Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
File: Vxy1HLpo6375hnp10XqygBgZaqE.mft (raw, json)
Hash identifier: RQXHTIXMvIh0ki8h915tVCA7nfer4+jQkjnGf+7lN0M=
Subject key identifier: 88:1E:4B:AC:D0:1D:69:03:85:AD:3B:5C:77:E3:A3:95:CA:C8:20:A0
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 0199FD34128EBEF7E5EBD62A9764DE485200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
Manifest number: 0CBD
Signing time: Sun 19 Oct 2025 16:01:12 +0000
Manifest this update: Sun 19 Oct 2025 16:01:12 +0000
Manifest next update: Mon 20 Oct 2025 16:01:12 +0000
Files and hashes: 1: JgoOvXvrswEOgbBkM7mOX2KwPkM.roa (hash: 0lHrFGf5p+iWNP5B3Ka8kAz0C85fbyYK54kTcYnj/rA=)
2: Vxy1HLpo6375hnp10XqygBgZaqE.crl (hash: PeoiYyD7yOS66Ra1Wgoojn37PnBVKsw5EgnxBEiM3w0=)
3: cyR0MG358cE31yYquNutXJ-iDF8.roa (hash: L+ASvmDkfATGzQpFgRk2AnKdML9CN0Rr1X6uRXAEZ1E=)
4: epa_afuyCzBcfU-VTREOHg-Um7o.roa (hash: FFmDpvGyVVShIsfmkU3hs/l9PjpSmPKRLTcUFUMcp0k=)
5: g6TuPyfjfZm3a1iJ6jmpBrCZOyg.roa (hash: CNlUV4jR+NQLLp2J8IPpPlsmA4JKIepJsPSZTdBGAho=)
6: w3oVmuw8ayCWipsjf7Gj9_wvooQ.roa (hash: PQa7Ps6DrpkpjdthG8dfoc8AVs7mJPa76WRf2LVd8gs=)
7: ytDh0ELobkf6U6UFJvD32uKf2TU.roa (hash: 6lPwePJBHo15gagGb2dahE1/Q3UgWM6DtWlU5CdkrLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:12:8e:be:f7:e5:eb:d6:2a:97:64:de:48:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: Oct 19 16:01:12 2025 GMT
Not After : Oct 20 16:01:12 2025 GMT
Subject: CN=881e4bacd01d690385ad3b5c77e3a395cac820a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:14:0f:2b:5d:9b:b1:ae:a8:b5:f8:8d:84:da:
50:a4:f9:47:8f:7c:84:91:3e:e6:1f:d1:33:fe:93:
a6:b5:95:8a:8a:d3:41:86:c7:b9:6a:ce:56:0f:ec:
aa:ef:6a:cc:22:49:9f:43:ea:86:1f:f5:34:83:61:
44:14:77:e7:e0:b7:e7:61:c7:aa:df:f1:5c:a8:83:
ce:e1:e7:b9:b7:bc:12:89:b2:90:b9:d6:83:22:23:
77:b7:61:de:f6:b5:fb:26:04:95:ed:71:64:92:ca:
fb:b8:82:8b:fe:de:ea:f9:5d:90:a4:25:27:76:55:
0c:dc:dc:1e:4a:ec:74:32:72:fc:65:0b:f8:1e:84:
4b:d5:77:9e:3e:22:f8:d0:c4:da:91:36:d5:c6:60:
f7:02:0c:ad:9e:37:23:d3:ab:a9:41:b4:62:81:2e:
c9:69:bd:86:4b:98:d0:62:3c:23:73:f5:ed:bc:21:
de:c2:93:61:05:40:87:2b:31:bc:92:b1:75:4b:f8:
1f:ac:3e:2e:43:90:01:bd:04:e9:1d:1b:76:03:74:
83:2e:d9:c5:f8:09:4e:3f:60:21:f7:fd:7e:e3:7f:
ca:39:a0:36:20:9d:66:03:10:81:26:20:4d:a6:41:
3d:52:ef:f9:7a:3b:5e:ba:06:79:4b:d6:46:91:95:
e6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1E:4B:AC:D0:1D:69:03:85:AD:3B:5C:77:E3:A3:95:CA:C8:20:A0
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:02:91:8a:02:3a:ba:83:69:9c:f5:b5:fc:56:e5:40:63:13:
2d:68:e3:c5:a0:86:f2:f9:ca:9c:08:22:77:dc:ee:bf:1e:31:
ea:47:a3:97:19:cd:bb:56:39:a8:90:1a:8b:d2:41:1f:e1:29:
f0:58:62:29:c6:27:ca:03:7f:f3:b0:77:6e:f7:b0:61:33:a9:
0e:70:b0:a2:d5:82:d2:93:88:fa:e2:13:ea:16:69:73:55:48:
16:24:c8:24:7e:76:25:0d:2d:5b:30:93:cf:0c:7c:0e:37:97:
7c:3e:0c:ba:cb:53:e5:2a:d2:8c:a7:a2:dd:e2:be:4a:dd:13:
e0:69:0f:a6:19:b6:08:08:42:2e:5d:e9:d1:49:2f:e1:30:8f:
75:58:63:ae:99:7a:8c:fe:ed:bc:d2:ed:e5:10:b9:a2:b9:d2:
50:00:e1:a9:98:ab:75:e8:cc:cd:00:5d:7f:49:0c:ee:ba:f3:
d8:8f:c6:35:5c:95:d4:10:4d:26:2e:b1:ab:27:c5:1d:94:b8:
d4:15:9c:ee:55:d3:f4:7a:ed:09:b7:4d:2b:75:4e:1e:e3:ef:
f9:40:7c:d9:14:5a:e9:ee:38:99:94:2c:be:3e:08:db:eb:9b:
db:9f:ae:b8:f6:eb:b5:90:59:ed:d3:e2:3a:41:26:c3:e3:df:
d4:19:2f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:23 2025 by rpki-client