Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
File: vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft (raw, json)
Hash identifier: 4SwnBVPrfYf+pI8R+E5etOdIVK1JglmCRc0KBVPUCWc=
Subject key identifier: D8:57:D8:F3:CC:F8:8F:A5:CF:9F:3C:DD:94:C9:DC:0D:88:6A:AD:78
Authority key identifier: BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
Certificate issuer: /CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Certificate serial: 019A71B8714734F3E51715985270F107D1F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
Manifest number: 0D50
Signing time: Tue 11 Nov 2025 07:01:44 +0000
Manifest this update: Tue 11 Nov 2025 07:01:44 +0000
Manifest next update: Wed 12 Nov 2025 07:01:44 +0000
Files and hashes: 1: 5xqkx7rxr0A4ZoZWTCOMeWbUwt0.roa (hash: 4Hck3JY+pm1ENmjLoSNCLwI2ygQA04QrM7UO64TPQ/E=)
2: Tf-7kei6W8Gb1yTlztC-z7hqkGM.roa (hash: A3Jg7NsFsBNEFPdV1BOzgwIAFoCzktMr6ou5P5ENzQU=)
3: vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl (hash: JaR6P+ikAoBLU22OIm1VdnYCms/a460t+ONV5oWP90A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:71:47:34:f3:e5:17:15:98:52:70:f1:07:d1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Validity
Not Before: Nov 11 07:01:44 2025 GMT
Not After : Nov 12 07:01:44 2025 GMT
Subject: CN=d857d8f3ccf88fa5cf9f3cdd94c9dc0d886aad78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:01:92:ad:b6:ac:6f:c2:55:9c:be:8b:54:
cf:ad:1e:9a:c8:34:f2:da:7d:31:f7:f8:a7:1b:5f:
ef:29:2e:42:0d:20:9e:88:2d:ab:e5:c3:49:5e:80:
c5:a4:3f:9f:4c:f5:ea:c1:7d:39:12:8b:d7:d8:e8:
71:54:f1:17:7d:58:39:ae:cf:3b:35:d3:c8:af:24:
6d:f4:0a:59:61:10:ae:3f:a3:8f:3f:16:78:53:85:
1a:11:ac:d8:c2:e6:79:5e:20:39:56:ab:4a:38:94:
ac:23:84:6d:cf:07:7b:7f:26:d7:2c:21:98:82:ec:
34:7d:93:22:1c:5c:e2:ea:3e:73:ad:e9:61:f3:c7:
68:d5:e8:2b:ac:ad:a0:0a:2d:6b:e9:41:f3:00:db:
31:d7:ff:dd:18:52:a5:0c:6c:d6:2b:f8:32:ab:2a:
7e:a5:5f:41:a8:a6:5c:8b:6a:8c:c0:9f:96:05:cb:
7f:ba:81:50:33:fd:d7:6d:c6:96:c1:05:ee:ff:97:
38:9d:24:27:1c:ec:35:60:1f:fe:a9:28:f8:3a:e6:
78:a8:e0:91:1d:3c:59:da:a8:f8:90:17:17:62:e3:
93:ca:ab:9a:3a:06:c0:89:a6:e4:2a:58:d4:ec:db:
62:4c:d1:a4:e6:7d:1a:d7:91:c5:c5:aa:61:f0:0a:
fb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:57:D8:F3:CC:F8:8F:A5:CF:9F:3C:DD:94:C9:DC:0D:88:6A:AD:78
X509v3 Authority Key Identifier:
keyid:BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f4:6f:1a:5f:8c:e6:1c:b8:c8:a6:4b:11:6f:4c:86:9e:68:
90:6f:61:f1:ab:a1:ea:61:bc:4e:dd:c0:2a:1f:ae:de:42:92:
9c:5b:dc:40:30:47:2d:c2:9b:e0:05:ea:80:8d:c0:9c:d0:9b:
0c:78:ae:28:a5:5e:9d:cf:48:b1:9b:d2:dc:7e:f2:ba:60:e8:
70:37:97:f3:5e:41:8f:86:d3:75:80:67:17:dc:c1:36:d1:34:
b6:ff:47:56:81:67:6c:10:cc:ad:d9:52:cf:4e:6a:6b:87:d8:
d5:2e:ac:82:e5:c1:6c:e6:02:31:5c:48:57:67:ab:46:c4:03:
9b:d2:e4:01:5b:06:30:f7:76:83:89:e5:02:2a:4f:d6:cc:1f:
e4:d5:a3:e1:2d:ed:8e:55:31:9c:09:d4:fa:62:2d:57:1a:8f:
c5:f1:66:40:1d:5a:62:e6:9e:a8:f7:17:03:22:e4:ba:28:73:
ca:f8:57:79:62:9f:2c:ff:59:89:3c:8c:a6:29:90:e9:39:2c:
34:3b:3c:81:35:7f:3f:ad:12:0a:f9:e2:b5:a3:26:f2:e6:a8:
62:24:73:2b:a9:d2:7e:78:52:b1:36:78:e4:54:d0:aa:33:74:
3f:97:38:78:ff:95:f9:dc:5e:e7:0f:34:33:bf:2e:1c:8d:4c:
c8:33:9a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:21:56 2025 by rpki-client