Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
File: vyOcd5D8PVd2JtW78YYeWcm0cK4.mft (raw, json)
Hash identifier: dRO1PbHdPOTNtT1gvY6sTSNo7aVbTh3ku9jjJJPAGec=
Subject key identifier: DA:0A:17:B2:0C:E1:29:74:BD:09:F6:CB:9E:F0:F3:95:62:D9:91:56
Authority key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
Certificate issuer: /CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Certificate serial: 019A72261C7651555B8FC4F44DBF7818A58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 09:01:31 +0000
Manifest this update: Tue 11 Nov 2025 09:01:31 +0000
Manifest next update: Wed 12 Nov 2025 09:01:31 +0000
Files and hashes: 1: KK3OWrlDvPBfmeCu6TWdw9E-UrA.roa (hash: Vy2fUsoJqiMmmehJ7Z8Mi7gsujBEWk6ek6y2ti8B4Vk=)
2: QV_6DUkAdERVfw0yzUcHGV_bqz8.roa (hash: c8b8x2TUbfNy9W2/B6dT+X68ZyaWk4xbwJtuGfbhOdc=)
3: amIQzNAiyqoos0YzXrrP-GPr_tc.roa (hash: sz+icHojpt6wyrlEFl0wQlbst+eL4nFHTN1MBJR94Eg=)
4: vyOcd5D8PVd2JtW78YYeWcm0cK4.crl (hash: /Y/yAvRDrGxIe5Ee0hXRsrTETtx9lFvsYy0GssCNlzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:1c:76:51:55:5b:8f:c4:f4:4d:bf:78:18:a5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Validity
Not Before: Nov 11 09:01:31 2025 GMT
Not After : Nov 12 09:01:31 2025 GMT
Subject: CN=da0a17b20ce12974bd09f6cb9ef0f39562d99156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7b:ef:20:f8:db:29:41:0d:c5:7f:fb:92:25:
9b:77:fb:e3:55:b3:00:c6:8f:8f:58:b4:5b:89:b3:
21:43:e5:76:e0:4f:33:19:e2:15:63:fa:6f:6e:5c:
ec:30:cc:34:fd:4a:1b:1e:e9:a0:6a:2f:b3:bb:18:
d1:c0:65:0f:3f:f8:4a:24:d8:f0:34:02:16:92:f1:
36:e9:87:44:31:1a:5c:03:f2:bf:28:76:30:e1:c3:
dc:99:fe:be:03:7a:a4:63:c6:db:d2:88:ec:51:fd:
a7:e1:d5:27:39:95:eb:55:cc:06:65:dc:11:36:47:
a2:5a:42:b7:3c:76:84:54:ee:f0:6b:02:d4:96:55:
d9:00:ba:62:34:57:fe:82:39:a8:54:53:a1:60:ca:
58:40:f9:eb:88:c5:3d:b3:36:53:a3:3c:81:d0:9d:
3f:f2:74:22:02:fb:a1:84:c4:90:c8:72:04:5a:65:
b6:8b:24:ed:3d:0a:dd:bb:d3:25:be:cc:61:94:be:
6e:80:a4:7f:14:8e:ea:08:94:af:1f:ee:57:87:ef:
78:af:89:bd:c7:19:a2:27:6a:4e:a6:a2:59:24:e9:
fc:0e:26:e2:78:7d:ec:76:9a:c3:3e:db:e7:af:9c:
e0:26:f2:fb:a4:c7:95:2a:57:e3:08:5f:78:be:41:
18:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0A:17:B2:0C:E1:29:74:BD:09:F6:CB:9E:F0:F3:95:62:D9:91:56
X509v3 Authority Key Identifier:
keyid:BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d7:14:26:aa:cc:ff:83:10:28:ee:d6:c1:d3:df:be:d3:f5:
ce:0f:74:9b:b3:53:97:b6:3c:fd:3d:31:d6:5c:23:2a:da:31:
95:0d:e7:93:c6:16:5a:6b:95:0c:fe:7b:9f:c6:73:76:17:5f:
fa:4c:4f:0c:60:2d:01:a1:b4:0d:02:56:56:59:68:68:2c:52:
77:df:99:81:e1:b8:dc:bc:93:11:63:21:25:b2:bd:0a:8f:17:
91:ea:7b:da:fb:c0:57:b3:2c:c2:b7:ac:20:0e:af:02:f3:9e:
66:5f:38:22:f6:33:f3:3f:9e:a9:d6:b3:c1:2c:cf:44:94:c1:
11:17:bb:f9:61:be:ad:d4:6a:bf:f2:6f:8f:f3:64:dd:59:81:
03:49:cd:e2:07:88:1c:7a:28:50:b8:74:17:7c:7c:45:e7:ef:
f7:e0:15:6a:1c:86:02:99:07:fc:8b:8f:73:96:d3:14:ab:a2:
c0:65:d5:ab:92:99:41:35:ad:1d:53:ca:22:d2:6c:b1:63:4a:
3f:48:aa:fb:61:12:52:24:11:72:bd:40:df:65:28:a2:fa:f5:
62:9a:50:99:45:1b:0c:58:37:83:fe:46:d7:ee:d4:20:39:1b:
1e:dd:c8:cf:11:32:dd:ba:da:3d:63:32:28:40:32:20:3a:ad:
12:fb:bb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:30 2025 by rpki-client