Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
File: runVCGNpB2p412FjizKoqbjvcOc.mft (raw, json)
Hash identifier: y0swfOn9ouIYlnuD0ppUxmxRzIe29Ps2D79iyK/qkdQ=
Subject key identifier: C3:E0:90:C1:19:D9:A2:C3:F4:86:0C:4A:14:04:00:6F:56:AC:74:6B
Authority key identifier: AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
Certificate issuer: /CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Certificate serial: 019A73017D9A8A675CA21FA08484D14377F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 13:01:08 +0000
Manifest this update: Tue 11 Nov 2025 13:01:08 +0000
Manifest next update: Wed 12 Nov 2025 13:01:08 +0000
Files and hashes: 1: TI9bfzfYT_e9UXoNSSRvZ0SIvco.roa (hash: ysZXRJJDaCEwr01HXDnbPPBij8sh3z42AGc9cvU+Xhg=)
2: runVCGNpB2p412FjizKoqbjvcOc.crl (hash: rVEacJ4ZYtyDQ27Vq6eg8UhZv65bChsemtz6Ws6kw3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:7d:9a:8a:67:5c:a2:1f:a0:84:84:d1:43:77:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Validity
Not Before: Nov 11 13:01:08 2025 GMT
Not After : Nov 12 13:01:08 2025 GMT
Subject: CN=c3e090c119d9a2c3f4860c4a1404006f56ac746b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:32:db:70:30:1a:43:44:e3:b2:93:5d:36:57:
da:0d:09:e5:b4:ba:2f:e6:13:5f:5b:d5:c4:cb:bd:
6f:e4:9f:98:07:c7:e8:69:cf:38:c1:a1:8e:ea:1d:
0c:fe:8d:9b:1b:b7:36:c0:73:2b:df:eb:4c:e3:27:
51:b1:15:f7:c9:48:d4:da:ab:65:5b:5c:3b:c2:4f:
5c:b6:c9:02:88:6f:07:4d:60:3f:fd:5b:05:c6:40:
0e:aa:0e:1f:fc:85:a9:7e:17:ad:c0:f0:50:52:95:
fe:1e:06:61:40:a0:78:9a:c7:a6:ca:72:a5:67:65:
19:9f:38:37:f7:4f:6d:b2:30:a1:68:30:6b:bb:8a:
97:65:f2:c1:21:2d:2a:7b:7f:fc:4f:61:a6:30:04:
06:33:de:3e:62:bc:a9:1e:5d:aa:73:0c:1d:7d:30:
75:db:31:0b:ef:28:fd:ca:b2:35:1b:03:8d:e9:2c:
dc:cb:13:54:65:9d:82:80:bd:95:d3:62:ea:f1:df:
a3:15:78:b4:b9:1d:12:51:bf:11:25:3a:7d:eb:49:
22:fb:ef:cc:e7:80:56:b2:89:44:96:c0:49:27:7d:
6a:db:7e:30:e0:54:6a:53:8b:ec:ad:78:45:2d:89:
0c:09:7a:ec:7a:c1:55:69:e4:fb:3b:2d:15:30:76:
45:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E0:90:C1:19:D9:A2:C3:F4:86:0C:4A:14:04:00:6F:56:AC:74:6B
X509v3 Authority Key Identifier:
keyid:AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a1:32:d5:3b:a5:fc:c7:71:98:d4:7a:8e:b6:3f:48:12:2c:
af:fb:8c:69:22:53:ef:b8:48:56:24:5b:36:84:86:bd:2a:7a:
4c:22:df:75:19:b6:68:01:6f:f5:26:58:dd:d8:51:3c:25:15:
81:e8:37:39:d2:cb:9e:a2:20:e0:7e:65:f5:24:7a:c2:7d:43:
09:9f:c1:c8:00:85:97:0a:c1:21:9c:86:e2:16:50:16:36:1b:
8b:b2:a2:a2:90:b7:02:ed:1b:e0:a6:b6:95:7f:a5:19:db:2f:
fc:e9:34:1c:fd:a6:b7:c1:46:42:d6:69:9a:77:37:cc:34:9f:
25:74:29:dd:ba:94:7a:19:53:fe:37:37:d1:81:9a:42:2c:18:
cb:3e:a6:34:02:61:43:20:41:1a:93:fc:2b:78:29:a4:e7:23:
3d:0c:55:63:74:69:14:6b:3d:76:a7:00:ad:1f:ee:3b:7d:c2:
5f:3d:d2:bd:69:cf:04:7e:db:25:ef:d4:7e:95:ff:dd:71:ab:
46:63:58:40:50:87:d1:5b:ed:0f:42:1b:49:0e:d4:d5:40:c5:
04:4c:ab:26:86:b5:03:c7:1f:7e:4e:7e:b6:26:d9:78:d7:75:
33:a0:8e:e7:95:63:d3:89:c2:22:20:e0:61:1e:d5:dc:cf:6a:
67:b3:7e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:40 2025 by rpki-client