Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
File: dv4wVehykAAOMof3q1iDgCpapto.mft (raw, json)
Hash identifier: 8hSuWJG1QgJZnlMVWSEgDsLKSZuSmCrlgOTUN6gPRWA=
Subject key identifier: DF:FD:0F:13:CD:AA:69:E9:96:CF:5F:DD:69:A4:3B:E5:AE:31:F7:10
Authority key identifier: 76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
Certificate issuer: /CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Certificate serial: 019A71B85A08285B8BB4914EB6F83FEEF6F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
Manifest number: 0A46
Signing time: Tue 11 Nov 2025 07:01:38 +0000
Manifest this update: Tue 11 Nov 2025 07:01:38 +0000
Manifest next update: Wed 12 Nov 2025 07:01:38 +0000
Files and hashes: 1: 8nt8dsbMeiqtSt6KoDNGgs5pyTM.roa (hash: RvFtibhd8tSawl3iSjZ76rX4z9HhG8SM7MwleTD5nY0=)
2: dv4wVehykAAOMof3q1iDgCpapto.crl (hash: fSuLCU26grkCq/TkS59Wdv+Sne6f4ffyla1941wtYXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:5a:08:28:5b:8b:b4:91:4e:b6:f8:3f:ee:f6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Validity
Not Before: Nov 11 07:01:38 2025 GMT
Not After : Nov 12 07:01:38 2025 GMT
Subject: CN=dffd0f13cdaa69e996cf5fdd69a43be5ae31f710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:4f:13:33:63:28:0b:7f:9c:4d:8d:47:88:
06:a9:8a:75:0c:a1:13:99:1e:cd:09:d5:f4:2c:bf:
72:98:38:c6:8c:bb:93:a1:06:31:e7:a0:fa:66:66:
97:7e:30:67:48:1f:f3:6f:9e:47:53:fe:ea:fa:97:
9a:c4:d7:df:0d:44:77:97:71:cd:f3:d8:b4:66:a7:
a9:51:18:c4:d9:4d:37:05:28:64:c8:8e:1c:29:17:
4a:4a:68:58:41:40:cd:52:63:bb:80:84:56:6b:2f:
03:bf:fd:36:62:82:fd:f9:a6:81:45:9c:5c:b6:1a:
5d:88:a0:b7:08:d5:c6:14:f6:64:18:93:68:1e:11:
91:3e:c5:56:a4:d5:ba:78:7c:6a:c7:1c:5c:6b:cb:
ff:b5:71:25:97:65:f2:d6:74:80:5c:55:e4:ed:6f:
59:c2:dc:0a:81:c2:6d:73:70:15:c9:f5:6c:8a:5b:
99:5f:55:99:bc:3c:db:2e:1f:a7:69:ec:2d:a0:f2:
33:90:58:7d:7c:f1:c5:31:3c:2d:5d:cc:8d:d7:bd:
a4:d9:9e:0f:c2:be:03:fa:2d:a4:28:a1:dd:c9:4d:
56:b8:3a:d7:38:fd:2e:ad:0d:22:0e:21:5a:d0:ea:
a9:6c:a5:5a:95:62:0a:10:ef:e3:94:dd:77:53:f3:
21:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FD:0F:13:CD:AA:69:E9:96:CF:5F:DD:69:A4:3B:E5:AE:31:F7:10
X509v3 Authority Key Identifier:
keyid:76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:46:fd:58:a5:39:b1:3e:65:92:0f:57:c9:69:5d:e7:0c:0c:
07:d4:7f:30:d0:81:d9:89:24:f4:26:1e:38:ce:a9:b2:c0:3a:
b4:76:21:ca:5c:61:b7:07:2c:0f:6e:8f:01:aa:d8:32:0f:5f:
57:9f:74:a2:ab:6d:86:4d:ca:19:f1:2e:47:76:0d:a9:bf:db:
a3:9c:80:f3:2b:8b:93:30:89:b5:bb:d1:99:a0:1e:bd:f8:22:
83:84:41:7f:2b:68:ab:9b:6f:07:82:b5:54:a6:ef:7b:9b:67:
bf:bc:86:bc:33:77:df:47:fe:74:31:d1:1e:24:01:06:22:ad:
90:bf:95:cd:34:9f:d6:19:38:1a:ce:90:de:a8:32:f4:2c:ed:
e2:33:4e:ca:74:64:f3:44:39:e7:ec:e1:1a:9f:02:e5:95:bd:
31:29:55:31:5c:9c:c4:14:b0:32:13:01:7d:62:25:d1:f3:a1:
88:af:9c:5a:18:38:58:6c:08:10:ef:62:61:45:bf:aa:4d:97:
1f:29:ac:36:40:4d:d3:68:13:d4:81:6b:0e:97:94:c5:b8:73:
72:e2:44:47:e1:44:d0:d9:04:d2:de:0f:98:5b:dd:71:79:12:
2c:e3:bf:c2:25:c1:2c:41:6f:65:6b:09:af:59:6d:0b:78:30:
c3:48:ec:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:35 2025 by rpki-client