Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
File: vEZLqdJjhfVN9iVKwkiSbTcERbA.mft (raw, json)
Hash identifier: YXV0tVc1Pc4PBn1Gz2oF0mMg+nBTNaXH6T+GtNoH3Ew=
Subject key identifier: C0:F2:A6:65:C5:DA:DD:A7:8E:EA:F1:0F:69:56:9E:1D:22:C7:2F:85
Authority key identifier: BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
Certificate issuer: /CN=bc464ba9d26385f54df6254ac248926d370445b0
Certificate serial: 019A258A2E43BB4183F91D78327A8BCBBBD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
Manifest number: 1700
Signing time: Mon 27 Oct 2025 12:00:04 +0000
Manifest this update: Mon 27 Oct 2025 12:00:04 +0000
Manifest next update: Tue 28 Oct 2025 12:00:04 +0000
Files and hashes: 1: gAF5yk6vmaOq2Uung0D_8Gub1gc.roa (hash: eVAKmeO8heHGdx9Kcy2Kx3p7IXGpACADu9i5ILdct+c=)
2: vEZLqdJjhfVN9iVKwkiSbTcERbA.crl (hash: t0pa+q+Th+DKOfgp8c/Jq8aC7AaOrCXYNHp36UGQXiw=)
3: zyyxpnYwsTYjNu4Wy5twrx2x4fk.roa (hash: NQRYx+K4EclccAZE0WPjuwlvX5dADgQnuUhPYSSnRgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:2e:43:bb:41:83:f9:1d:78:32:7a:8b:cb:bb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc464ba9d26385f54df6254ac248926d370445b0
Validity
Not Before: Oct 27 12:00:04 2025 GMT
Not After : Oct 28 12:00:04 2025 GMT
Subject: CN=c0f2a665c5dadda78eeaf10f69569e1d22c72f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:15:01:b6:b9:0a:7b:fc:98:0e:9f:1c:fd:
31:eb:46:89:69:fa:68:e7:5e:60:56:58:37:3a:5b:
2f:a0:0b:93:26:1d:51:95:dd:99:0d:71:c9:3a:15:
af:d6:e8:c0:56:a5:8a:cf:c0:8c:cc:ec:2a:02:3a:
df:6e:82:db:9c:08:01:20:08:bb:35:65:3a:ec:a0:
76:b6:94:1d:21:a5:3b:a4:c0:7d:ad:1b:5c:99:58:
d3:ac:62:69:d6:70:6f:ec:03:5c:c4:f1:3f:46:54:
ec:52:c8:df:b3:4d:e4:a9:dd:b5:27:cb:30:8c:54:
13:24:28:c7:59:4b:dc:65:bb:d4:90:93:54:5f:33:
8b:90:ee:fa:92:eb:d0:5e:cf:8d:a0:7c:ca:86:c1:
ad:a0:95:f0:40:d2:59:39:6a:a8:f9:1f:64:ae:94:
55:ff:71:38:e1:db:8a:8f:96:a7:7e:d2:48:c5:25:
01:3c:0c:ac:70:06:6e:7e:b3:09:6c:5c:75:5e:d7:
56:b4:09:a9:fb:1f:aa:4f:0d:f5:b8:a4:e1:da:43:
28:ad:8f:b5:c8:e3:55:06:30:67:1f:47:46:b3:e4:
fa:be:ed:0c:33:45:e7:3e:18:d9:26:22:52:dd:95:
74:c1:5b:3a:7e:c3:5c:e7:0f:14:49:40:8c:e0:fc:
bf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F2:A6:65:C5:DA:DD:A7:8E:EA:F1:0F:69:56:9E:1D:22:C7:2F:85
X509v3 Authority Key Identifier:
keyid:BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:95:f4:2e:0a:c3:96:a4:b3:21:18:28:12:f0:f7:0e:2b:67:
da:49:07:f8:6a:fd:d0:f2:7f:fd:16:d4:bc:88:a6:16:27:23:
4a:12:03:ac:e8:d2:2f:40:ee:56:2f:64:1a:24:09:05:15:78:
25:3d:1a:57:05:49:62:26:7c:7e:b8:f0:d8:bc:9c:b2:6c:07:
d0:3e:56:0e:03:56:fe:42:01:c1:f6:a5:76:c3:8d:81:4e:be:
a2:bd:ba:b8:f7:cb:e4:63:c3:f0:38:32:b1:95:54:92:01:de:
2b:9b:fe:b5:71:68:bc:64:c3:55:c7:dd:bc:e7:b3:e5:48:8c:
e0:0e:56:83:9d:42:94:bf:5e:ca:2e:37:e8:d1:3e:1e:99:e5:
7c:ed:d6:5d:c7:e0:9c:ae:b1:82:ea:76:04:db:a5:c7:7a:65:
01:02:d2:f8:6c:ba:ae:44:ed:74:5f:bf:f8:a8:1b:dc:3b:6a:
f0:c7:fe:87:79:d5:6f:4a:9c:59:ce:1b:7c:eb:49:40:a9:3d:
04:ee:ed:46:8c:45:05:d7:75:5d:c8:e8:26:82:76:19:1b:ba:
de:f3:33:ff:eb:55:7b:4f:9c:7a:b3:e1:64:12:82:4a:85:8f:
fe:7a:85:f8:f4:d6:31:53:e0:f5:5c:2b:2d:b8:4c:eb:33:7e:
a9:33:b9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:34:03 2025 by rpki-client