Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
File: vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft (raw, json)
Hash identifier: Dy0cCy5QQKez7T4WCrSKwYFaIsjqy1t34JV7fDym8QE=
Subject key identifier: 92:50:58:E2:31:70:43:32:39:5B:A7:AF:58:17:C8:E0:C9:A7:AF:2D
Authority key identifier: BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1
Certificate issuer: /CN=bc3a4697447d190308644a58bceaa124c074b7e1
Certificate serial: 019A71137CD6BC5C57DE0D2FE4F3AD57236C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 04:01:33 +0000
Manifest this update: Tue 11 Nov 2025 04:01:33 +0000
Manifest next update: Wed 12 Nov 2025 04:01:33 +0000
Files and hashes: 1: qTBKuXrMd7XLtQiqUfmYTbV0cXw.roa (hash: AGYgB26zdYDExNCMKB1Sk+TLZC3itvMITHqWkeGpeU4=)
2: vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl (hash: Z8aT9XYoJs90OSlgLrdV2FtpApug3VOm6PqKgiXnI1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:7c:d6:bc:5c:57:de:0d:2f:e4:f3:ad:57:23:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc3a4697447d190308644a58bceaa124c074b7e1
Validity
Not Before: Nov 11 04:01:33 2025 GMT
Not After : Nov 12 04:01:33 2025 GMT
Subject: CN=925058e231704332395ba7af5817c8e0c9a7af2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:88:de:f6:c7:c0:97:9c:df:54:da:87:16:04:
a6:8e:6f:66:82:fc:aa:b8:e0:07:fb:7c:96:db:56:
1c:72:ac:da:a2:74:4a:18:b2:b6:83:6c:27:1c:52:
ad:b4:f2:57:bf:c6:3f:57:b1:c6:e9:dc:12:6b:8f:
19:21:99:be:d2:7c:7b:e6:ab:de:95:da:1e:57:81:
3a:0e:87:ca:eb:8f:b4:1d:65:1b:74:20:66:c8:cf:
97:8b:f0:e1:e0:2e:9c:4f:b5:57:86:9b:96:d8:53:
53:9b:b3:52:6d:5e:0a:89:7f:d9:25:ca:fd:9f:59:
f8:68:5d:9d:91:43:8e:4d:b3:a9:1a:f9:e9:09:d2:
4f:a1:60:3f:4c:32:1f:4b:7a:ca:2c:97:00:72:c8:
27:a2:80:61:4b:d9:16:73:36:29:ac:00:66:f8:76:
97:2a:61:c5:98:c4:82:82:30:ff:d0:20:6a:6e:3d:
be:dc:9e:4d:df:18:a8:c0:e8:c6:27:10:88:c0:a6:
08:62:84:1c:0a:4e:17:9d:74:0c:4c:2a:2b:0a:27:
e9:fa:13:0e:5a:f1:7a:27:37:a9:1b:d0:2a:db:64:
b1:3b:f7:cf:d6:f0:26:bd:a9:9a:e4:48:e8:be:4d:
01:54:e8:43:0a:97:bc:4e:f7:a3:0f:7a:9c:37:4f:
06:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:50:58:E2:31:70:43:32:39:5B:A7:AF:58:17:C8:E0:C9:A7:AF:2D
X509v3 Authority Key Identifier:
keyid:BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:db:bb:a6:73:93:0b:3e:83:7d:5a:8e:45:28:e4:8c:9b:33:
89:8c:03:f9:f4:21:83:54:25:1a:f0:92:f0:69:b3:d4:01:cd:
c4:6f:b8:b7:f2:5a:01:c5:65:e2:29:33:50:d3:90:74:97:85:
27:93:5c:78:0e:b9:29:0c:45:97:55:7f:2d:96:2a:4f:26:c4:
3b:16:06:59:49:37:d3:00:70:26:60:d1:ab:75:30:67:3d:98:
44:8b:25:ba:c9:32:07:28:0b:e6:55:14:15:4b:98:e0:3d:4a:
13:d8:f4:e1:d2:85:31:62:1b:5d:16:b5:04:c5:1a:e0:5d:b0:
06:4a:bf:ee:16:f0:d9:6e:fe:a3:bc:8b:ef:57:1d:2d:e7:ad:
e1:d3:96:e4:72:42:c1:eb:f5:83:7a:92:89:18:2b:15:87:ee:
66:5c:94:c6:0a:fc:46:58:d3:d4:91:63:31:60:a9:2c:39:4f:
d5:c1:a2:03:d4:14:2e:d4:b7:e4:ac:e4:31:67:62:43:a4:a9:
6b:0b:55:b5:83:a1:d0:cd:75:04:4f:f9:66:ee:54:55:7f:75:
c5:8d:f5:67:81:87:c2:72:20:19:85:48:74:4a:25:18:7c:60:
34:c2:b2:54:14:30:97:bd:53:f6:63:85:1d:2e:f1:a1:d1:00:
55:e7:14:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:18:26 2025 by rpki-client