Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
File: vX2BeM7FzTdlSKkEkRf0acCnQxw.mft (raw, json)
Hash identifier: qF5IXgCqWvf2fSvlqAsYjVstLVY4wOS/R/NdkXRlc7M=
Subject key identifier: 7A:89:33:78:E0:6E:2E:9C:7C:03:61:B2:09:32:34:68:B3:41:91:8B
Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Certificate serial: 019A4BBCDDB4F9866EC910D92038A87E9E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
Manifest number: 171B
Signing time: Mon 03 Nov 2025 22:00:59 +0000
Manifest this update: Mon 03 Nov 2025 22:00:59 +0000
Manifest next update: Tue 04 Nov 2025 22:00:59 +0000
Files and hashes: 1: 0PxrjgmZQbJVDcH4mMDl7gGNKZc.roa (hash: bjnIOfIl4+9c19F8Gpi8S4s/MfRm6ysLGSGly8bkYvk=)
2: Ndw7HVDtjP0mKBQVp0z9A-CbAvY.roa (hash: Gvsu5qwW/HZfnE/HXNRfeWRnDFzMBicoBm7giJXuEbI=)
3: fHkoAZxOrb4jS9uptQ9di3MomH4.roa (hash: OuL9G7DUjjtpe04g3KNS/iW0YgxTMwqsjJxCgrATRoE=)
4: gA1d2jY3nghc_kTFDgqzR_V4tPo.roa (hash: MVElriob5MX1tbQ4YiwNJ86SZ2jP9GGb5E+1TagXoxo=)
5: vX2BeM7FzTdlSKkEkRf0acCnQxw.crl (hash: Yvew68nY7rcXj9tlt+Zy2LSgJkJku/gEgIXknfNXscE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:bc:dd:b4:f9:86:6e:c9:10:d9:20:38:a8:7e:9e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Validity
Not Before: Nov 3 22:00:59 2025 GMT
Not After : Nov 4 22:00:59 2025 GMT
Subject: CN=7a893378e06e2e9c7c0361b209323468b341918b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b4:f9:60:8e:a9:f5:31:47:cb:63:13:39:ea:
ab:3c:14:98:6b:9e:79:32:95:6d:b1:d6:ee:98:14:
ef:47:a8:2c:3f:34:57:16:6f:fe:87:27:91:13:34:
a9:82:f7:e9:30:3d:14:7c:71:81:0a:03:36:3b:d5:
07:4d:43:59:99:b9:6a:4a:6a:92:20:6f:68:6d:b4:
21:9e:1a:cb:26:1d:78:67:a5:9c:a8:3d:70:6b:ef:
94:b9:3c:c2:c9:4c:42:16:da:7f:eb:a8:15:df:32:
68:f2:4b:fa:e2:98:01:28:d3:84:d4:22:36:5d:8b:
81:d4:3d:a7:bc:b8:2c:be:d1:e7:c3:4b:8e:fd:a2:
81:b1:94:03:4c:6b:4d:72:f6:f2:3f:6b:a9:3c:fb:
36:67:ec:d8:bd:c0:b3:04:e0:39:be:93:43:be:45:
06:61:01:7b:c1:78:ec:f5:9f:d6:18:50:f7:26:2c:
a9:a0:e8:72:58:20:69:f3:e5:ac:fb:bf:1f:f7:75:
2c:11:08:12:4a:d1:ed:d8:2e:83:b9:a3:29:d3:20:
3c:4a:0f:cb:69:60:2d:1e:a8:65:22:e9:de:dc:27:
1e:27:63:96:66:4a:4d:af:a8:a9:83:18:10:7a:af:
03:3f:ce:35:df:1e:ee:f9:13:42:58:f5:04:97:a2:
5c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:89:33:78:E0:6E:2E:9C:7C:03:61:B2:09:32:34:68:B3:41:91:8B
X509v3 Authority Key Identifier:
keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fa:db:ad:28:54:fb:6f:03:6f:22:7b:4d:c4:b6:19:eb:a6:
37:38:48:6e:fa:97:ce:35:f0:fa:45:5d:27:57:c4:b7:c5:b2:
ac:cf:c5:a8:fe:bc:79:70:51:bd:77:25:1f:a2:3e:6f:45:ab:
f8:b3:62:df:99:cd:99:e2:9d:aa:b4:61:2d:ac:01:b9:53:e5:
48:4f:01:fd:a2:59:33:69:e3:07:ca:25:b1:32:89:ab:6c:25:
fb:46:31:ab:9f:06:a2:43:ab:ec:f2:c4:5f:26:a2:66:96:57:
88:aa:75:10:5f:a7:2b:26:37:7d:b2:15:ee:b6:3f:f8:46:e4:
d0:2b:dc:a7:a7:01:93:e5:14:f7:9c:b0:8d:2c:81:45:31:9c:
ec:68:21:47:15:77:24:8f:2e:c0:e9:1a:cf:c7:be:87:25:56:
a9:84:73:8a:5d:7c:bd:05:3e:b6:4a:cd:f4:f0:f8:ee:39:2b:
4e:92:0b:cd:dc:28:02:99:6a:38:c7:3d:d7:1c:f6:03:4a:c5:
89:ea:0d:a5:d7:c3:90:66:2a:c2:23:c5:ca:b8:2e:ec:c2:e0:
c7:88:cb:aa:63:e0:74:6c:1a:26:bd:78:80:3f:9a:6f:94:2e:
d6:8a:3a:9c:64:c6:0a:6f:71:15:77:c5:ce:1a:5b:b7:3b:e3:
38:d2:75:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:11:07 2025 by rpki-client