Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
File: Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft (raw, json)
Hash identifier: Jssaq/E/IrMmcjyfSId9TPSTcw8I7e2+MjTl94heZSc=
Subject key identifier: 0F:E4:92:88:6B:C1:2F:04:6B:88:97:FB:13:5F:FC:A1:EA:E1:61:43
Authority key identifier: 56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
Certificate issuer: /CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Certificate serial: 019A71EED4B92A96B4A4230814FF712ECADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
Manifest number: 0BDA
Signing time: Tue 11 Nov 2025 08:01:08 +0000
Manifest this update: Tue 11 Nov 2025 08:01:08 +0000
Manifest next update: Wed 12 Nov 2025 08:01:08 +0000
Files and hashes: 1: Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl (hash: bCfpq8h1xJbzcSGoUpabNGulps5LOtIZbmcrpj6enzQ=)
2: Vz7t1xxZS7Y8mi76AGQLhqb1ZQs.roa (hash: f5Op16EAB77dhVLhwIcxz3vKwaJVulfI7NYLkrJ/rQU=)
3: reLkqggetUctFOKXfyoXX7VB7AA.roa (hash: mWj2m9BfD30uCVlB2O3NlLuI0ufXtR+chyS8T5aSe4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d4:b9:2a:96:b4:a4:23:08:14:ff:71:2e:ca:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Validity
Not Before: Nov 11 08:01:08 2025 GMT
Not After : Nov 12 08:01:08 2025 GMT
Subject: CN=0fe492886bc12f046b8897fb135ffca1eae16143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0a:30:db:f1:0e:89:62:49:84:36:8f:d9:ad:
5c:a6:88:d5:f9:cb:e9:70:f1:1a:42:bd:54:f9:ad:
eb:94:96:43:2c:b8:89:f9:85:fc:ab:2c:72:ec:b9:
fa:cf:9c:95:cf:ac:e3:45:ca:13:f0:25:95:d8:64:
54:08:a6:6d:35:cd:eb:59:19:10:52:1e:58:15:40:
97:e8:be:7f:51:73:f9:a6:f8:84:41:bd:70:03:e3:
84:b7:1f:29:56:c4:11:27:bf:50:72:c8:6a:6b:f9:
7f:35:30:59:1a:66:25:81:1b:69:11:e2:42:0f:90:
e2:de:5f:f8:5e:b0:1c:b9:d9:1d:44:02:2d:33:fc:
bd:8c:86:5f:86:e8:5d:af:9d:fb:de:a5:9f:60:b2:
f7:6e:ae:53:f4:72:3e:2d:90:da:63:82:ea:a9:b8:
59:37:42:67:a3:27:14:15:ee:0c:70:df:5a:53:cf:
dc:00:29:e7:26:14:6b:36:8e:45:63:cf:9d:0a:a3:
95:18:b2:b2:ba:bb:2f:59:7d:f9:45:88:eb:e7:c6:
7e:35:cd:04:30:9a:5d:f3:a5:1b:ca:f8:87:f0:60:
39:46:33:9a:f1:da:fa:1d:05:7d:9c:5a:ea:36:ab:
06:ae:d2:f6:b1:ab:d3:d2:a5:ad:5b:e4:d3:0e:7d:
b7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E4:92:88:6B:C1:2F:04:6B:88:97:FB:13:5F:FC:A1:EA:E1:61:43
X509v3 Authority Key Identifier:
keyid:56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3a:5d:69:63:30:a0:f7:02:47:ef:16:c9:a2:23:6f:d5:b6:
b4:1d:fb:c7:4f:58:a3:a7:ae:a9:76:96:bb:d0:30:6a:33:d1:
60:f7:cb:9f:e8:02:ba:cc:71:c7:bb:5a:04:1b:90:ed:4a:b5:
42:ae:e0:bc:eb:46:7a:65:04:e1:bd:ef:e1:73:07:f9:77:0a:
f0:a1:73:84:d8:42:b7:96:c8:1e:84:ba:1c:00:6e:01:b9:ef:
6c:30:20:7f:b9:44:6f:37:ce:49:a1:eb:e6:a0:a0:fa:d0:2e:
ef:12:9a:fc:f9:0d:f0:b7:81:b8:3d:5d:32:be:06:5e:a7:dd:
44:f3:83:72:93:2d:8d:65:fe:65:7e:46:04:0b:fd:c1:8e:ac:
00:c3:20:2d:a1:28:0a:f7:fe:ee:4b:11:f9:7c:07:4c:fd:85:
c4:a2:65:87:83:58:27:a1:21:e1:b5:4a:d4:7d:d5:b2:bb:6f:
14:84:9e:82:c9:b5:73:ec:72:27:7d:12:31:1d:0d:2f:a3:5d:
bc:bf:64:30:23:ea:64:6a:c7:45:73:86:ba:86:fa:ab:95:e9:
11:4b:aa:85:1b:6e:eb:9b:92:3c:5d:c4:2d:8e:1d:d1:d3:b7:
ab:46:84:0e:01:62:c4:58:82:3e:e3:53:2a:15:ab:f9:02:85:
50:f2:43:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:46 2025 by rpki-client