Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
File: vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft (raw, json)
Hash identifier: 5+dE2u7K0Ld7Slyxgp06p4BGThnxqHGYtu2Zfw1T2y8=
Subject key identifier: 43:00:BA:9D:0A:33:96:EC:4D:83:76:5C:F0:EF:4A:E8:0A:D5:D6:49
Authority key identifier: BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
Certificate issuer: /CN=bd02616554632356450bc4bb4b6dacfc79df3025
Certificate serial: 019A7180995FFD04939E03995AAAD1ABD0C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
Manifest number: 0CE6
Signing time: Tue 11 Nov 2025 06:00:44 +0000
Manifest this update: Tue 11 Nov 2025 06:00:44 +0000
Manifest next update: Wed 12 Nov 2025 06:00:44 +0000
Files and hashes: 1: vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl (hash: gLTNMg7ITLMoNXKo+PnDf/4ZMmewAZS4ANJBqdXb6qA=)
2: zW8H9236KdsFPYHIiVwdIlsjLeA.roa (hash: A3BKCbMqcBICoyGdtSjfGVXeNlYAC0vfSMBZfdSiSAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:99:5f:fd:04:93:9e:03:99:5a:aa:d1:ab:d0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd02616554632356450bc4bb4b6dacfc79df3025
Validity
Not Before: Nov 11 06:00:44 2025 GMT
Not After : Nov 12 06:00:44 2025 GMT
Subject: CN=4300ba9d0a3396ec4d83765cf0ef4ae80ad5d649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:04:82:f6:b5:b9:92:73:1f:65:ef:d8:0e:
8e:8a:69:cc:da:d3:82:90:78:9e:63:ef:be:7d:cb:
59:be:7b:f1:15:e5:01:54:e7:df:46:9a:94:00:15:
93:92:b0:e0:7f:de:77:03:b6:f2:00:84:54:b0:92:
9d:a2:e1:84:87:ac:95:ab:6c:0a:d0:37:46:8d:c7:
4a:17:b6:f4:c1:3f:51:ad:32:ec:df:33:23:04:9a:
88:49:e1:25:77:db:07:77:f3:6a:24:d7:e1:96:d4:
fc:03:dc:c3:73:b0:39:3d:24:e7:58:0a:9c:68:42:
10:b6:54:fd:93:33:74:7f:52:33:1e:17:7c:4f:e2:
71:db:b6:f1:bb:61:c1:68:9f:3e:47:fd:63:91:aa:
0e:b6:38:61:27:6a:26:d1:2d:9c:17:c4:3e:2d:ba:
3a:2f:df:fd:0e:ea:c0:fb:73:00:4f:6e:11:d9:f6:
9c:b0:70:d7:cc:ce:f6:de:49:29:8c:40:c9:a5:24:
5f:be:2d:b6:61:4f:94:4e:f0:4e:b5:00:f8:e7:96:
45:03:c7:07:13:92:cf:d1:06:61:d3:e6:5c:63:60:
55:69:6a:b6:1c:64:2a:e5:2e:6c:df:9b:24:2d:58:
d8:85:4a:45:73:d2:1c:8f:bb:a3:93:51:b2:8e:9e:
24:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:00:BA:9D:0A:33:96:EC:4D:83:76:5C:F0:EF:4A:E8:0A:D5:D6:49
X509v3 Authority Key Identifier:
keyid:BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f8:60:18:94:fd:cc:d5:5a:08:10:9d:dd:68:fc:96:ea:49:
89:62:2e:c9:d2:88:0a:7b:1a:4b:21:3c:26:aa:17:7e:0c:a3:
cf:50:77:e7:7c:71:dd:73:1c:24:82:33:b0:dc:8b:4a:d6:c0:
41:6e:3e:b5:ef:e3:75:4d:6f:92:f7:47:47:d9:40:e4:a8:7e:
70:19:98:3f:f1:9f:a1:6d:41:63:ab:f9:57:d0:cc:e8:54:8f:
bf:a0:50:8b:e9:a0:07:e8:55:11:83:22:ec:92:4c:18:49:52:
1a:fe:03:af:6e:ac:a0:8b:93:90:5c:2b:f7:bf:f6:fb:39:db:
32:8f:61:df:b6:f7:54:9b:1b:c1:6d:8a:ab:43:f0:9b:86:0a:
ab:9d:14:48:14:7b:22:f4:9e:91:e7:6c:66:7e:24:c3:06:5e:
44:de:9f:0f:30:c4:67:d3:63:6d:a0:a2:3e:0a:eb:da:28:af:
72:da:ea:76:c2:41:bf:92:3a:15:e4:69:a1:e1:d3:bf:f2:b5:
f1:80:57:fa:45:73:3e:60:dd:31:23:ae:b3:01:3d:2b:f2:f6:
b4:1b:f1:3d:6a:84:cc:3e:44:20:f0:bd:71:44:d8:d8:94:0e:
d9:a7:dd:70:25:b1:a7:68:05:33:21:90:54:fb:72:54:8f:4a:
e6:55:b1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:24 2025 by rpki-client