Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
File: vfyN37hBh58OUw3OO3-Fgn8MGT8.mft (raw, json)
Hash identifier: ORbcyapRnluXRrTTaQtXLynBDtGK/pl8gJWXtOwWgvo=
Subject key identifier: CA:C3:3E:17:18:0A:60:3F:2B:45:6A:F9:2B:85:4B:6E:10:82:A4:94
Authority key identifier: BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F
Certificate issuer: /CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
Certificate serial: 019A71B7C567E1EE1B32EAA4AD768D36AA02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
Manifest number: 069F
Signing time: Tue 11 Nov 2025 07:01:00 +0000
Manifest this update: Tue 11 Nov 2025 07:01:00 +0000
Manifest next update: Wed 12 Nov 2025 07:01:00 +0000
Files and hashes: 1: evKF7Ghixw06TsX8m9WS1kttuTQ.roa (hash: C0t0ubGvyf/fMEfN+yYg9iML6okU33nNE7cYDrXAdGg=)
2: vfyN37hBh58OUw3OO3-Fgn8MGT8.crl (hash: Hb0wdebrgpfkuscz7ROR4UNbJwtRYYEM/ha4n2ixelg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c5:67:e1:ee:1b:32:ea:a4:ad:76:8d:36:aa:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
Validity
Not Before: Nov 11 07:01:00 2025 GMT
Not After : Nov 12 07:01:00 2025 GMT
Subject: CN=cac33e17180a603f2b456af92b854b6e1082a494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:74:47:e1:ae:73:57:15:d8:14:0d:6c:d1:d4:
59:af:1b:fd:00:e0:74:86:3b:c8:3b:bf:49:b0:5c:
25:3c:77:7a:5f:d6:f0:48:0b:32:f5:70:74:cf:c9:
af:bb:41:fc:da:af:ca:6b:05:1a:88:b0:6e:df:f0:
ee:eb:98:c2:ba:70:a3:22:df:98:cf:a5:56:e7:56:
e4:cf:4f:2b:12:5f:61:53:d2:3f:89:08:bd:56:14:
2d:b1:4d:bd:26:b7:a6:65:38:f5:0f:2a:dc:14:2a:
ea:7b:cf:0b:9f:33:45:86:7d:de:cb:87:0c:65:c3:
1b:61:26:e1:d2:5f:7a:65:b6:77:36:4a:96:d7:e4:
12:41:e9:aa:67:c2:e9:81:93:dc:51:e7:9a:96:65:
3d:09:2f:ca:80:43:ca:6e:39:26:50:ba:3d:5b:be:
94:38:23:63:67:ec:48:a8:1b:0c:66:d9:46:d1:ab:
ff:82:d0:68:bd:64:2a:80:ea:d1:f1:ce:17:b8:bd:
ac:7e:2b:80:a7:9f:66:12:70:a3:e8:3d:ae:71:09:
21:0d:56:ae:12:8d:9c:ba:b9:b6:c3:cc:f0:cb:00:
41:e9:ba:10:69:ce:f6:8a:c0:04:5d:3d:4c:60:fe:
3c:2d:41:18:1c:9b:6b:62:bd:82:c6:98:2c:d7:6c:
fa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C3:3E:17:18:0A:60:3F:2B:45:6A:F9:2B:85:4B:6E:10:82:A4:94
X509v3 Authority Key Identifier:
keyid:BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9c:e4:a2:bb:a5:d1:27:a1:91:53:fb:ad:f1:b2:60:dc:6d:
fb:29:d0:26:e4:1e:b6:63:6c:e1:8a:ec:93:16:a2:73:d5:6c:
64:bd:49:25:91:9d:ce:35:ab:f9:2a:09:94:af:cd:b2:23:8d:
37:da:86:68:c2:5e:27:13:84:3f:e4:64:87:a0:a1:07:83:15:
a8:c1:89:80:18:8a:66:4e:33:96:60:54:79:90:c0:65:77:33:
1a:b8:4e:14:39:9f:59:4e:5b:52:14:9f:fd:4e:c5:88:4e:96:
11:64:5c:a8:f9:14:d4:c3:ef:d9:a5:19:20:63:e1:4d:db:43:
2e:17:16:cf:36:2e:5b:dc:17:74:9c:2e:71:fd:be:a4:ee:81:
ec:33:39:93:c7:65:4d:26:1e:c3:bc:aa:05:ad:e7:9f:5b:1d:
18:ed:06:b9:62:ba:db:22:32:54:23:be:4b:2d:d7:04:14:43:
9c:0d:ea:52:6a:3b:98:a6:10:64:9e:bf:4b:34:be:0d:ab:7f:
80:68:2e:55:d8:1e:d0:cf:2e:ff:50:42:88:47:42:2b:8b:c0:
6b:7d:d4:65:e8:d4:cf:84:2a:6c:08:fa:bb:39:8e:f9:a7:fe:
06:38:ec:d3:d1:2d:6d:be:c3:cb:1a:3c:f1:0f:e5:93:5a:c4:
85:87:c0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:53 2025 by rpki-client