
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
File: VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft (raw, json)
Hash identifier: 1+XADT7QgwlAp4nQVAN9yuNWuEC7IWxXbZ5swRmPM8w=
Subject key identifier: D0:9F:CA:CF:26:81:44:19:D2:33:99:59:13:2D:E2:68:BE:B8:09:14
Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Certificate serial: 0199FDDA0BEDB94BFACEA1E34AC443BA9856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
Manifest number: 0DEC
Signing time: Sun 19 Oct 2025 19:02:29 +0000
Manifest this update: Sun 19 Oct 2025 19:02:29 +0000
Manifest next update: Mon 20 Oct 2025 19:02:29 +0000
Files and hashes: 1: 1evcMDo7pi-aA6SWjQJ5C1thyaU.roa (hash: xYDgN0KV8Q5QXfbFX/hw20fHK9cnWhX/isL2BXocmSw=)
2: BFOQ1xipYhPtnW3G70pfAnmzwzg.roa (hash: /+UHFdHIIgWbmriMU+n5ynXyWKvmniC4nJpXONs4/qY=)
3: ISS1nVoFj6vql40oL7xs039XkbE.roa (hash: Uj1JIR2yGWgQKTO1hh05hzaRctOY0c3hfi9SPLtZHjc=)
4: VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl (hash: LKzjQYpYU6VzoEwrGolLPL2rmNRwudl2jNQa7xg9CyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:0b:ed:b9:4b:fa:ce:a1:e3:4a:c4:43:ba:98:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Validity
Not Before: Oct 19 19:02:29 2025 GMT
Not After : Oct 20 19:02:29 2025 GMT
Subject: CN=d09fcacf26814419d2339959132de268beb80914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:c6:5e:c3:cc:e1:d8:c2:92:92:31:5b:49:
80:ef:00:21:8c:38:d1:9e:3e:02:40:93:bb:89:45:
ce:0c:ae:2f:94:23:30:8e:c6:98:c9:fb:f5:6a:c4:
33:f1:4a:c0:f8:ba:d6:f2:87:16:54:c5:b5:04:6b:
b5:97:1f:ee:83:cc:f6:df:7d:48:bd:60:d6:d2:dc:
51:b7:21:a0:7a:45:5b:a9:58:7f:ca:0e:74:d1:f6:
34:ef:1a:31:12:38:41:3a:91:42:e3:33:37:22:50:
5b:f4:d7:35:ea:f1:24:bd:2e:43:e8:47:40:1c:dc:
9a:04:22:5c:2d:1c:0b:dd:ac:8b:02:ef:41:bc:e2:
d3:9d:6c:33:cc:f9:5e:4d:4b:48:e8:46:2b:2f:fc:
89:ed:03:c3:c4:18:ae:42:8c:a3:eb:32:37:b2:3a:
e5:b4:6a:98:b0:1b:4b:a2:b0:02:db:f1:94:26:78:
59:4b:c5:d5:74:10:dd:2c:2d:a9:7d:42:bd:1d:e6:
3f:fd:3c:66:cf:b4:c2:9c:92:74:6a:06:17:5c:7e:
ec:f5:53:ba:bd:ae:19:2d:d0:5f:c5:7a:65:2d:db:
e7:df:33:5c:58:53:ce:2b:ff:ef:b4:c4:fc:59:c4:
35:1f:85:5a:68:b6:81:d2:63:7b:29:cc:bf:f7:a0:
79:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9F:CA:CF:26:81:44:19:D2:33:99:59:13:2D:E2:68:BE:B8:09:14
X509v3 Authority Key Identifier:
keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9f:18:65:60:da:87:91:0f:f6:7d:57:24:6c:f4:e7:2d:94:
94:2e:1b:18:6d:90:05:a6:13:a5:0f:c9:f6:e7:12:c7:e6:48:
c4:3c:bc:52:40:88:73:b1:80:64:d7:9c:e0:57:b5:48:9f:ae:
75:4c:47:08:d8:cb:d6:0b:d9:30:9c:57:92:9a:29:3a:f4:38:
2a:d9:4d:e7:f4:0a:10:9d:7b:31:b6:ac:fa:90:36:db:69:3a:
70:9b:26:d0:16:c4:66:54:8c:9f:59:62:0d:f4:a4:25:98:6f:
78:28:e4:fe:e5:f5:84:4d:c6:fd:03:e2:79:de:bc:18:e8:26:
da:a0:4f:b2:78:9e:17:43:92:28:13:b2:17:08:14:4d:b3:2f:
0b:60:82:bb:77:9e:ae:7c:a4:db:0a:4a:7c:de:47:ee:30:10:
9d:8a:39:26:71:33:29:08:cf:dc:6f:6b:c0:cd:e3:16:df:b1:
9c:2c:91:e6:cd:e3:c0:ae:44:61:a4:72:20:ed:b0:27:e7:75:
84:b1:19:e6:f5:3b:77:6b:6d:22:c4:e9:98:05:4f:3f:d6:62:
e0:e5:7f:61:ae:1e:a9:8a:78:9a:e4:aa:25:18:96:ab:37:57:
ec:f8:98:c2:0b:f2:ab:af:d0:e0:b1:f5:39:75:be:89:b2:4f:
19:7d:4c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:30:28 2025 by rpki-client