Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
File: vQScpC4dgs4ntUu_0Bd4HVRaebc.mft (raw, json)
Hash identifier: jhU+Ij4ZQkLq3fnXwlE0Dg8CFHk7RAyx/ETYXn72jxk=
Subject key identifier: A7:59:BF:AE:97:0A:E3:D4:C4:7F:88:0B:B0:60:68:86:AC:FE:69:F6
Authority key identifier: BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7
Certificate issuer: /CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7
Certificate serial: 019A71B83CB30CC08216C244CA7034F068CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
Manifest number: 0906
Signing time: Tue 11 Nov 2025 07:01:30 +0000
Manifest this update: Tue 11 Nov 2025 07:01:30 +0000
Manifest next update: Wed 12 Nov 2025 07:01:30 +0000
Files and hashes: 1: QDWgbXviJq4AecTUTzdtmUBRPkM.roa (hash: w5dWr+EFjY2DSPcv8scrS3s0nFXLYMuY90DVs/hZPLI=)
2: vQScpC4dgs4ntUu_0Bd4HVRaebc.crl (hash: KPgq27+/XNyANZMx3x3qawBvrVHvvDCNGrf2NFv1DOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:3c:b3:0c:c0:82:16:c2:44:ca:70:34:f0:68:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7
Validity
Not Before: Nov 11 07:01:30 2025 GMT
Not After : Nov 12 07:01:30 2025 GMT
Subject: CN=a759bfae970ae3d4c47f880bb0606886acfe69f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:1b:0b:70:ab:90:d1:d1:85:2a:5c:7d:e8:
64:22:5f:e4:1d:34:b2:60:ae:ae:60:7e:b0:2d:79:
c1:8f:66:49:42:d7:b3:d1:2c:85:6f:b0:2b:33:ee:
69:a1:e3:ad:d6:4f:c4:aa:7f:67:20:69:f8:b7:aa:
1f:cb:ee:88:82:ed:80:ad:1f:b8:cb:2e:f8:27:37:
0b:8b:81:99:8f:89:f7:f7:cf:be:99:15:d6:91:19:
3b:ae:54:a3:27:ab:dc:ba:78:d3:18:24:0d:00:f9:
40:71:1a:be:f3:2f:dd:f8:25:cc:1b:bc:ad:33:39:
51:7e:01:3d:c1:83:14:6f:10:d2:88:c4:ba:f7:3c:
1c:a2:4d:48:0e:cb:16:54:56:36:54:47:36:db:bc:
49:36:59:a8:4e:24:ef:bd:a9:01:4e:5f:43:cd:bf:
ce:3a:83:6f:d8:aa:2d:e3:44:75:24:e7:b8:4a:e7:
2f:61:78:96:82:15:ca:d1:e2:08:81:06:45:57:df:
6b:70:bd:13:cb:3c:98:08:25:43:bb:de:0f:ae:6d:
d1:15:fb:51:b1:9d:ad:a0:83:c9:8b:49:8f:b5:fe:
25:12:0a:eb:49:8b:a7:6e:81:13:5e:49:ed:8f:d6:
5e:ff:27:94:39:25:44:1e:1b:df:72:f5:82:b7:df:
04:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:59:BF:AE:97:0A:E3:D4:C4:7F:88:0B:B0:60:68:86:AC:FE:69:F6
X509v3 Authority Key Identifier:
keyid:BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8a:25:a2:5d:1a:7a:99:ed:bf:18:40:05:58:c7:bc:9e:bd:
7c:c1:dd:fe:dc:21:e1:88:92:6b:34:a9:ab:8d:1b:82:98:e5:
6d:fe:86:95:fe:8c:0d:db:6a:58:bb:c1:5c:7f:84:c0:4d:a4:
7a:76:04:8c:24:8b:33:33:9f:77:11:a3:57:4a:03:b6:89:b9:
94:1e:e7:cb:bc:bb:c4:6f:85:18:c6:98:db:74:ca:de:c2:c5:
75:6d:b6:e0:82:a0:c2:53:25:19:28:77:9b:e6:7f:99:28:57:
da:7f:d5:5c:3a:95:b8:89:f9:c9:d3:4f:95:f1:9c:69:42:2c:
7e:cc:c0:2a:92:6b:aa:3d:a4:d9:cb:b5:de:ec:1c:22:06:f5:
bf:90:4e:ec:8c:da:4e:1f:34:34:c6:ca:8d:32:fb:e5:55:49:
3e:14:1f:b5:71:ec:e9:27:50:18:d6:41:7b:8f:07:80:fb:a3:
f9:b4:4e:c5:e8:fd:2a:1a:72:52:c8:c5:d2:f9:7c:e3:13:02:
c6:37:9b:07:74:fb:c0:f8:39:59:c4:3a:86:51:f9:9b:fc:da:
76:d3:83:77:3d:a1:3a:b2:0b:f3:d1:55:1c:82:8d:b8:66:74:
06:98:bd:4e:6b:ea:4d:22:43:19:47:8e:64:1b:54:bc:f2:9a:
e2:98:74:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:54:50 2025 by rpki-client