Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
File: VayAK4V_5CVyI6jlUIWlCzt3DsY.mft (raw, json)
Hash identifier: DFdNXMhqWqD6mWtdKYpdvxdLS50wNxtzjSwQUPOuxPs=
Subject key identifier: 0A:AF:0E:3F:C1:8D:E2:41:71:6D:9F:8A:2D:97:08:23:D9:3F:88:1A
Authority key identifier: 55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
Certificate issuer: /CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Certificate serial: 0199FBEABEEAEE1AED542C07FF61641A10A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:01:29 +0000
Manifest this update: Sun 19 Oct 2025 10:01:29 +0000
Manifest next update: Mon 20 Oct 2025 10:01:29 +0000
Files and hashes: 1: 1INwuWU-BYXL6ew4aT-a1pXEbrQ.roa (hash: qzk46/IpEpqqazhTfDJLjV42Dwol04vFzCxQ5m0qkLc=)
2: VayAK4V_5CVyI6jlUIWlCzt3DsY.crl (hash: KDB4ttkqGl6yn5s/vZpw4n2OuvtdJ1sbLLYQn/ycpkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:be:ea:ee:1a:ed:54:2c:07:ff:61:64:1a:10:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Validity
Not Before: Oct 19 10:01:29 2025 GMT
Not After : Oct 20 10:01:29 2025 GMT
Subject: CN=0aaf0e3fc18de241716d9f8a2d970823d93f881a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:cf:e5:c6:d2:ce:1a:a2:dc:0c:c1:e9:34:
9c:b8:35:1e:bf:2c:0b:2c:21:91:6b:c7:2f:26:57:
0c:9a:0c:87:eb:2b:f6:59:e7:5d:0e:49:7e:24:7d:
50:8f:4c:8d:4b:d1:2c:aa:d5:c4:ec:85:68:77:8b:
ed:cb:09:9b:2f:5f:bb:d9:8d:cd:c0:b2:2f:f3:48:
46:5c:66:02:12:f7:20:4d:ee:b4:53:bf:f7:b9:1d:
d1:12:27:92:41:98:38:a4:38:b1:e6:59:4d:10:18:
a8:26:39:52:c6:0f:3b:d8:8d:b9:c5:c5:24:bf:37:
46:14:ef:63:38:a2:3b:b4:02:df:57:f8:f5:ae:18:
f4:0c:30:47:08:66:7a:71:3f:39:88:c9:07:51:0c:
b0:69:9d:bf:b5:ee:d4:1e:68:1a:62:55:14:3f:05:
c1:6c:e6:60:bc:52:86:8a:80:c9:86:02:a8:ea:16:
1d:aa:e7:8f:fa:d2:eb:ef:e4:8f:60:ac:24:50:a9:
94:30:d2:5f:9b:55:4f:9d:e5:2f:b0:0a:bb:7c:35:
e8:21:23:e7:7b:6e:ca:60:85:87:d3:32:9a:a0:04:
00:8a:3a:9f:f0:50:9c:a3:0e:ff:16:7f:e4:d4:99:
c6:2c:3f:9c:e2:d8:20:1d:bd:a6:cc:ea:4e:5e:86:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AF:0E:3F:C1:8D:E2:41:71:6D:9F:8A:2D:97:08:23:D9:3F:88:1A
X509v3 Authority Key Identifier:
keyid:55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1c:b2:b8:ee:18:61:73:e1:5a:8c:ed:e4:d8:a1:f5:62:13:
1d:6e:a0:c3:b8:f4:56:db:8d:14:4f:77:a0:82:e1:fb:13:71:
62:81:9e:a7:b0:6f:6c:88:e0:1b:6f:2f:ec:be:6f:cf:65:0f:
fc:27:62:2d:71:f0:6e:0b:c8:86:8d:29:43:bd:a1:eb:b8:f5:
33:1f:f4:00:72:2f:bb:91:74:aa:85:08:f5:31:0a:8b:3e:79:
08:0f:90:70:b0:14:f8:fa:5c:da:d6:64:b7:a9:db:76:6e:8a:
08:1b:3d:44:fc:39:5c:10:45:c5:c8:2c:50:a4:3b:0d:e7:d9:
92:06:a1:52:87:5b:77:44:81:b9:6f:c4:cf:b8:01:81:9a:df:
b3:3a:38:0a:64:ec:d0:4b:8b:79:c9:4c:08:6c:3f:16:e0:54:
fc:e8:3e:26:b0:08:c9:66:8c:fe:14:63:c2:99:fa:92:b6:99:
f8:c6:10:05:ae:09:de:38:8b:40:99:f2:55:b4:1f:b7:c3:9c:
b0:0b:50:c7:df:87:3a:03:75:e7:3d:10:1a:22:f5:94:fc:9e:
b7:a9:a3:ea:fc:2a:3a:b8:36:80:1b:d4:1b:29:7b:f9:8d:a8:
68:e5:7d:00:6d:cb:42:43:e8:23:01:64:83:02:0f:88:1d:33:
67:0c:49:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:52:06 2025 by rpki-client