:d3:bf:ad:5b:
93:65:d1:2b:45:a3:4e:92:da:0f:c5:1f:26:22:8b:
50:6a:da:88:b1:cd:9c:90:13:da:bd:3f:b4:8a:7f:
81:8e:3d:d0:48:58:6a:ca:3d:8f:13:19:17:d9:e4:
dc:e4:15:fc:97:f7:d5:c9:e4:21:e4:48:52:53:eb:
cb:b2:bd:9d:40:bb:db:6c:31:fa:96:13:33:69:e3:
79:dc:2d:a4:02:67:3d:c8:b2:d9:53:aa:b2:0c:a0:
44:52:ca:be:19:2c:72:81:51:f4:74:58:04:ab:85:
35:10:83:1b:28:91:22:84:35:7c:b5:00:b9:a5:96:
4a:58:39:19:c5:33:5d:1d:02:b1:25:c5:93:06:35:
97:59:a0:c0:06:33:a0:8a:27:9b:49:b6:e8:27:97:
9b:66:88:67:4d:a7:85:86:a2:d5:c6:35:a5:04:85:
8c:3f:1d:17:a5:56:b1:ff:52:5b:be:f9:cd:08:a5:
ea:5f:57:42:ac:70:33:17:1d:57:7e:21:54:ea:02:
ed:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A4:EE:6F:7F:99:E9:46:02:FE:87:F6:73:A9:09:90:6F:AC:96:42
X509v3 Authority Key Identifier:
keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ab:b0:69:c3:de:9c:1f:01:48:90:06:11:b5:26:1c:42:e1:
47:43:25:26:aa:fc:50:aa:20:56:1c:af:b5:4b:00:4f:75:6e:
9d:96:54:9d:a4:d8:4c:7d:f8:61:43:e1:ec:72:61:f5:17:7d:
fa:af:b7:86:f9:5b:99:e7:de:1c:49:25:db:c0:9d:22:96:de:
c2:20:c7:b6:13:f0:47:37:57:2d:f8:dd:9e:f1:d1:4d:c1:93:
70:23:47:7c:ba:1e:58:32:39:cb:9a:f5:eb:ec:37:52:87:06:
7f:29:19:3d:84:c3:0e:12:3f:93:2f:a3:f8:75:91:9a:d8:a2:
95:43:d3:04:98:93:4d:17:28:42:20:93:53:01:42:1f:85:4c:
42:f9:72:36:f8:f4:32:db:80:f0:05:20:ca:9b:71:a4:73:e9:
e7:89:dd:cf:63:b8:4a:c0:d0:f2:fc:d5:af:f1:97:be:9e:9d:
01:1b:9f:b1:ba:f0:b2:bc:30:be:19:fe:47:5a:c8:30:80:46:
6e:22:8c:d9:9b:a6:2d:a1:3a:c0:9c:81:67:8d:a4:b5:b6:9d:
94:86:44:dd:c7:49:35:e9:e4:53:8d:37:03:99:4a:f6:11:e2:
81:4d:a8:1a:f4:ab:5f:24:a1:64:93:ce:b2:35:e5:9c:1b:2d:
94:a9:dd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:15 2025 by rpki-client