Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
File: vygFmS5lMdPaMe4a9rzVwG0Ctso.mft (raw, json)
Hash identifier: 9z5Kx2uYqNO+0dS/EldURwGA7dCK8JRzLSVvr3QWAs8=
Subject key identifier: BE:71:09:0A:28:C9:B9:BB:E2:15:78:0C:19:53:14:50:F6:47:1E:99
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial: 019A70DC486C39C9876735A2629D443EDB92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 03:01:15 +0000
Manifest this update: Tue 11 Nov 2025 03:01:15 +0000
Manifest next update: Wed 12 Nov 2025 03:01:15 +0000
Files and hashes: 1: ZA2eo4PhOO6YarPBjFuZYerlXM8.roa (hash: OaUR9ntwZSMTqF4rae/f45ntDF7DCdGD74N9a3x5n8s=)
2: iU6o8UX2fMqdnVT4GPBZLMHQUVk.roa (hash: L7qS2Pktcg+3MFOhFw0UCguQbXdIgIfJZ4PXXKIQFAI=)
3: vygFmS5lMdPaMe4a9rzVwG0Ctso.crl (hash: RTfJ3cELRen4EV/DLkFnm4Nsnwh9M2jqlHEt3UPUZpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:48:6c:39:c9:87:67:35:a2:62:9d:44:3e:db:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Validity
Not Before: Nov 11 03:01:15 2025 GMT
Not After : Nov 12 03:01:15 2025 GMT
Subject: CN=be71090a28c9b9bbe215780c19531450f6471e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:7c:27:a8:54:26:4a:01:39:af:cb:d3:84:
4c:3c:37:89:a4:48:dd:97:e1:cf:06:73:e6:c8:d5:
cc:49:80:2b:a9:65:78:5f:31:81:a3:d9:45:d1:68:
fe:32:ec:cd:b3:8e:d9:6d:72:ce:c9:1f:c5:3c:f6:
44:6b:65:42:3f:36:1a:b9:fe:c5:ef:6d:c8:91:dc:
2a:21:30:f5:09:26:64:9d:d8:59:5b:48:00:81:7c:
af:10:c9:7c:bd:74:60:4a:31:25:29:86:69:b5:c0:
ab:0e:fd:5b:b2:38:ce:ee:40:83:aa:7f:df:07:44:
34:32:54:24:65:fd:c3:b5:98:4a:90:d6:73:b2:28:
6c:97:fe:e0:7c:89:29:e5:78:39:bf:ad:dd:66:b1:
c7:cc:e5:f5:28:9c:4b:0b:d2:cf:66:0e:bd:42:07:
d6:67:37:14:4b:8b:df:71:43:09:2b:83:10:88:84:
0c:72:a3:ae:fb:6f:9c:88:a9:b2:28:a0:3b:a2:89:
d6:2d:5a:f8:84:e8:b4:15:3b:f7:50:6d:5d:0f:a2:
fb:e2:e3:e1:22:14:b1:8f:15:98:2b:fc:f8:76:1c:
9b:c3:90:a6:9b:12:32:d9:e4:39:bb:97:ec:f7:eb:
2f:43:33:0e:c9:e6:9f:eb:68:1e:45:89:5c:2b:c6:
5f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:71:09:0A:28:C9:B9:BB:E2:15:78:0C:19:53:14:50:F6:47:1E:99
X509v3 Authority Key Identifier:
keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5c:fe:ac:95:69:72:12:de:51:bd:a9:69:4a:dd:d1:8c:db:
22:a2:f6:de:f5:2b:7d:5e:d8:b6:9f:bb:2b:69:03:0d:ac:88:
04:56:a6:ef:d1:d6:6c:f2:0e:8e:19:29:83:3a:4a:be:e0:76:
4e:32:8f:0b:3b:7d:f8:89:d1:c0:0b:28:28:c5:ef:b9:5c:29:
80:38:f7:af:fe:70:af:53:12:b1:51:38:55:f0:ea:c8:76:d2:
73:4b:85:61:b8:0d:e6:be:28:e6:fa:5f:ce:b1:18:04:71:0a:
25:33:08:1d:50:db:a4:86:cd:38:56:70:03:94:9a:ca:8a:e7:
8e:ab:e7:fd:c2:10:66:90:9b:e0:6d:2a:ea:ba:07:40:d0:de:
59:6c:e5:b3:94:ea:9a:71:31:c5:54:a1:f0:ed:ec:da:88:71:
c2:06:4a:02:13:0d:03:85:f1:bc:bd:20:2b:a5:43:32:65:a0:
d4:d3:76:02:70:dc:9d:17:93:3e:d6:62:ea:0c:d6:97:02:e8:
d0:46:a4:2b:f3:69:0b:b8:71:7e:cf:71:92:d3:00:15:75:ef:
6c:92:b0:fc:7e:c3:ca:07:61:1b:f1:fe:3a:e9:a1:80:bb:28:
34:d8:43:3d:ef:5d:87:38:fd:fc:18:62:e4:90:77:dc:ac:1d:
ee:5a:d8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:57 2025 by rpki-client