Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
File: pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft (raw, json)
Hash identifier: +sZumHyHmw0xurNhcgfYZiDVsSu5nFjv/jpy9ER8V1Q=
Subject key identifier: 2B:31:A3:5D:71:A6:4E:9A:A0:B4:66:5B:53:E7:E7:42:F8:36:BF:A6
Authority key identifier: A5:50:04:66:1A:09:E2:67:5F:C1:59:9D:4E:40:02:7D:77:8C:40:4C
Certificate issuer: /CN=a55004661a09e2675fc1599d4e40027d778c404c
Certificate serial: 019A70A582E7B74F131AE4AA6CF7C7EE943A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
Manifest number: 084F
Signing time: Tue 11 Nov 2025 02:01:26 +0000
Manifest this update: Tue 11 Nov 2025 02:01:26 +0000
Manifest next update: Wed 12 Nov 2025 02:01:26 +0000
Files and hashes: 1: e4pYTgrST_OIh_0Qkxb1VUF6r3Y.roa (hash: CwIOS1Io6ZhDFcyydlZIo2WNdIO73K5UrPWTpvd7EH0=)
2: pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl (hash: A6BkTMVYhpSIsd7VmSc5yExrLuOgMvCSYxiPbJA54lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:82:e7:b7:4f:13:1a:e4:aa:6c:f7:c7:ee:94:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a55004661a09e2675fc1599d4e40027d778c404c
Validity
Not Before: Nov 11 02:01:26 2025 GMT
Not After : Nov 12 02:01:26 2025 GMT
Subject: CN=2b31a35d71a64e9aa0b4665b53e7e742f836bfa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9e:8d:bc:34:60:cc:28:45:74:94:0b:45:60:
e3:28:7c:df:69:14:c6:ef:89:16:6c:19:7a:1f:2e:
33:e9:b1:d9:2d:97:7a:ae:af:80:c1:24:eb:b2:53:
a8:0a:3f:e0:76:ce:7d:3e:70:01:f0:91:64:ee:c5:
7d:c5:75:d5:03:83:15:45:d6:e3:a1:5b:2d:3c:11:
37:b7:95:49:d1:f9:47:6a:f7:ef:22:da:10:9b:c5:
f3:9e:e7:09:54:d3:a8:fe:dc:ad:24:8a:5f:29:f5:
ef:7c:3f:c0:df:9c:12:e5:75:d2:bf:03:d6:62:b8:
14:8f:a7:8b:1c:95:1c:ec:8a:3e:4b:76:30:24:71:
5c:7b:15:85:56:30:93:16:12:bb:f1:7d:2e:6a:f9:
4c:d3:77:37:f0:bf:91:05:37:b8:83:c8:33:34:25:
98:19:b0:ed:e7:f9:ef:eb:4c:d1:15:35:95:b5:d2:
01:0c:ae:7f:9e:b4:0a:28:49:f3:a3:3e:df:21:ed:
0e:1e:af:bb:0a:54:21:cd:76:2f:cd:1e:eb:eb:ba:
d9:77:65:79:41:47:6c:0c:44:bb:17:e3:2f:94:80:
8e:e5:8c:d7:5b:78:99:2b:23:05:9d:4e:c1:44:25:
58:58:f0:c9:5a:00:0b:5d:2e:16:e5:70:7c:af:99:
42:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:31:A3:5D:71:A6:4E:9A:A0:B4:66:5B:53:E7:E7:42:F8:36:BF:A6
X509v3 Authority Key Identifier:
keyid:A5:50:04:66:1A:09:E2:67:5F:C1:59:9D:4E:40:02:7D:77:8C:40:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:04:74:77:ec:22:3d:75:e5:ab:99:99:71:19:50:17:0f:3d:
8f:79:26:b2:de:56:4d:84:d4:5c:8f:79:25:4c:f0:32:b7:72:
df:1e:5d:a2:4a:8e:5d:31:ea:b1:3a:e1:37:79:64:34:43:0b:
5f:e1:37:14:c2:46:99:12:64:50:f5:fb:6b:02:ac:5d:e7:41:
09:c7:e4:ff:02:d2:76:73:65:7f:f7:98:45:0f:6d:8d:5e:12:
bb:b3:0d:20:b2:d4:c9:61:f4:37:de:f1:2b:27:93:91:9b:bd:
6b:c0:7d:09:51:a6:89:2d:74:3b:99:80:4c:2c:3b:54:42:0f:
5e:06:c1:a7:41:c2:07:c6:c5:1d:22:19:37:b2:8a:b7:e3:17:
1e:ec:bb:76:b8:38:40:72:3f:35:67:8b:bb:ea:b7:d4:82:11:
c2:c3:fe:b9:a6:7a:69:b7:7d:07:0f:61:a0:f9:1e:f1:fc:34:
ca:44:32:33:19:5a:8e:89:fc:a0:3b:5b:cc:83:6d:6a:91:35:
19:72:e1:85:73:c8:d8:ad:45:bc:43:63:a3:04:34:31:65:cf:
e5:85:40:a9:bf:13:c0:48:75:70:4b:b8:3f:70:b8:ef:29:7b:
d3:ab:9f:f5:00:50:ed:52:89:ea:1b:45:2f:c5:a4:7f:f8:86:
51:79:9f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:44 2025 by rpki-client