Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
File: vp_DiEcFxK7c_npNF923UuH-YZg.mft (raw, json)
Hash identifier: pkj3JjH9JOK/hJ8t958pzTvrRgEEkhyBvdyMEQdO+Jc=
Subject key identifier: C9:00:58:A8:2B:A8:37:6C:AC:5D:91:93:A3:54:3B:95:D3:CE:29:1E
Authority key identifier: BE:9F:C3:88:47:05:C4:AE:DC:FE:7A:4D:17:DD:B7:52:E1:FE:61:98
Certificate issuer: /CN=be9fc3884705c4aedcfe7a4d17ddb752e1fe6198
Certificate serial: 019A72939124AC460317AAB45FF4747C2C04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
Manifest number: 109F
Signing time: Tue 11 Nov 2025 11:01:04 +0000
Manifest this update: Tue 11 Nov 2025 11:01:04 +0000
Manifest next update: Wed 12 Nov 2025 11:01:04 +0000
Files and hashes: 1: OxQ5KD2enOW3Q6SG5w9YoHDtQi4.roa (hash: 7v/MM1L+QU9CF1kjU9dOBbxcjiq8aqzftr7NOP1GZsU=)
2: vp_DiEcFxK7c_npNF923UuH-YZg.crl (hash: Ly98lmWJ+Sk37E6OuonrbpF3GckoFHrOhyWTOmejJEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:91:24:ac:46:03:17:aa:b4:5f:f4:74:7c:2c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9fc3884705c4aedcfe7a4d17ddb752e1fe6198
Validity
Not Before: Nov 11 11:01:04 2025 GMT
Not After : Nov 12 11:01:04 2025 GMT
Subject: CN=c90058a82ba8376cac5d9193a3543b95d3ce291e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:47:30:d9:57:dd:d3:c3:e2:0d:44:b3:a3:5b:
17:8e:b6:9c:fe:93:ef:cf:8c:5f:19:7b:b5:75:39:
89:df:29:40:c0:be:3e:d0:b0:03:59:a4:e5:7f:3a:
bb:14:ca:cf:7f:fc:5d:d5:3c:08:f2:db:12:b3:c7:
cd:4d:4c:75:dd:50:62:b6:2f:e1:9a:d7:a9:06:41:
4a:9c:68:50:fb:04:13:96:2c:5b:3b:27:53:72:5c:
d1:57:07:60:cc:d8:0e:6e:2e:65:fc:b3:75:4b:ba:
37:1a:e1:da:ca:c4:ce:7f:d3:23:e1:b5:84:9f:d9:
4d:ad:c7:20:52:3a:d9:f2:51:e2:b6:f9:fe:a8:1b:
c2:1e:33:2f:e7:3c:89:68:67:db:56:6e:9f:36:64:
3c:0a:d7:8f:cb:85:8a:5b:0a:ba:20:e9:3a:69:b5:
24:c5:db:ba:30:60:da:79:ea:d2:04:89:e0:d3:76:
f8:95:e1:8f:40:bf:1c:25:9c:a0:ad:18:f2:31:b1:
b1:03:e9:ca:3f:fb:47:22:99:44:10:07:a9:26:95:
58:b7:32:b4:09:79:d1:7e:84:64:ea:93:ca:1e:ee:
1a:18:1f:70:06:38:c1:6e:d7:17:79:aa:01:39:37:
ae:38:97:73:f5:f9:cb:ee:bb:57:80:33:8a:a8:e8:
d9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:00:58:A8:2B:A8:37:6C:AC:5D:91:93:A3:54:3B:95:D3:CE:29:1E
X509v3 Authority Key Identifier:
keyid:BE:9F:C3:88:47:05:C4:AE:DC:FE:7A:4D:17:DD:B7:52:E1:FE:61:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:13:9c:27:45:ff:c2:9e:01:13:af:ec:58:4b:81:90:69:c9:
e6:63:55:da:44:c4:c9:35:ec:09:b8:38:04:61:66:7d:a2:d3:
8e:9b:26:01:f7:19:50:86:db:28:9a:df:81:38:19:16:5e:81:
40:68:91:65:ad:b8:e6:52:b7:41:e4:5c:23:75:47:34:74:a1:
77:20:52:91:77:95:81:25:0c:b8:9c:90:3a:e7:23:8e:f4:a9:
be:0f:31:2d:cc:30:99:1f:9a:af:ad:5f:d2:8b:29:4b:5b:ab:
98:9a:ad:e1:80:a7:29:fe:0b:4d:20:26:7c:f1:8c:e7:3c:c2:
d5:16:62:b6:36:3a:cd:55:bc:a4:a8:0e:55:ee:25:68:ad:bd:
a2:de:b5:b9:bd:2f:c9:a5:25:58:25:d6:f4:ee:ab:51:08:3b:
51:15:eb:6d:b2:75:fb:fc:19:2b:8f:63:0c:3a:87:bf:9b:59:
df:35:72:00:78:9c:49:a5:9b:86:be:44:d6:2b:53:b4:3a:c5:
4b:06:0b:6e:a6:30:8c:9d:69:81:99:61:d3:ee:44:88:6c:ff:
87:7c:89:44:eb:99:68:45:57:6b:ac:62:29:b6:58:0f:6a:a1:
3e:e4:ac:77:29:63:fb:24:e6:7d:24:2f:1b:c9:80:03:97:4d:
ab:32:07:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:23 2025 by rpki-client