Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.mft
File: vOLbTWWaY-QstUTFf5mjNvfZjtA.mft (raw, json)
Hash identifier: WU9caYS2HnHYy+n3BsX68r15i0Z0DJjFaDNPP73aCGw=
Subject key identifier: 8C:BE:44:FE:CD:3F:EA:F1:4F:22:CC:C0:61:DB:F8:BA:16:0D:20:0C
Authority key identifier: BC:E2:DB:4D:65:9A:63:E4:2C:B5:44:C5:7F:99:A3:36:F7:D9:8E:D0
Certificate issuer: /CN=bce2db4d659a63e42cb544c57f99a336f7d98ed0
Certificate serial: 019A71EE6FA804BB83646D9F92C946B0DB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOLbTWWaY-QstUTFf5mjNvfZjtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.mft
Manifest number: 0262
Signing time: Tue 11 Nov 2025 08:00:42 +0000
Manifest this update: Tue 11 Nov 2025 08:00:42 +0000
Manifest next update: Wed 12 Nov 2025 08:00:42 +0000
Files and hashes: 1: Kyy8GZTzk5jbpc-sQWZN_GCAwek.roa (hash: 0Z7eyKyncAl0NjLC6raqvRk4YOeLcpvsAk5XysLATes=)
2: vOLbTWWaY-QstUTFf5mjNvfZjtA.crl (hash: eiZTgf2aMjx/KlV4qPND8tWMktHxLDum9ewXhe95y0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOLbTWWaY-QstUTFf5mjNvfZjtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:6f:a8:04:bb:83:64:6d:9f:92:c9:46:b0:db:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bce2db4d659a63e42cb544c57f99a336f7d98ed0
Validity
Not Before: Nov 11 08:00:42 2025 GMT
Not After : Nov 12 08:00:42 2025 GMT
Subject: CN=8cbe44fecd3feaf14f22ccc061dbf8ba160d200c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:37:07:bc:4d:7a:f0:a7:5c:5e:16:1a:a0:
6f:7a:7c:fa:e7:da:dd:ff:67:d2:71:2d:fa:81:df:
fc:30:ee:ff:a6:c9:21:4a:34:df:35:84:86:14:57:
aa:74:ec:ed:94:fe:a8:8b:8a:44:43:fa:a7:80:9b:
f9:93:d9:ac:91:36:32:43:21:b4:85:4a:a6:89:df:
47:ea:0f:92:cb:cd:27:66:e9:bc:a5:c6:c9:a0:8a:
2b:f7:00:3b:1a:f0:02:15:81:e7:61:bc:7a:79:07:
51:b2:af:2a:9d:78:6e:5a:d7:7e:41:3f:96:23:48:
7e:e1:9f:b9:bb:9e:8a:64:b3:24:d7:fc:d5:bd:95:
1a:a5:f2:c5:c4:6c:6f:00:02:0e:e5:fd:91:20:60:
db:62:f0:76:a7:11:2b:76:32:7c:16:e4:2b:39:95:
67:97:31:57:23:15:62:05:3d:32:be:15:00:a1:d5:
14:9a:60:05:05:e4:fe:2c:50:88:e9:e1:64:43:12:
9f:5d:b0:ef:88:81:5f:af:30:a4:16:31:60:a0:25:
eb:fa:0f:e7:89:00:ad:66:4b:50:db:ec:00:c9:fc:
dd:c1:94:64:0b:8d:ac:3a:26:da:f1:56:f4:06:18:
43:33:70:25:4d:75:13:ef:50:24:a7:3d:b1:2b:36:
22:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BE:44:FE:CD:3F:EA:F1:4F:22:CC:C0:61:DB:F8:BA:16:0D:20:0C
X509v3 Authority Key Identifier:
keyid:BC:E2:DB:4D:65:9A:63:E4:2C:B5:44:C5:7F:99:A3:36:F7:D9:8E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOLbTWWaY-QstUTFf5mjNvfZjtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:f6:f1:e2:58:89:9f:32:03:e0:e5:74:d7:77:de:2a:3c:bb:
d1:fd:91:eb:4e:eb:4a:03:31:f2:3c:de:c4:7c:84:fd:9f:91:
ab:c8:fc:41:05:c0:e7:c8:ba:db:53:ce:5c:7c:36:f5:1a:88:
bd:ca:63:28:3b:d1:26:cd:48:54:a4:d0:86:d4:85:bb:00:72:
b4:5d:2b:cf:bb:5a:40:87:48:ee:82:f6:21:96:ae:60:e2:d9:
09:db:11:33:9a:af:69:26:17:b8:f0:c7:d1:76:fc:7a:a3:ff:
4c:69:51:9e:09:a8:0d:0e:84:75:3a:e1:31:97:8c:f8:e5:ef:
61:ed:de:35:81:bb:87:6a:17:d7:bd:13:4d:ee:05:de:c2:16:
41:9a:c3:16:23:dd:d9:93:54:0a:92:2a:47:2f:13:19:f4:7c:
a8:d5:78:93:8f:75:e7:83:db:59:9e:a9:de:3e:86:69:e6:b0:
82:8a:dd:ac:9b:fa:52:5e:82:09:e2:a6:82:11:9c:1d:eb:ac:
ff:8f:b8:af:53:94:2d:66:6b:c8:be:7a:c9:8c:36:7e:5f:2c:
95:d3:cf:ba:20:86:76:38:47:13:54:8f:b6:31:7b:4c:74:2a:
ca:38:73:61:00:d5:6c:d6:c8:b1:06:3e:d4:a7:78:98:fd:06:
8f:3a:af:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:03 2025 by rpki-client