Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
File: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft (raw, json)
Hash identifier: ANOv9+0h5QLpDGuKg0wBbud5Hz8DIpRylF8wQF3Mv7w=
Subject key identifier: 1F:0E:0B:69:6E:CF:53:C4:13:10:E2:3E:59:D3:56:1F:15:D6:36:65
Authority key identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
Certificate issuer: /CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Certificate serial: 019A51F561735EB9F3057E00B90F99433FCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
Manifest number: 01A3
Signing time: Wed 05 Nov 2025 03:00:27 +0000
Manifest this update: Wed 05 Nov 2025 03:00:27 +0000
Manifest next update: Thu 06 Nov 2025 03:00:27 +0000
Files and hashes: 1: D98Ck1_qKOXalzx0pMS_FarSGM8.roa (hash: u49BF5lQyjsLl1bn3ULD3SUQ9N/pcixaCTatnIvy4v0=)
2: tCV34_eFEm-bBTr3p-Dum9J6ZzA.roa (hash: lJs/8jun541iQ5FmJ+SShA8Wi27D6ss5N6YmTLmASl4=)
3: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl (hash: aYH8l5/6t9AtlHp0sQGFcdnwAMZ+XYIPVkEULwC29QU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:61:73:5e:b9:f3:05:7e:00:b9:0f:99:43:3f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Validity
Not Before: Nov 5 03:00:27 2025 GMT
Not After : Nov 6 03:00:27 2025 GMT
Subject: CN=1f0e0b696ecf53c41310e23e59d3561f15d63665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:51:e1:c2:56:47:2d:f7:e9:25:25:03:b3:52:
d1:cc:e3:88:8f:ed:75:9b:3c:c3:09:cb:c4:f9:b9:
ad:ae:32:b0:c4:5f:47:b9:fb:63:85:0f:ec:86:58:
05:5d:1f:b2:ed:5e:3e:36:a7:63:35:4f:f3:8d:ab:
c9:a1:bf:51:a5:72:4a:31:a0:b2:f4:2b:0e:1d:de:
70:a5:37:c1:c2:85:73:b5:c2:74:05:9f:dd:6d:4a:
2a:1d:d1:02:b5:0e:08:12:e7:e4:79:63:8e:63:b2:
68:ae:49:e6:0c:2e:4f:70:79:f2:dc:23:29:a5:b7:
05:7f:38:bf:0b:73:66:fa:eb:b4:d9:f0:11:c7:54:
57:bb:7b:6d:0c:c2:c0:6e:fc:3f:a1:97:1b:06:39:
ea:4a:6b:78:ee:48:1b:02:4b:ae:0e:ea:fc:02:36:
ea:cb:31:00:f0:81:93:2e:71:a9:e1:b8:47:d0:b0:
f6:dc:4d:dc:48:5a:7d:f1:3d:00:20:a3:62:6e:de:
63:3d:60:56:63:db:96:ff:18:2b:25:4d:3e:c9:01:
d6:69:c9:20:d9:cc:f3:24:c3:6f:06:29:f6:aa:9d:
64:52:ab:85:01:1a:cc:3d:bc:bb:45:eb:7d:16:6b:
57:cc:5c:8f:11:2b:c5:24:17:03:c3:83:f1:03:31:
89:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0E:0B:69:6E:CF:53:C4:13:10:E2:3E:59:D3:56:1F:15:D6:36:65
X509v3 Authority Key Identifier:
keyid:BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ad:7d:93:92:c4:01:fd:12:b2:fb:59:c0:8d:5e:e2:33:f7:
ff:83:3d:35:26:3f:32:6b:60:8c:f9:fb:f6:53:29:09:6e:f9:
1a:2d:2d:c6:be:fe:3b:9e:82:d1:98:2d:38:09:92:3c:69:73:
19:bd:41:e5:ad:b6:b4:24:26:6e:ae:a4:65:c2:49:a8:74:8b:
dc:41:20:47:29:12:e2:70:89:7c:8c:d3:56:dc:5e:e2:b9:85:
6a:22:cf:73:53:07:9c:dd:6c:50:61:f0:3e:d1:64:74:27:5a:
78:6b:d9:57:9d:a6:d0:1e:37:b3:7a:24:d3:6c:86:32:70:a6:
16:c6:42:74:36:11:c4:2a:7d:ee:68:02:34:8a:6d:cf:b4:c9:
ae:0b:42:c4:32:0c:89:b3:66:21:cc:5c:ce:ec:32:0a:51:e8:
41:c3:a5:cf:9b:42:42:53:37:2a:e1:0c:97:f5:9b:d6:ae:c2:
e7:6e:7b:b1:f3:5b:55:67:05:59:1d:a9:91:9e:fb:73:80:cf:
bd:3d:01:59:dc:15:8f:7d:0b:cf:8c:06:52:dd:30:7b:e4:57:
18:ab:fb:8c:64:49:e4:08:bc:25:bf:74:ff:f6:0a:45:1a:9d:
e0:ba:26:20:cb:7c:e1:51:a4:02:3c:6d:a1:e7:6b:bc:21:08:
f2:d0:f6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:05:50 2025 by rpki-client