Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
File: vWqnNi02eSy8-oNgm111zJZfP68.mft (raw, json)
Hash identifier: xEtcEHErew/cUdlgSiJqO1sugjuxBPvsr51v/+9FDuU=
Subject key identifier: 4F:93:DC:4F:63:44:33:4B:13:0A:45:E6:E2:2B:57:87:FB:D1:6C:A1
Authority key identifier: BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
Certificate issuer: /CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
Certificate serial: 019A730175A130FE9E6A3872117AAB6D733A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 13:01:06 +0000
Manifest this update: Tue 11 Nov 2025 13:01:06 +0000
Manifest next update: Wed 12 Nov 2025 13:01:06 +0000
Files and hashes: 1: Sl2g3CrSt9KX4nf7RqblAxhzwzY.roa (hash: V3ZD7OVN+yHlCXCBI+yKadNAgEWwEZET8SnJuQKupx4=)
2: vWqnNi02eSy8-oNgm111zJZfP68.crl (hash: zuCylaRqKeGDdoAzLfjp/4wyF7etblFcSYT6Jdhhuro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:75:a1:30:fe:9e:6a:38:72:11:7a:ab:6d:73:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
Validity
Not Before: Nov 11 13:01:06 2025 GMT
Not After : Nov 12 13:01:06 2025 GMT
Subject: CN=4f93dc4f6344334b130a45e6e22b5787fbd16ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a7:d8:8a:74:69:54:0e:30:eb:63:d4:ad:02:
67:89:28:b2:9e:eb:26:fb:2b:4c:21:6f:c2:c8:35:
76:af:ad:8d:48:57:a8:c4:80:97:94:15:ca:78:0c:
cf:af:94:e8:6d:96:60:8c:ea:23:2b:c7:0c:67:67:
30:96:42:e9:90:19:0e:bd:ec:5d:a3:b9:9b:e5:6b:
03:04:4e:5d:b4:19:0a:0c:d6:3d:69:f3:d0:93:b3:
65:27:25:d8:46:f8:bb:ba:9a:ba:57:d4:6e:76:54:
d8:e4:79:27:e5:e8:93:2c:59:21:10:af:d8:4f:df:
b2:4b:fc:a2:28:d0:9d:13:61:73:b2:8a:5c:33:e3:
28:19:e8:6e:0f:0d:36:9a:2a:f7:9b:43:f5:12:11:
b9:35:2d:76:c1:69:67:84:9f:52:88:f9:45:ee:fc:
3f:5a:a0:90:98:14:d6:16:67:9b:e6:a5:a0:0d:4c:
40:b3:51:00:c4:e5:c8:59:7b:2b:9b:5d:50:1b:dc:
3a:3a:b0:41:ab:63:30:54:14:f0:e9:a3:c4:29:5b:
31:f7:58:83:4e:b4:a0:63:0f:42:99:97:44:e8:24:
b0:16:a1:38:a5:47:83:3b:41:0d:9c:4e:e7:32:81:
ae:77:bc:b9:f9:77:7c:80:70:d7:2f:46:34:71:a1:
65:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:93:DC:4F:63:44:33:4B:13:0A:45:E6:E2:2B:57:87:FB:D1:6C:A1
X509v3 Authority Key Identifier:
keyid:BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c7:8c:2d:0e:00:eb:6c:28:f6:10:39:cc:0b:a1:9a:e5:5e:
d7:75:98:7c:3b:f9:eb:da:9d:cc:f4:c8:27:07:05:63:37:98:
81:aa:53:18:3c:ef:82:d0:16:22:96:b9:90:68:d1:0d:0c:06:
37:94:c6:21:68:35:a1:ae:d4:95:4f:c7:59:d1:b2:45:b4:3e:
0a:f7:ea:57:a2:c8:c2:3d:fb:d0:5e:38:ab:c0:ac:2a:0b:b4:
51:fc:69:20:43:a8:c3:c0:d5:4f:82:43:28:5b:64:14:29:cf:
a7:c9:48:f4:24:19:e1:94:38:5d:bb:08:5c:a3:87:63:dd:8b:
a2:81:68:7d:c2:db:c2:44:a1:d6:ec:c3:21:bc:aa:f3:53:97:
94:f8:c4:d1:ab:0c:e3:b2:13:1d:e7:96:3e:e4:c9:61:56:e6:
ef:b7:19:0f:88:2f:bf:00:0f:c8:b0:33:88:92:8e:de:09:16:
f4:c1:c9:d6:77:f7:ae:cf:56:c4:ce:39:a6:3e:61:73:cf:86:
20:07:fd:02:40:4b:9a:e3:69:e0:46:96:62:3b:6b:20:0e:9c:
9c:f3:46:94:e1:23:7b:9d:da:c6:de:b2:61:ab:18:06:c1:cc:
a6:4a:ef:ec:5c:7a:9b:53:b8:8e:e8:01:cb:85:6b:e1:b3:48:
32:26:47:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:18 2025 by rpki-client