Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft
File: v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft (raw, json)
Hash identifier: uO4M9SxbSxMWaNMOWq+zEs/2Nu0CxHBIxo++cJatTxA=
Subject key identifier: F1:8A:DD:E5:87:B2:3C:E3:F2:D0:1C:90:B3:42:22:72:B5:2A:9B:07
Authority key identifier: BF:EA:AB:1B:A6:8E:87:C9:F7:AB:0D:90:50:BF:F9:F2:0A:62:67:DA
Certificate issuer: /CN=bfeaab1ba68e87c9f7ab0d9050bff9f20a6267da
Certificate serial: 019A70DC0E92B91C837CAC42CCEE8D21EA92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft
Manifest number: 13BC
Signing time: Tue 11 Nov 2025 03:01:01 +0000
Manifest this update: Tue 11 Nov 2025 03:01:01 +0000
Manifest next update: Wed 12 Nov 2025 03:01:01 +0000
Files and hashes: 1: Li-Y8dn1F69FZoMGQvQz_fZ7l4Y.roa (hash: caOJpFofpginvCZ1ci6afUcY092BORN7MXA50NlfY8Y=)
2: v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl (hash: sj9XsGWA5bWXbc4OTiOM6qy+/nPBYCF7qoxfYoOKE8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:0e:92:b9:1c:83:7c:ac:42:cc:ee:8d:21:ea:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfeaab1ba68e87c9f7ab0d9050bff9f20a6267da
Validity
Not Before: Nov 11 03:01:01 2025 GMT
Not After : Nov 12 03:01:01 2025 GMT
Subject: CN=f18adde587b23ce3f2d01c90b3422272b52a9b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:58:e9:c3:38:1b:29:fd:f0:f5:1c:44:ab:05:
7c:7d:f1:a4:48:01:00:8b:bb:9d:d7:db:9f:02:df:
7b:ef:ee:db:d9:79:64:29:1c:aa:c0:5d:6c:54:89:
f7:f6:a8:0a:41:68:a4:45:5d:ba:8f:2a:40:42:dc:
ab:6d:87:eb:01:e8:50:1c:5e:2e:56:8c:4c:92:72:
a6:ad:77:ea:95:3b:6b:43:b9:72:bd:76:46:81:0f:
ed:5b:3e:f7:1d:6a:cc:ee:78:fc:0e:34:5a:f6:97:
4c:f3:d2:b3:71:07:4d:41:f1:1d:60:36:d2:9f:4e:
88:7e:9b:12:4b:3e:9d:81:5f:16:26:1b:3a:2b:6c:
08:7b:b1:6c:3f:4a:b0:01:b9:c5:41:63:2a:33:85:
e7:dc:69:20:8b:65:e1:83:90:0b:61:79:95:1a:0c:
4d:83:89:5d:63:2d:02:ee:e9:73:81:6d:45:9c:ba:
01:4e:b1:94:3c:c9:0c:a1:be:0a:95:88:d3:0a:d6:
c9:6b:50:bb:37:28:0a:0e:6e:78:6a:ef:8f:c5:c6:
f6:54:d1:ff:9f:7a:5d:0e:cb:04:29:56:69:52:ab:
34:1f:31:c7:cb:87:ee:5f:7b:e2:21:36:45:f4:fc:
45:01:96:2c:be:f8:7e:e7:2e:0c:7f:73:83:b6:6f:
43:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8A:DD:E5:87:B2:3C:E3:F2:D0:1C:90:B3:42:22:72:B5:2A:9B:07
X509v3 Authority Key Identifier:
keyid:BF:EA:AB:1B:A6:8E:87:C9:F7:AB:0D:90:50:BF:F9:F2:0A:62:67:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e4:d0:9a:5d:9b:62:ef:e3:50:ef:00:26:14:9d:56:64:30:
27:b6:61:19:f9:f9:ec:50:a8:cb:7b:61:f8:f6:93:e9:b9:8c:
60:62:1c:3f:d5:c0:7a:26:73:4f:13:35:a1:df:86:b2:ac:d1:
e0:5a:3c:96:f5:d2:26:c2:49:83:d5:32:bb:57:4e:f2:06:14:
89:58:b2:db:f9:fb:ec:32:74:ae:ee:88:2e:8d:b6:e4:e0:c2:
ed:43:c4:78:0f:69:dd:9b:63:ad:b7:27:95:0a:d9:4e:aa:8f:
91:e2:74:6d:24:fe:32:4e:d7:e1:b9:48:08:4c:26:a5:11:e7:
84:53:94:90:24:99:35:80:01:41:98:1a:67:f9:5f:f3:29:a8:
06:ae:0c:f1:86:01:95:7b:ad:41:d0:bb:31:90:ee:da:e9:67:
d9:b6:a7:da:59:d2:ee:90:c7:8c:99:3c:ec:ce:bc:4d:84:ca:
66:13:ad:7d:17:18:92:b5:22:6d:bc:f6:e2:74:53:4d:23:1a:
dd:26:fe:e0:ab:c2:5f:ca:04:ef:87:f5:0c:a4:3c:fa:84:1b:
84:55:29:a1:97:6d:23:2c:7b:74:00:38:52:d8:85:46:aa:35:
9f:88:26:e2:e7:29:cb:ac:cb:ba:b0:cb:f5:5e:08:11:59:3b:
64:64:2d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:59 2025 by rpki-client