Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
File: vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft (raw, json)
Hash identifier: 3++TFsujq29hvq2J83+9KK/q8P/HwkpldSHo62fzBuU=
Subject key identifier: 7E:F2:82:97:DE:16:0C:D4:A2:9B:35:21:DF:98:BB:C2:61:9B:83:5F
Authority key identifier: BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
Certificate issuer: /CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Certificate serial: 019A7149CF5E594DB8ABA00748A9DFAD715F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
Manifest number: 06A3
Signing time: Tue 11 Nov 2025 05:00:53 +0000
Manifest this update: Tue 11 Nov 2025 05:00:53 +0000
Manifest next update: Wed 12 Nov 2025 05:00:53 +0000
Files and hashes: 1: IZaawvEL9ufXxBhEx6Rm4LQFHJA.roa (hash: 5TsF6Yr1jfWHgHOHw8f1MLF7osh99wdmNuoVyInqJgM=)
2: vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl (hash: 1L0qMZNTG/dOHDzzb7vANnUC8EQ/Apc8akTEgOkpXM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:cf:5e:59:4d:b8:ab:a0:07:48:a9:df:ad:71:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Validity
Not Before: Nov 11 05:00:53 2025 GMT
Not After : Nov 12 05:00:53 2025 GMT
Subject: CN=7ef28297de160cd4a29b3521df98bbc2619b835f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:99:e6:fe:d6:8c:c3:1d:73:ad:6e:77:1b:aa:
0d:36:07:14:41:5d:12:f2:6f:df:60:28:ad:5a:02:
b2:9c:23:0d:2a:ae:99:0e:41:f6:36:70:b3:22:f9:
06:1f:cf:87:fc:14:69:0b:13:14:5f:77:52:ee:83:
83:14:23:7a:c2:03:18:11:99:8f:3a:92:50:83:61:
62:a4:eb:28:aa:aa:5a:a7:9e:b3:b2:ec:5e:03:53:
ba:b6:3d:9c:66:00:98:e5:53:0f:d9:69:c0:eb:cc:
da:c9:6e:99:91:5b:5d:e9:d8:ad:fb:68:36:f0:fb:
1e:dd:e6:b5:63:6b:51:e1:6f:79:a8:30:8a:6c:b4:
0d:1e:91:3e:f8:2b:8e:33:99:6b:0d:0e:b1:0e:87:
56:09:fc:63:48:3f:24:26:1c:19:9f:e1:f5:01:46:
0b:d6:03:da:32:df:7f:53:29:0c:4d:76:77:58:5c:
5d:8f:ab:7a:de:0a:91:63:f4:50:b8:f2:ac:10:73:
d1:3e:7a:e9:fb:fe:2f:6b:ca:3f:9d:eb:be:77:97:
e5:ae:7a:05:70:bc:e8:92:ab:0d:5f:a7:88:0d:e6:
26:0d:4a:f4:7e:f7:94:d7:f6:66:4f:0d:39:32:dd:
f0:2f:f4:e4:2b:58:bb:b2:53:ca:7b:1f:34:2d:0d:
d3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F2:82:97:DE:16:0C:D4:A2:9B:35:21:DF:98:BB:C2:61:9B:83:5F
X509v3 Authority Key Identifier:
keyid:BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6a:74:75:a2:31:e3:a7:db:72:05:75:74:9f:05:a6:2d:64:
64:8d:3d:2f:2a:20:25:62:ad:65:71:91:92:18:3d:92:5d:26:
75:71:65:a4:d0:cb:3b:74:b5:df:fa:89:31:f7:69:7c:dc:19:
55:b7:3b:81:e0:60:2b:51:43:b4:c6:57:64:2d:93:8b:d0:55:
a3:b9:1a:7f:25:96:c2:41:97:5e:91:05:8b:e8:15:e1:71:a9:
ea:b5:cc:7e:e0:21:0a:74:85:53:d5:50:e9:8b:62:1c:4a:4a:
01:ee:b9:30:ff:dd:97:70:b2:0e:1d:56:c9:d9:70:d9:c1:16:
89:6a:06:3a:97:9c:ba:25:34:8f:f9:6e:bb:69:cc:06:48:6e:
f8:c8:73:24:26:e9:c5:61:cc:b4:69:8d:0d:71:d1:91:41:c7:
0f:5d:b4:30:f2:49:03:c5:0f:a5:42:52:58:79:87:29:8d:0a:
5c:bf:ad:3d:b0:0f:d8:f0:7c:9f:64:de:2d:7d:68:26:72:9b:
3c:ae:6b:12:6a:97:a5:cb:df:b1:a0:a8:bf:8a:b6:36:da:70:
2d:a1:ef:20:eb:6a:bd:41:a3:a3:dd:29:29:99:a4:21:07:46:
1a:d9:b8:3c:56:9c:98:8e:32:98:e0:6c:56:48:36:64:68:39:
0e:00:5e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:19 2025 by rpki-client