Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
File: VI91elbRdoDW1mkLGdnzkGGYADM.mft (raw, json)
Hash identifier: ePeZn/d52PjoOvltGz8aQlPCkkEu4U07ulsB5vqdfsg=
Subject key identifier: 9A:75:E9:60:DB:CC:E4:D1:56:52:4D:06:C8:64:26:77:85:C6:7C:36
Authority key identifier: 54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
Certificate issuer: /CN=548f757a56d17680d6d6690b19d9f39061980033
Certificate serial: 0199FC586DDEF4AC608090DB928F981F3FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
Manifest number: 1184
Signing time: Sun 19 Oct 2025 12:01:17 +0000
Manifest this update: Sun 19 Oct 2025 12:01:17 +0000
Manifest next update: Mon 20 Oct 2025 12:01:17 +0000
Files and hashes: 1: 6_SJnfO-m7MtpNL_B9ARxP9ViqI.roa (hash: LdcfP3HEkmr8KWBN+enohwNkL/0YyHSs6bxWVW/irJI=)
2: GS0H0Drimc0sp3WE4CJI-1tpUww.roa (hash: K+fEr22QzZrMpwlikgBYkLomYyjXmKEsLjK8H0qHBus=)
3: VI91elbRdoDW1mkLGdnzkGGYADM.crl (hash: EWX/hyK0L0LJDK3B80xQud3yp6Sb3yXCgsS8ENm9XvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6d:de:f4:ac:60:80:90:db:92:8f:98:1f:3f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=548f757a56d17680d6d6690b19d9f39061980033
Validity
Not Before: Oct 19 12:01:17 2025 GMT
Not After : Oct 20 12:01:17 2025 GMT
Subject: CN=9a75e960dbcce4d156524d06c864267785c67c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:50:e8:cf:f8:d5:ed:01:f1:4f:3c:ec:18:
9e:e4:96:86:42:da:82:ae:5a:65:d9:a4:95:54:6c:
9d:d2:81:c7:70:7b:1c:50:e4:c5:03:78:cf:e3:42:
29:94:b7:ee:00:65:6e:9c:df:35:ca:ce:ea:76:a7:
7f:8e:e8:77:9a:54:ae:cd:9c:6d:15:4a:69:e3:0e:
6c:f6:db:82:4b:2d:c8:a2:7f:3f:57:09:53:f1:26:
77:ac:d1:58:29:27:db:d4:9a:1d:70:91:01:98:82:
61:fd:3c:28:65:d4:94:d2:62:07:59:4b:21:4f:44:
c9:57:74:d6:13:f3:0e:5b:c1:34:9a:8a:5d:78:c2:
df:28:aa:6e:dc:ba:62:ae:0e:5e:d0:26:ae:f3:7b:
b9:22:06:79:8d:81:a8:84:a4:c7:76:36:1c:56:2b:
93:39:b4:a5:cd:e3:1d:8f:b1:5c:d6:74:4d:87:5c:
13:4b:7c:f4:8e:4d:fb:59:fa:84:91:70:48:a6:14:
84:92:47:42:a9:1a:28:25:58:ea:16:62:35:fd:c6:
a9:19:dc:16:2c:c5:e4:89:69:0a:a2:fd:26:26:13:
db:e8:cb:1d:04:0c:5b:9b:ef:00:8d:56:ba:e0:c7:
91:ec:af:f3:f6:db:f8:88:10:56:66:4c:99:73:90:
91:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:75:E9:60:DB:CC:E4:D1:56:52:4D:06:C8:64:26:77:85:C6:7C:36
X509v3 Authority Key Identifier:
keyid:54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6d:7e:3f:5d:bb:51:8b:84:0e:28:46:04:5e:a8:63:1e:2d:
24:50:4f:93:46:03:37:75:93:00:5e:6f:56:05:80:0e:d9:e3:
39:c5:48:ad:b3:37:61:ea:24:9d:41:53:a1:cc:aa:4e:96:7e:
41:38:4e:41:3c:e9:73:0a:b1:d1:80:cd:19:15:5e:28:59:81:
84:f4:59:a6:f6:85:cd:60:f0:dc:98:c3:23:dd:18:c3:fd:f0:
44:68:c6:9a:24:f5:59:7e:71:a6:e1:e3:91:03:85:4f:2d:7d:
8c:4e:94:58:95:b4:c3:ea:58:2f:f8:44:7d:bd:ca:cf:95:ef:
e0:78:de:96:f4:6b:41:35:17:69:80:8b:39:70:2b:5c:e7:8d:
de:39:da:bc:19:80:e9:f0:6a:8a:ef:c6:d6:4f:3a:a8:d9:f0:
b5:87:bf:d8:00:61:04:7f:db:10:87:3e:92:b0:48:c3:77:f9:
5f:61:09:6f:02:7c:d6:2d:96:be:e1:57:af:2e:6a:4e:6d:f5:
40:a1:d9:65:73:f0:46:f9:e7:9d:0a:78:97:a1:5b:2f:a7:a5:
29:1c:b0:44:18:9c:9b:00:3d:83:33:45:c5:96:2d:f7:16:b0:
4c:a9:be:54:78:98:06:44:89:23:03:17:00:e7:db:3f:25:88:
e7:db:d6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:28 2025 by rpki-client