Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
File: vP7i_2ht6InD9Y3x2fXit41kHeQ.mft (raw, json)
Hash identifier: 9vAO7CwnPDX7Oo6fQXz0VfQPX4AqudRM1KU3BlxtmSo=
Subject key identifier: D5:98:EB:F2:2E:6F:C1:A5:C9:46:9D:A0:F2:69:48:9E:E0:56:76:17
Authority key identifier: BC:FE:E2:FF:68:6D:E8:89:C3:F5:8D:F1:D9:F5:E2:B7:8D:64:1D:E4
Certificate issuer: /CN=bcfee2ff686de889c3f58df1d9f5e2b78d641de4
Certificate serial: 019A7149FE505F687462C1A71D122C957405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
Manifest number: 0602
Signing time: Tue 11 Nov 2025 05:01:05 +0000
Manifest this update: Tue 11 Nov 2025 05:01:05 +0000
Manifest next update: Wed 12 Nov 2025 05:01:05 +0000
Files and hashes: 1: 8v2Y_hDM4P4gm6VLl2fM1tYXUMY.roa (hash: Fwwqse9/8KZUX187OjpN/LZOPaaW4loyUBTUxSbinX0=)
2: vP7i_2ht6InD9Y3x2fXit41kHeQ.crl (hash: 0J2rqX6fDFFKqARMjmb5pDT59xq1h3rA7zr/8kb3ZWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:fe:50:5f:68:74:62:c1:a7:1d:12:2c:95:74:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfee2ff686de889c3f58df1d9f5e2b78d641de4
Validity
Not Before: Nov 11 05:01:05 2025 GMT
Not After : Nov 12 05:01:05 2025 GMT
Subject: CN=d598ebf22e6fc1a5c9469da0f269489ee0567617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e4:3b:c0:d5:ed:29:6c:9f:8d:d9:b5:61:e0:
32:39:7a:df:d2:24:a1:a4:7e:a1:d1:d2:c4:dc:9e:
99:83:7b:5f:dd:fc:18:3e:f5:a1:12:97:c0:83:fd:
b7:24:9e:c1:46:7b:74:94:44:5d:27:6c:57:b2:9f:
b8:7a:2f:3c:3c:98:36:8e:96:40:4a:74:85:cc:b5:
1a:80:eb:03:7c:bc:c0:0c:63:dd:68:2f:66:32:37:
24:80:17:0c:35:a0:f7:09:c5:c1:b4:c8:f7:c8:34:
47:14:3e:b0:78:ae:4b:2d:9f:5c:b9:f3:f7:2c:26:
e1:19:7b:f5:de:6e:ee:9d:8a:a4:72:4b:9e:5e:15:
7d:de:c5:9e:fa:40:ca:5d:96:8e:59:1c:eb:e8:19:
23:85:4b:f0:8a:73:65:84:7c:ee:6c:5e:70:14:a2:
a7:70:d0:31:f9:82:45:22:79:a7:4e:69:01:a3:98:
c8:f5:ec:28:eb:46:03:ee:04:4a:ab:4c:3c:73:a4:
0d:35:88:87:f7:16:ae:53:54:f4:54:f0:73:e5:71:
cc:e9:13:0e:62:f8:35:52:54:7f:ce:61:4f:3e:8d:
dc:86:37:d6:54:f5:e8:26:3e:f4:66:19:ae:fe:54:
aa:df:16:f4:7a:d0:a2:84:3a:e8:17:d1:bf:6f:12:
72:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:98:EB:F2:2E:6F:C1:A5:C9:46:9D:A0:F2:69:48:9E:E0:56:76:17
X509v3 Authority Key Identifier:
keyid:BC:FE:E2:FF:68:6D:E8:89:C3:F5:8D:F1:D9:F5:E2:B7:8D:64:1D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b5:bb:ab:c2:3c:a8:95:c8:89:14:e8:2d:9a:58:cb:36:39:
4d:c0:37:bd:fb:48:c4:9b:32:1a:da:11:74:87:0a:6c:55:fd:
43:8f:76:5a:7a:b9:69:66:14:05:52:75:e8:e4:2e:83:6c:80:
3f:e3:ec:4f:64:1e:c9:8a:88:ac:f3:1a:e1:21:33:02:ee:42:
48:4f:01:f3:12:5e:8c:5e:55:57:0c:43:96:95:03:fc:49:e8:
8c:9d:49:4b:b6:81:bf:e3:58:cd:d2:9a:3c:53:c3:a7:b7:e8:
70:d6:0d:f4:f9:ae:6c:17:94:55:c5:3d:88:a6:8f:30:e2:95:
46:de:2d:e1:99:9c:0e:e9:d8:ec:a8:dd:e8:43:f8:f6:6e:b0:
53:9e:77:bc:ff:f9:6d:3e:fa:86:48:58:ec:a1:d6:bc:29:5b:
95:3b:11:55:38:7d:5c:1a:28:e3:22:3b:ca:fa:c9:21:ff:f6:
e4:df:d7:b3:02:ff:57:69:be:fa:4e:65:5c:d1:35:eb:a4:fa:
e1:84:24:b4:cb:aa:0e:76:23:38:d1:be:a8:bf:43:2d:e5:b8:
9f:b1:03:73:32:d9:f4:2f:50:c2:12:1b:b5:b0:3e:08:70:12:
ad:36:e0:1d:ed:7f:38:c6:52:d3:2c:37:bf:d1:5a:7a:c6:b9:
19:96:d7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:22 2025 by rpki-client