Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
File: r1vEnV8BojWvkonPSSav_vevkrA.mft (raw, json)
Hash identifier: HGcyuOOx5ZRxaGzRlr3xs3DQC9MfnUeE2RNEx//MlVQ=
Subject key identifier: 85:8D:07:0F:93:3B:E4:77:69:F1:38:8A:A0:69:EE:79:51:97:5B:79
Authority key identifier: AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0
Certificate issuer: /CN=af5bc49d5f01a235af9289cf4926affef7af92b0
Certificate serial: 019A71EEF06DDF6A22CB337BE4E8D529A9AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 08:01:15 +0000
Manifest this update: Tue 11 Nov 2025 08:01:15 +0000
Manifest next update: Wed 12 Nov 2025 08:01:15 +0000
Files and hashes: 1: 6d-AyMF7ZaaM5Mjt7QfO5cW_2AY.roa (hash: ZUwXdaD1P85dbAvt2mEWIMU5POb+euNbtRK/RK4dLgk=)
2: r1vEnV8BojWvkonPSSav_vevkrA.crl (hash: Kw70Eq1iIoh1xmUmAkNlSMiVX5nXx3Le2xB8sJ3fc74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f0:6d:df:6a:22:cb:33:7b:e4:e8:d5:29:a9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5bc49d5f01a235af9289cf4926affef7af92b0
Validity
Not Before: Nov 11 08:01:15 2025 GMT
Not After : Nov 12 08:01:15 2025 GMT
Subject: CN=858d070f933be47769f1388aa069ee7951975b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:78:5f:b0:50:87:18:73:76:d1:e2:d4:37:
67:8d:6d:5e:9c:c0:99:56:77:cc:ea:c1:d2:0d:35:
b6:5b:c1:00:cc:b0:93:c9:7d:49:fb:68:82:a5:cd:
53:a0:c8:ed:2b:20:fe:77:24:c6:d3:67:fc:7e:2e:
f2:03:6e:5f:37:fe:a8:b5:99:d3:c7:b0:51:1c:01:
8f:c8:0f:fe:1b:9b:0a:fa:62:dd:c5:ea:36:6e:80:
06:7e:69:4f:ba:de:6e:6b:9f:f0:c8:c4:3a:9c:d6:
e3:41:65:cd:99:f6:e9:3f:62:e5:37:ed:14:d9:06:
62:bc:3a:f9:76:e0:45:f8:e8:43:8a:aa:e5:d6:23:
dc:40:30:f8:1c:94:e3:1c:fa:9b:f6:ed:21:25:64:
c6:22:32:ef:f6:f3:b4:ef:76:5f:c9:60:57:82:f1:
26:e3:0e:f5:ce:64:8d:72:3d:65:d2:31:c1:e8:d1:
75:61:d8:45:81:c5:12:d5:10:0d:f0:4e:58:03:8c:
e8:05:8e:b8:e4:4f:8e:f2:76:23:69:ab:e6:a1:06:
2b:5c:44:d5:81:52:17:c6:da:49:58:05:b4:1d:62:
0c:3a:cf:e9:18:32:e2:f7:46:ef:cf:2a:5c:e2:0f:
70:50:cd:f9:6d:d8:38:d0:ab:d3:0f:14:14:8e:fe:
04:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8D:07:0F:93:3B:E4:77:69:F1:38:8A:A0:69:EE:79:51:97:5B:79
X509v3 Authority Key Identifier:
keyid:AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:52:74:f6:fe:2d:9e:8e:d8:a7:a4:98:c8:f7:01:c0:2b:c1:
77:11:14:fa:3c:93:3f:72:b5:8e:f9:41:b0:e9:84:41:a1:cc:
21:00:76:0a:42:87:45:db:c6:fb:e3:b2:41:3e:9c:83:03:86:
68:ee:5d:ca:34:44:98:fd:d9:ec:5a:70:b0:1f:bf:ad:8e:43:
ae:12:96:e6:c0:d4:72:80:2f:87:50:2d:28:2e:3f:e2:c4:e6:
3a:1e:18:b4:ed:8f:4c:ce:64:16:78:c9:df:83:2d:00:56:0b:
a6:65:70:cc:6b:f4:63:fb:32:61:6a:b8:58:9d:b5:e9:2b:d1:
47:59:4d:10:ba:6e:df:19:d3:70:dc:8d:ff:4f:25:02:b6:61:
c2:86:16:bd:37:5d:19:ef:2a:ac:01:4d:3a:9c:d8:52:be:53:
3c:f6:42:d9:89:27:16:9e:fa:92:a4:89:ff:92:aa:73:23:df:
b9:b6:d9:67:8d:57:a7:53:a6:47:10:06:00:87:5f:ac:49:c1:
96:4e:9d:fd:46:2e:9d:5b:d8:24:90:3a:ca:2e:f6:b2:85:d0:
00:78:e5:f6:9c:3f:d1:a5:0e:5c:10:4d:d8:6c:02:8a:66:0b:
e7:eb:d1:44:74:86:ae:ac:79:80:05:82:22:1b:72:f5:00:5f:
8d:8a:4e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:57:59 2025 by rpki-client