Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
File: vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft (raw, json)
Hash identifier: b6up3JyJMOuQjixu5eN5+WsULigMOf89EQ/3EuA/xTE=
Subject key identifier: 8A:CE:CB:40:4F:C2:9D:F3:7E:73:8B:97:18:56:5A:F4:D2:69:B3:BA
Authority key identifier: BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED
Certificate issuer: /CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
Certificate serial: 019A71B79E1503D79934A7D61CBA37102C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:00:50 +0000
Manifest this update: Tue 11 Nov 2025 07:00:50 +0000
Manifest next update: Wed 12 Nov 2025 07:00:50 +0000
Files and hashes: 1: 26eRBtfHaWUq94c0EN14EglvEno.roa (hash: rVQUyz2NEj2yBSOTyg+XToghqiDGJFkQfMW8NYYr5DE=)
2: vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl (hash: Dh7OHAsQuxROt3ej/Bi2AFgzzntdeMAAboIMBmbgoGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9e:15:03:d7:99:34:a7:d6:1c:ba:37:10:2c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
Validity
Not Before: Nov 11 07:00:50 2025 GMT
Not After : Nov 12 07:00:50 2025 GMT
Subject: CN=8acecb404fc29df37e738b9718565af4d269b3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fb:90:22:45:4e:3d:fb:97:5a:ef:58:50:ea:
61:02:e9:44:76:26:ac:e1:b2:18:66:dc:ab:72:0a:
f5:7a:44:77:c7:1f:7f:7c:57:d3:9a:ed:97:e2:4c:
4f:86:db:67:62:38:00:2d:d0:ba:0f:e2:92:9d:99:
0d:9a:c0:da:c5:27:15:f3:ae:4b:83:c4:1e:e2:d2:
86:a2:f1:5c:3c:1f:c0:9b:3b:7e:38:29:62:fe:d8:
3e:b9:a8:30:05:da:28:fb:35:69:6e:b0:63:09:53:
3d:1a:a9:38:5a:ab:eb:a6:e5:80:b3:18:d0:86:32:
24:e7:b2:9f:c3:3f:a4:8f:0f:59:2d:30:50:a8:56:
c3:e3:9d:0f:b6:07:ac:f0:f1:2d:73:01:da:f3:ec:
02:67:2d:14:36:c6:55:59:4a:16:75:99:67:ce:af:
e2:75:c2:ce:9e:0a:ee:88:05:b7:b2:5a:5b:1a:16:
c6:e8:e3:2d:72:cd:1b:0e:13:5c:2f:73:6e:4d:9a:
4b:b4:8e:77:e0:63:47:f0:ef:76:e2:3a:3a:a2:70:
92:33:f3:22:c2:a0:df:c9:06:52:90:0d:12:1b:c2:
cd:bd:f1:5b:2c:c3:12:b1:ff:86:59:a6:12:32:7c:
eb:af:85:2f:98:4f:d5:fc:67:10:c1:3c:d2:b3:b8:
ee:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CE:CB:40:4F:C2:9D:F3:7E:73:8B:97:18:56:5A:F4:D2:69:B3:BA
X509v3 Authority Key Identifier:
keyid:BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5e:0c:2b:54:7d:a5:e6:76:a2:08:1f:4d:4c:a0:fa:85:7e:
70:36:78:0a:b1:6c:7e:b6:2c:cd:c6:16:a5:a9:3e:6f:3e:f1:
0f:aa:db:26:57:41:86:9b:13:49:7d:c4:a0:e1:76:30:39:0a:
e6:ca:d4:e0:eb:aa:66:09:19:cd:2c:59:b1:22:c4:31:04:f5:
b1:81:e5:74:4b:86:e4:03:fa:63:b5:b4:58:66:41:26:ab:19:
f2:cc:ae:40:f3:74:e8:93:5a:ff:05:02:7c:c8:32:03:ae:3f:
e4:e9:2a:91:4e:fa:2e:e4:47:1c:2a:c1:a7:93:da:ee:b2:ad:
e2:a8:e4:fd:3c:b8:3b:b7:f4:8a:74:5a:2b:30:66:36:2d:9d:
a4:2b:a8:16:14:a0:fb:97:39:e0:f8:3c:58:36:47:49:e2:76:
65:e7:f3:fe:34:3b:9e:67:a7:df:30:ab:a6:8a:e1:72:5d:da:
95:8d:68:78:cf:5d:d7:fa:d2:4f:da:cf:51:0b:3d:1e:8f:2e:
7c:45:9e:bd:31:d5:e8:86:f4:c1:ee:e9:b4:c3:41:c0:c2:d6:
4f:62:5f:de:17:56:17:09:d6:10:aa:34:df:64:c4:5e:52:65:
f9:10:24:5b:c8:ed:3a:55:65:dc:56:bb:82:17:61:fc:b0:6e:
9d:b4:5d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:55 2025 by rpki-client