Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
File: V2VnM04DVjndfMtJdqmycPcmMh0.mft (raw, json)
Hash identifier: wcYgL90BQmYsB2K69t5DhyKjlR0BixGr+9KYfMOFeik=
Subject key identifier: 64:A2:D0:27:9E:3D:BC:C3:D3:3D:2F:3E:29:69:26:69:BA:77:55:60
Authority key identifier: 57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D
Certificate issuer: /CN=576567334e035639dd7ccb4976a9b270f726321d
Certificate serial: 019A71EEEBD487392DB599702B59775DBBB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 08:01:14 +0000
Manifest this update: Tue 11 Nov 2025 08:01:14 +0000
Manifest next update: Wed 12 Nov 2025 08:01:14 +0000
Files and hashes: 1: BF6mEEyNMbb-xRm9_vXJ4CAvddM.roa (hash: LKI2ZmXTKLgLquBH6Yp7C5JIlsxvJUmapEogTIwlb5g=)
2: V2VnM04DVjndfMtJdqmycPcmMh0.crl (hash: sXzWVZPUVE3AAQ67Q2pU2cyemKFYyb9P4K3xpOMyzus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:eb:d4:87:39:2d:b5:99:70:2b:59:77:5d:bb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576567334e035639dd7ccb4976a9b270f726321d
Validity
Not Before: Nov 11 08:01:14 2025 GMT
Not After : Nov 12 08:01:14 2025 GMT
Subject: CN=64a2d0279e3dbcc3d33d2f3e29692669ba775560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:fd:a1:6f:0e:39:b8:fc:53:23:35:17:c3:
34:69:d4:a7:85:6b:3f:5c:2a:3d:7f:fb:4d:91:01:
18:22:5f:b3:15:2b:32:b6:97:d8:02:ac:87:63:2b:
3c:fb:97:87:dc:e4:ee:2b:0a:e0:57:4a:9f:6c:10:
92:74:c5:d2:d1:52:9e:de:be:6f:97:8d:0b:8f:72:
c8:3c:33:27:c4:1d:a7:ce:9c:fa:78:43:78:9e:2a:
33:f4:04:36:f7:37:d0:6e:8e:db:3e:ca:69:fe:57:
a2:3c:34:a0:cb:58:81:d6:ed:68:7d:79:24:a6:90:
41:e8:b6:c9:c4:45:13:14:ac:9a:e6:c3:89:51:ef:
5b:0c:7f:1b:7b:cf:00:5b:06:27:4f:d1:00:32:0a:
f1:c3:ec:21:e1:ad:a2:eb:3e:e0:a6:a6:af:3c:47:
7f:5d:6d:93:8a:49:85:b6:f2:f4:63:29:24:de:99:
6f:3e:12:24:83:67:2b:ad:66:7b:77:4a:ec:45:3b:
d7:16:b7:73:6d:b9:4d:d3:4c:0e:88:85:ab:d1:11:
ee:97:73:e2:98:0b:7b:ee:0e:c8:ee:3c:46:64:95:
db:11:09:40:52:f8:e5:a5:22:68:7b:8f:f7:1a:c2:
31:d4:0b:1e:17:ee:94:f9:f8:57:7d:f6:7a:85:51:
d5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A2:D0:27:9E:3D:BC:C3:D3:3D:2F:3E:29:69:26:69:BA:77:55:60
X509v3 Authority Key Identifier:
keyid:57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:20:8d:45:ef:33:82:81:f0:46:f9:43:9e:7b:1e:4c:51:d2:
63:49:08:54:29:20:a9:21:f3:f3:a2:c8:53:f4:c2:c5:6e:fd:
72:41:79:4a:5a:15:aa:c4:7b:0f:a5:e9:aa:15:a4:ea:75:5d:
4c:1d:e7:77:e9:3f:0d:16:0e:8e:5e:ba:08:9b:67:94:2b:5e:
67:76:a3:c6:b3:46:7a:2e:8a:ab:a0:0f:db:d9:94:e4:d2:aa:
1c:24:ef:25:67:e5:b9:a4:e8:60:7b:81:55:48:0c:b0:d7:1b:
40:b2:1e:50:cd:dd:ce:da:d8:42:05:b1:b9:72:2b:c5:48:db:
78:50:ed:eb:e7:0f:5b:82:87:06:81:9d:d1:2d:97:69:47:e8:
63:81:02:cc:76:a5:a7:1d:6c:4d:cc:87:06:f8:77:c4:24:aa:
6d:f1:7d:aa:c9:d9:a9:67:a7:f8:ec:9d:e7:ba:b8:67:99:4c:
b5:0a:70:d7:78:ce:c7:44:a9:58:9d:4d:aa:6c:87:62:8c:a9:
1b:9b:c5:1b:6b:87:b0:15:71:94:3c:ca:6d:b1:ec:69:6f:0d:
a4:ed:60:25:a9:2f:72:14:d3:26:54:37:3e:23:f4:e1:fb:d2:
c1:3f:37:2f:b2:37:56:82:7d:14:59:24:5b:c8:42:d3:da:8f:
27:e7:04:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:08 2025 by rpki-client