Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
File: _vyDRELhMPTeeBW_Fpt6BMMDnd0.mft (raw, json)
Hash identifier: OHjomczabvphM9uHk9SltMmjlpOPSOgDahpvBaMX4jM=
Subject key identifier: A0:DA:65:16:6C:D9:41:6D:D3:8E:A4:33:EA:95:8F:29:C7:DD:D4:F7
Authority key identifier: FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD
Certificate issuer: /CN=fefc834442e130f4de7815bf169b7a04c3039ddd
Certificate serial: 019A71EE93A048D7181069D4E19782E80C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
Manifest number: B9
Signing time: Tue 11 Nov 2025 08:00:52 +0000
Manifest this update: Tue 11 Nov 2025 08:00:52 +0000
Manifest next update: Wed 12 Nov 2025 08:00:52 +0000
Files and hashes: 1: HUuEhM0s6vtmAYifFr2lzsJ1MQg.roa (hash: zjG1+pb3vedtJUzUhZUa3U7vpl6rJzZYBSltaRWkYmA=)
2: _vyDRELhMPTeeBW_Fpt6BMMDnd0.crl (hash: xrlnLhRv/1sBvVewILBhksYSMj69fMIL6QME1XPczso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:93:a0:48:d7:18:10:69:d4:e1:97:82:e8:0c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fefc834442e130f4de7815bf169b7a04c3039ddd
Validity
Not Before: Nov 11 08:00:52 2025 GMT
Not After : Nov 12 08:00:52 2025 GMT
Subject: CN=a0da65166cd9416dd38ea433ea958f29c7ddd4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c7:af:56:08:f6:d7:42:22:ad:21:75:8f:92:
0d:2a:10:c3:cb:1c:d7:96:96:11:e5:06:ca:e7:cd:
65:ae:75:b8:af:5c:a7:4f:71:7b:62:70:fc:12:dc:
14:21:65:cd:d3:01:8a:d6:8e:21:ba:0c:86:50:98:
07:8e:04:0f:c2:60:d7:a1:2d:e5:b1:e0:08:04:06:
e6:1f:94:df:7c:9e:a2:d7:da:1d:0c:81:6c:66:98:
25:c6:87:ba:79:a5:46:e4:ab:63:c9:08:74:a8:c9:
e3:62:f0:b4:08:50:cd:18:92:df:b7:8a:20:f5:4c:
be:b8:d4:c8:ad:22:a0:c4:0f:54:56:14:cf:70:d5:
b2:fd:48:33:5a:c1:a4:a0:3d:ad:c6:0a:f6:1f:ab:
67:dd:70:c2:2b:e1:49:f7:61:ac:b1:14:51:ce:0e:
26:5f:f5:76:03:df:01:8a:1a:8e:bd:d8:2a:21:57:
e3:89:90:d9:56:01:84:39:9f:1c:2b:64:8d:bc:b3:
b4:f1:0d:81:07:96:85:ed:69:af:cf:62:7c:b2:70:
0c:42:ca:e5:c9:37:0c:e3:9a:9b:77:bd:c5:62:fb:
83:bf:4c:86:80:75:08:ee:68:e7:e3:27:1e:2d:50:
5e:d3:0d:87:df:ce:b7:3c:c8:1f:cc:14:64:d4:fb:
dd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DA:65:16:6C:D9:41:6D:D3:8E:A4:33:EA:95:8F:29:C7:DD:D4:F7
X509v3 Authority Key Identifier:
keyid:FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7b:4c:1b:22:e9:be:83:be:2b:76:f7:52:40:a9:a1:3f:e8:
36:fb:ed:4c:af:7c:e4:79:08:26:da:09:5a:07:d8:31:db:59:
03:70:19:da:bf:2c:66:88:a7:6b:80:49:4f:a7:4e:8f:41:88:
70:dd:5d:d3:79:cc:f7:ba:c1:5f:d3:29:3b:93:08:61:a1:3d:
bf:af:16:04:eb:7b:9c:2e:a1:51:55:b5:0e:bd:31:3b:db:df:
ed:ff:94:98:92:dc:b7:b0:43:8d:33:18:f2:85:22:ca:a4:2b:
ac:65:60:4b:52:d2:6c:53:69:6c:38:36:a1:c8:af:be:dc:4c:
44:6c:a2:c7:35:cf:19:8e:b4:25:8d:64:b5:4d:b4:d1:97:52:
21:c4:b0:fb:9b:41:f0:de:4e:fe:13:85:f7:a2:b6:42:54:bb:
87:3c:f7:f1:1b:0e:c7:c0:84:44:19:cf:33:57:dd:ce:e3:f0:
85:1d:df:43:16:59:8d:c1:70:d4:9e:1a:f1:1a:61:89:08:a7:
55:a3:37:18:20:d0:da:88:b4:d2:b3:43:87:4c:6f:e7:37:8c:
8c:19:ae:a9:c8:e0:1f:3d:79:57:2b:29:1b:ca:43:92:3e:ce:
e5:16:ed:ab:03:c0:ef:bf:71:b1:6b:96:15:6d:f2:e7:1f:b6:
cc:46:6d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:21 2025 by rpki-client