Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
File: VYR5uCKzUywZue4BAvmaiYUN8SQ.mft (raw, json)
Hash identifier: 4ZOOokiLgx7XOd7gXbUzVlPhp+xM2DYJW7SembdbOUM=
Subject key identifier: 9E:F3:DD:B9:65:8B:BA:23:D0:BB:96:A2:36:11:85:C8:E0:6A:48:1A
Authority key identifier: 55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24
Certificate issuer: /CN=558479b822b3532c19b9ee0102f99a89850df124
Certificate serial: 0199FFC78AECB1F787E3A34499DB5F285F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
Manifest number: 0367
Signing time: Mon 20 Oct 2025 04:01:31 +0000
Manifest this update: Mon 20 Oct 2025 04:01:31 +0000
Manifest next update: Tue 21 Oct 2025 04:01:31 +0000
Files and hashes: 1: VYR5uCKzUywZue4BAvmaiYUN8SQ.crl (hash: IRHGF0vchgfkRJISi4JOchnSJEfVASk+vgjFW2topOk=)
2: bjC_4YQHMbcokGPzsa1ChnLtyF8.roa (hash: QpyUIEtNVpERFh+Sv3RoMUpu/u6eaTM9vusxbG8G8kQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:8a:ec:b1:f7:87:e3:a3:44:99:db:5f:28:5f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=558479b822b3532c19b9ee0102f99a89850df124
Validity
Not Before: Oct 20 04:01:31 2025 GMT
Not After : Oct 21 04:01:31 2025 GMT
Subject: CN=9ef3ddb9658bba23d0bb96a2361185c8e06a481a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:c6:f5:d1:ae:a0:21:c0:5b:95:56:9a:a8:
fd:a3:be:a9:e3:f0:a7:6e:f6:4c:bf:ea:38:dd:a1:
45:e3:df:07:4d:7f:83:6d:d7:3d:97:94:d9:23:3f:
54:95:2b:4b:52:fd:2f:53:bb:1d:18:61:0f:09:f9:
2e:bc:30:e9:02:5e:1f:5a:ee:45:c7:2c:c3:36:b0:
e1:4a:e3:48:e2:a3:fb:ed:31:1d:25:ea:fa:c7:db:
b9:6f:60:fb:62:c0:e2:e7:bf:4b:37:46:6c:6d:6d:
0b:fa:96:46:a3:ae:de:4f:86:c0:ae:9d:83:f3:9f:
5a:1d:0b:ce:f3:35:ff:0f:3f:ea:77:bc:af:4d:73:
85:77:49:0c:1e:61:51:a7:b3:da:c6:42:84:e9:46:
be:79:54:93:bf:ab:1e:6a:7c:57:3e:5f:fa:fd:ad:
53:33:45:bf:29:9a:2e:50:b5:1b:03:ad:56:54:41:
26:e7:0b:75:60:27:c1:27:1e:11:9e:6d:51:5c:ba:
66:0d:72:97:50:d4:25:00:c5:09:d1:84:d9:5b:e4:
2b:29:f9:7c:51:18:44:c9:e9:92:98:35:47:0e:e2:
0b:48:bf:56:5a:71:b8:45:ee:e6:92:81:78:fe:ce:
a5:9a:f9:dd:1f:55:cc:74:4e:b9:49:08:24:19:1f:
80:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F3:DD:B9:65:8B:BA:23:D0:BB:96:A2:36:11:85:C8:E0:6A:48:1A
X509v3 Authority Key Identifier:
keyid:55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b1:6e:21:38:b2:e2:1d:0f:34:2f:8d:1c:e0:6c:50:46:51:
09:e4:88:4d:a0:24:11:9c:1e:05:c0:61:2d:f5:56:11:57:b4:
4d:96:0a:eb:80:a2:6b:41:4e:74:0f:03:ba:26:7e:36:49:60:
f5:ae:ca:01:8b:d7:b1:3c:14:2f:7e:fc:62:71:b9:ce:a5:2f:
37:d5:3e:3f:30:b5:83:cb:e8:9d:c4:db:42:1a:fb:9e:5c:ac:
4f:ac:75:d5:86:66:18:d3:eb:16:0d:74:9b:01:52:1f:30:71:
19:69:f2:ab:b9:39:f8:74:d4:8c:4d:51:0b:be:3d:2b:5e:28:
8c:ed:0f:b1:be:83:7f:86:a5:26:05:2e:fb:ab:54:23:10:ff:
58:ad:38:8c:b2:2a:bb:9d:da:c9:1b:cd:89:ca:9b:3e:29:b6:
e9:eb:f1:cf:dd:32:07:9e:b3:c8:c3:34:d1:bb:0f:62:a3:66:
f5:d1:94:ae:44:b6:03:f1:b1:80:2a:03:f3:67:ce:43:57:15:
53:6c:28:5f:23:f9:3b:e2:d4:a8:98:29:9b:cf:ef:48:bc:bf:
92:b4:01:76:ff:ff:2f:e7:d5:93:52:d9:cf:a6:d3:e4:6c:96:
73:21:46:89:5c:d2:1b:8e:87:0e:fa:52:d1:25:b9:5e:d3:e1:
9e:8e:29:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:05:35 2025 by rpki-client