Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft
File: vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft (raw, json)
Hash identifier: PE3JS2UHL28CYudTD/ZP+8PWCRte5Y/99Kpxd0GzAEU=
Subject key identifier: 0D:70:4D:B0:04:A7:0C:F5:16:04:9A:AC:C9:7E:F6:9A:B8:18:B1:81
Authority key identifier: BD:35:06:06:91:43:33:F7:BF:C2:C0:D1:F8:D3:C3:E4:B7:2A:30:2D
Certificate issuer: /CN=bd350606914333f7bfc2c0d1f8d3c3e4b72a302d
Certificate serial: 019A70A4DA41CB0D7BBAC484E4258F1D90F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft
Manifest number: 0676
Signing time: Tue 11 Nov 2025 02:00:43 +0000
Manifest this update: Tue 11 Nov 2025 02:00:43 +0000
Manifest next update: Wed 12 Nov 2025 02:00:43 +0000
Files and hashes: 1: 0mezxsUX4q6nwfHNel9WWB_Brao.roa (hash: cM9upUcEP9+yZQjw/tmDzQZgWLtHsK18dVAiOO9hG6U=)
2: vTUGBpFDM_e_wsDR-NPD5LcqMC0.crl (hash: dB4+Uhe4wau2biweAm5UsqksEa1VM/jIMvdivF9nZow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:da:41:cb:0d:7b:ba:c4:84:e4:25:8f:1d:90:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd350606914333f7bfc2c0d1f8d3c3e4b72a302d
Validity
Not Before: Nov 11 02:00:43 2025 GMT
Not After : Nov 12 02:00:43 2025 GMT
Subject: CN=0d704db004a70cf516049aacc97ef69ab818b181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b2:35:76:da:90:77:0d:fe:71:33:26:9b:24:
4b:19:dd:3a:f5:dd:54:51:34:92:66:92:52:5d:61:
bf:6d:68:4c:18:8d:22:fd:d1:66:55:14:00:9f:07:
1a:df:39:e3:8b:8a:3d:62:53:bf:95:cc:63:39:27:
2e:86:39:d3:eb:97:28:7b:58:81:a1:b3:03:09:1d:
92:a6:b6:bd:b0:0c:be:6a:74:97:53:6f:80:90:a2:
46:5f:df:03:ab:21:96:89:f2:bb:e1:dc:b7:fa:67:
00:d0:f5:d4:31:e3:3b:c5:d7:f4:f7:6a:7a:29:ff:
48:28:75:96:71:c7:14:31:8d:da:47:8c:18:20:fb:
68:7d:30:fe:63:c5:85:84:9a:bf:2e:eb:db:31:4f:
36:7d:25:57:e0:12:9a:3b:68:87:58:ad:9a:76:a9:
ed:d7:08:84:07:7e:27:f7:ae:d8:bf:07:a0:4e:ca:
da:be:fa:48:87:e2:ab:b4:cd:29:3a:c2:05:c5:85:
4d:7f:b1:8d:c4:cf:71:a6:05:f9:27:fd:2a:23:2f:
b2:9b:27:69:cf:0f:d7:03:e1:0a:0a:a2:1e:eb:15:
ef:c8:1d:9e:6f:4f:6e:01:26:20:8f:d1:a8:69:e5:
a9:f1:c5:aa:57:f5:90:55:51:5c:e5:5a:d4:11:2f:
71:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:70:4D:B0:04:A7:0C:F5:16:04:9A:AC:C9:7E:F6:9A:B8:18:B1:81
X509v3 Authority Key Identifier:
keyid:BD:35:06:06:91:43:33:F7:BF:C2:C0:D1:F8:D3:C3:E4:B7:2A:30:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:95:fb:99:a6:34:b6:3a:a9:8d:c6:4f:de:cb:19:9b:ab:b3:
ad:9d:23:a9:5a:69:34:5e:d7:16:10:46:67:ea:aa:fb:11:34:
25:1c:e4:10:a2:48:02:65:57:cc:20:4d:74:c6:e0:74:2c:3a:
4d:72:da:66:0d:27:3f:b0:01:7d:8d:2d:b9:68:27:ce:b2:26:
a4:ad:3d:8f:6d:a3:02:d0:a0:db:39:1d:0b:ef:ab:cf:d0:56:
d3:35:16:b5:1e:8e:5e:6a:50:70:7c:42:a3:89:76:1d:ac:e4:
2a:7f:d3:db:ba:24:c4:7b:08:cf:cf:3b:98:ed:a8:91:03:b2:
40:d1:14:6e:bd:69:74:fe:0b:52:54:53:94:f6:b4:5e:0d:54:
d3:d3:e4:c4:25:08:20:e6:19:14:c2:f2:90:81:87:99:c9:a1:
01:e1:23:66:6c:53:e8:c6:31:b0:0f:97:15:0b:25:09:57:52:
1b:a7:24:74:c9:69:cc:ed:08:d9:9c:a9:a1:20:74:4b:bf:14:
13:ed:1a:4d:e1:54:58:43:34:4d:af:6d:43:b5:fb:26:57:ec:
a7:2c:07:ea:e2:64:4f:35:11:24:f3:df:60:14:54:85:a0:6b:
41:2a:07:7c:0f:c6:21:7b:5f:42:b0:a3:b5:74:35:9f:9b:91:
49:bb:aa:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:02 2025 by rpki-client