Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
File: vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft (raw, json)
Hash identifier: ZCbDDK7C8DygEmTrU3J0ZVYU0ic2+DUMHaDRx3EC4Fo=
Subject key identifier: 78:6B:CA:D3:AF:3A:FC:2B:B3:92:CC:C9:AB:D1:27:F6:6C:5D:8F:91
Authority key identifier: BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39
Certificate issuer: /CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
Certificate serial: 019A71B871A6CE09E038AD0F897EEEBB0531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
Manifest number: 083A
Signing time: Tue 11 Nov 2025 07:01:44 +0000
Manifest this update: Tue 11 Nov 2025 07:01:44 +0000
Manifest next update: Wed 12 Nov 2025 07:01:44 +0000
Files and hashes: 1: L6lTyFXKtOF9j4M00RgctdL3DPI.roa (hash: 82l0fSJIXKbiY5RynH8uwdUeGbScGZ+VMQbyrw1pJ3U=)
2: vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl (hash: WQS+HJfuzikZ9/XBDE0WNW47kQA1N3Bf7dJBZ7sqM8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:71:a6:ce:09:e0:38:ad:0f:89:7e:ee:bb:05:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
Validity
Not Before: Nov 11 07:01:44 2025 GMT
Not After : Nov 12 07:01:44 2025 GMT
Subject: CN=786bcad3af3afc2bb392ccc9abd127f66c5d8f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:88:da:9e:1a:13:87:b4:e0:22:65:20:bf:
25:d9:82:6a:bd:d2:c7:d3:82:26:88:f5:01:54:5a:
25:3b:82:7b:37:ac:f8:be:0e:34:ca:69:10:82:0e:
ee:97:d2:dd:3d:8c:54:67:c7:7a:91:7a:ba:60:5f:
ba:34:f2:79:09:ef:ad:c5:37:c9:24:b9:e9:31:1f:
0a:38:42:55:89:c3:cc:7f:c6:27:1a:8a:3d:a8:9d:
17:8f:6b:c9:ea:d8:e6:e2:47:5d:08:a1:2c:b4:8a:
0c:d5:20:69:83:87:3e:0a:c9:80:47:7f:f3:91:62:
e4:6f:ed:59:f1:16:79:df:32:81:e2:08:02:94:71:
cd:26:18:6e:7b:1e:e5:26:11:86:78:57:0f:3a:2e:
87:8a:53:1a:5b:8f:ee:c6:72:11:06:bd:dc:aa:54:
d3:1f:81:ec:6f:d3:40:20:1d:c7:78:a8:26:d8:cd:
3f:c5:40:aa:a7:ee:24:9e:57:19:9e:54:b1:1a:63:
93:00:2f:09:b2:71:b1:fe:cd:14:97:6c:ab:bf:c2:
4f:24:e0:56:53:b5:19:01:db:23:c0:f0:7b:be:37:
e4:ec:86:51:3a:3b:61:e1:a8:4c:71:06:cb:28:31:
1d:bc:cb:87:fb:b6:ff:06:a7:db:16:86:60:7f:21:
3e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6B:CA:D3:AF:3A:FC:2B:B3:92:CC:C9:AB:D1:27:F6:6C:5D:8F:91
X509v3 Authority Key Identifier:
keyid:BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5c:c6:71:45:96:99:bd:c5:d6:48:fd:fb:36:da:c7:60:b6:
59:30:e9:13:10:ee:c1:9b:25:9e:6f:4a:ee:a3:6b:a8:0d:4a:
83:92:13:26:a5:69:13:98:b5:6f:52:c4:d7:62:b5:70:87:0e:
66:2e:3e:57:4d:0e:3b:a0:8c:04:45:f7:d2:95:be:f8:b8:ce:
96:09:eb:c7:d6:b9:9f:32:7f:a2:48:ae:d1:68:17:11:21:20:
6b:af:7d:cd:99:7f:fb:40:10:7c:8a:0a:3e:08:d5:a1:cb:7f:
c5:cc:1e:ba:48:d2:c4:5e:ea:e1:fe:b2:65:ef:ff:68:d1:9f:
59:b2:97:b9:34:53:1e:ba:c8:3c:d7:7c:8b:1a:d7:9c:0a:0b:
3e:09:c0:11:5a:91:54:7d:e1:52:20:e9:79:0c:27:27:9d:4d:
d6:bd:7c:49:d8:bc:7d:e3:e7:1b:9a:80:85:60:00:2a:1b:4f:
1a:1d:86:f6:cb:cf:60:e1:70:95:28:e1:d9:07:1a:c2:46:f2:
5c:35:ee:93:ab:ff:2e:7c:51:f0:f2:c6:be:8f:ba:c8:ec:81:
eb:73:d3:19:84:53:ad:6c:42:1c:21:ef:1b:17:c5:7d:7b:33:
f7:2b:6e:b2:1c:f2:3e:f7:d1:80:cf:dc:48:8d:c7:ce:26:bf:
db:42:bf:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:38 2025 by rpki-client