Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
File: vMY_AQxUC81FVDRL-5pZou26vCk.mft (raw, json)
Hash identifier: eF13nWKkfKflwnCSu620ufM3IJ2HQneCSsw28HVD4yY=
Subject key identifier: 6B:FF:76:72:2C:8B:B0:34:13:DC:E6:01:BF:C6:C5:58:42:AB:2F:28
Authority key identifier: BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
Certificate issuer: /CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Certificate serial: 019A608D6C8565C6859932CD9DE72F5126B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
Manifest number: 171E
Signing time: Fri 07 Nov 2025 23:01:12 +0000
Manifest this update: Fri 07 Nov 2025 23:01:12 +0000
Manifest next update: Sat 08 Nov 2025 23:01:12 +0000
Files and hashes: 1: f54g9Idv6PqQc5NMQvmsvFWJIzA.roa (hash: l130lZQGnDRQWTrBtDjmk6wY+7GBZMzcTr0yBlbCoVI=)
2: vMY_AQxUC81FVDRL-5pZou26vCk.crl (hash: I/H6BA+8BZwhRjE1VYWvVBKH8GLEZfxe/BhB28DII00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 21:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:60:8d:6c:85:65:c6:85:99:32:cd:9d:e7:2f:51:26:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Validity
Not Before: Nov 7 23:01:12 2025 GMT
Not After : Nov 8 23:01:12 2025 GMT
Subject: CN=6bff76722c8bb03413dce601bfc6c55842ab2f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ef:6a:cb:c9:56:b7:de:24:7d:47:c8:87:40:
8d:35:2c:40:93:f8:55:c9:09:92:ab:ed:f1:a7:7a:
cc:6d:2f:26:ef:e3:09:bd:c0:bf:38:de:c3:48:64:
d0:0d:df:54:60:ff:6e:7d:98:e9:10:34:19:dd:25:
ae:7c:9d:d0:42:76:21:09:19:61:89:98:77:5d:d9:
3a:36:6c:3d:af:57:db:69:ba:86:91:6a:87:69:5c:
bf:8d:65:5e:9a:cd:b3:53:a9:95:69:83:b3:a8:ef:
7e:03:d9:3f:45:57:35:97:51:04:bd:d5:ab:af:a2:
19:4d:9b:b7:46:bb:94:ab:a8:49:67:08:6b:02:26:
0b:cb:b5:af:67:fe:dc:7a:e8:fd:54:6d:4c:74:38:
d4:e9:eb:6c:72:55:57:49:01:90:10:28:ab:33:6d:
24:8f:a9:b8:e5:13:a5:0d:11:f7:a1:9f:6b:d5:dc:
df:f9:23:db:ee:be:6f:cb:b4:f6:04:25:6e:7b:6d:
5f:be:c9:e4:88:6b:60:ab:08:17:0e:7a:0b:e9:a3:
d9:7e:1e:de:8d:17:be:02:b2:fc:a8:0d:a1:20:ca:
0f:9a:e0:dd:8a:45:74:c5:65:ba:ff:21:28:f9:df:
e0:fe:8e:13:7b:e7:c6:d8:c9:0a:1c:5e:84:54:ee:
16:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FF:76:72:2C:8B:B0:34:13:DC:E6:01:BF:C6:C5:58:42:AB:2F:28
X509v3 Authority Key Identifier:
keyid:BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1f:7e:45:8c:3b:02:6a:2a:10:36:d5:e7:d3:48:ec:fc:9b:
02:64:1d:c5:75:7b:c9:79:7d:14:38:ad:1d:69:fe:58:f0:82:
1d:9f:4f:d8:15:ba:ef:8b:c7:69:63:42:bd:58:25:fd:32:c3:
1b:7f:aa:c5:e0:85:16:22:42:c8:b7:b8:6a:12:86:4b:ee:8b:
7e:a5:bd:12:15:0b:dc:5d:39:c6:72:2e:88:e2:4d:ae:bc:bd:
42:e4:6b:d1:71:0b:b2:9d:ad:15:c0:8e:53:a0:64:64:09:10:
12:0c:a4:59:e9:6b:85:21:49:c3:81:5e:c2:e6:d9:f4:09:c9:
42:5c:ec:2a:2f:9f:8b:a8:a7:dc:11:c3:1b:a5:90:ef:33:c3:
22:a7:04:bc:c7:a9:bf:03:29:8e:f5:ef:2d:8a:a9:b0:45:8c:
5b:6d:9e:39:f1:c1:65:7e:38:38:a4:38:72:02:4d:7b:a8:1a:
41:1d:92:2a:a6:6c:60:8e:e5:5e:86:d0:64:d1:4a:cb:d1:3f:
39:27:ef:ec:01:dc:69:a0:6b:cc:de:cf:fd:d7:62:de:5b:e6:
96:04:5a:f8:de:b3:11:65:3b:cb:3b:52:cc:48:0c:15:96:2c:
6d:4c:d5:45:64:d7:7b:68:10:bc:c7:a0:52:41:3a:2e:1a:59:
dc:06:6e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 06:14:12 2025 by rpki-client