Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json)
Hash identifier: lWayWq9vJvgdiMKLpXf1++qoIgkj6Tsod13QaFwH3os=
Subject key identifier: 6C:01:83:C6:C9:04:44:7B:97:53:9C:46:02:E9:34:A2:B9:D2:4D:88
Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Certificate serial: 019A51F5A01CB486CB577F5C5C95A8BC0C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 03:00:43 +0000
Manifest this update: Wed 05 Nov 2025 03:00:43 +0000
Manifest next update: Thu 06 Nov 2025 03:00:43 +0000
Files and hashes: 1: BF5uYM34somF3uKBjwVBv6TvSUc.roa (hash: LMQTKQzXnQ/SBYJGX5sPOQPjZo/gmRmiCPcpMivc64U=)
2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: soO2XMJAlFSenIKZhqjhy2sJmSaVq4yzFFA/+DeICJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:a0:1c:b4:86:cb:57:7f:5c:5c:95:a8:bc:0c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Validity
Not Before: Nov 5 03:00:43 2025 GMT
Not After : Nov 6 03:00:43 2025 GMT
Subject: CN=6c0183c6c904447b97539c4602e934a2b9d24d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:1b:9e:1d:2f:00:59:0d:aa:3e:be:d3:fd:
81:e6:f3:ad:16:06:e6:9a:c2:b6:c6:c2:9a:59:db:
3f:d0:9d:09:03:0c:4c:e2:9b:e3:26:b1:c8:87:10:
66:b3:0e:03:12:6d:36:6a:73:56:0b:13:55:23:0d:
4a:d7:78:b4:a9:3a:44:35:d1:9f:0a:dc:11:31:0f:
7c:07:49:4c:40:01:a3:ff:ef:18:a4:59:9f:bb:f3:
b5:5a:9e:62:c9:5b:84:5e:02:5e:52:ce:8e:5f:e4:
79:19:93:3a:f9:7d:05:4d:c2:a8:85:31:5e:4a:f4:
f3:02:e6:1e:6e:41:d8:9b:c4:32:8a:67:80:f5:27:
ec:a5:c3:19:b0:f9:fb:a7:b7:9c:4c:60:7d:76:b2:
7a:b7:fb:b1:8a:3a:2e:92:35:fe:80:ac:3d:79:d9:
20:f7:fa:2a:b5:dd:f0:77:1e:ff:bd:51:c9:86:b1:
df:dc:ed:c9:44:48:f0:69:6b:ae:f4:3b:bb:d7:87:
cb:a2:7b:bd:b7:ed:3f:21:94:bf:cf:1f:cb:2c:1a:
ed:22:36:9f:fb:fc:10:f6:c9:e4:4f:ee:34:f7:89:
bc:57:24:d7:0b:17:23:ee:2b:ef:c8:d2:5c:ce:a4:
fe:b7:1b:b0:ca:4d:3a:40:04:5b:66:f0:d5:8b:b4:
62:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:01:83:C6:C9:04:44:7B:97:53:9C:46:02:E9:34:A2:B9:D2:4D:88
X509v3 Authority Key Identifier:
keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:fd:4b:0c:d7:72:4d:62:f4:34:d8:3f:5c:54:e1:39:03:46:
d1:fa:7b:44:f2:1b:e9:f8:17:91:41:47:0b:57:a5:b8:47:79:
cd:8b:4b:b5:f2:39:f0:72:b6:d8:bc:14:f5:c3:46:d2:78:ff:
67:55:49:6d:b7:51:5d:43:6f:7f:d6:bc:8f:7a:90:7c:04:5c:
88:39:9c:13:db:1f:80:1b:1f:79:60:c3:0b:0f:a9:00:ef:72:
2a:40:49:82:3d:23:08:05:64:35:73:b7:24:95:10:a9:f8:b9:
71:c0:27:f7:08:ed:cd:cf:41:d3:26:28:55:9a:69:4d:e9:15:
b4:ed:37:48:45:12:7d:03:b7:e1:4b:41:77:af:d7:93:8d:0c:
41:5c:93:40:c6:86:ee:d7:f5:49:ec:1b:1a:b7:d6:6a:4c:c9:
1e:da:18:f1:ea:fc:89:a7:5a:67:2e:12:91:c7:86:dc:b6:a9:
e7:0c:f2:88:f0:67:81:b5:d0:a7:7f:8f:91:a0:16:60:53:07:
55:af:10:74:24:e5:11:8f:bf:ee:47:1b:3d:91:38:df:51:f9:
12:90:12:9a:94:c9:74:fe:87:cd:11:b0:a8:ab:bf:88:ad:6e:
4e:98:86:97:f8:62:f1:70:74:e3:f2:f7:83:2d:88:86:ca:1f:
ca:c0:8a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:49:51 2025 by rpki-client