Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
File: vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft (raw, json)
Hash identifier: hMrFMeOPEmYmt3O3S4RFUjhki25VgluJVhuib75tK4Y=
Subject key identifier: 8C:96:74:6D:49:E9:A3:AC:55:05:1C:EF:FB:78:94:63:C9:8E:E3:28
Authority key identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
Certificate issuer: /CN=bee0a94997672a920a290ccbfd049126f7075c99
Certificate serial: 019A356B9016956AD4BD8E63BED0DC57079A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
Manifest number: 1701
Signing time: Thu 30 Oct 2025 14:00:32 +0000
Manifest this update: Thu 30 Oct 2025 14:00:32 +0000
Manifest next update: Fri 31 Oct 2025 14:00:32 +0000
Files and hashes: 1: N_iXT6yoM0IiJyQUNbfBu971Pc8.roa (hash: N5hBaTrYl3FRJAHCB5WOt0nXtIURvZkeHKhzHTcrevA=)
2: TDfXhLaJicDqER43mZJ9Gt5o4NM.roa (hash: xPlhAH8Cus6o3YMGrcO3bp4+1D+Angi7zwsI6/D/vLM=)
3: vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl (hash: wejvZJT3KA7rqkZV0N1M9AwXvX0z+p21d0esOjeG43Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:6b:90:16:95:6a:d4:bd:8e:63:be:d0:dc:57:07:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bee0a94997672a920a290ccbfd049126f7075c99
Validity
Not Before: Oct 30 14:00:32 2025 GMT
Not After : Oct 31 14:00:32 2025 GMT
Subject: CN=8c96746d49e9a3ac55051ceffb789463c98ee328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4a:dc:4a:bd:9e:73:ba:82:44:6f:8e:c0:8a:
c2:95:17:db:8a:db:73:0c:97:6c:0c:b0:f6:df:f7:
a0:a9:0f:46:4d:07:6a:00:13:80:15:be:05:65:9e:
94:70:87:61:03:2a:09:df:9c:ef:15:0d:f4:b5:20:
1e:d2:05:c0:b9:eb:c8:ab:32:d5:50:d1:d6:31:7d:
1b:a5:43:6a:69:ec:15:cc:7f:cb:85:91:c0:cc:a4:
0e:a6:f5:23:73:f3:65:64:73:76:58:79:25:ee:90:
0f:75:b0:c1:9d:09:9a:26:14:db:ea:a4:6d:9a:4d:
2b:61:32:f0:5c:a4:59:a3:bf:da:bf:3c:11:83:1f:
27:52:9e:b6:b1:a4:0d:f6:9b:7d:45:4b:72:8e:68:
da:3a:e9:27:bc:fd:92:47:ee:fe:da:31:8a:9b:c3:
bb:6e:a7:b3:46:78:76:a2:72:26:23:39:05:8d:b3:
aa:b6:dd:79:87:08:8c:0d:fb:27:79:50:21:fe:76:
75:29:0f:7f:e7:2e:e3:e9:61:40:2b:56:c0:b7:6c:
f2:23:1f:53:88:6f:81:42:dc:05:85:c8:58:30:21:
ec:6d:11:60:9d:2f:14:e1:0d:80:bc:26:21:72:36:
e5:aa:46:f1:d6:c1:02:77:a2:ce:09:13:23:d1:b3:
8c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:96:74:6D:49:E9:A3:AC:55:05:1C:EF:FB:78:94:63:C9:8E:E3:28
X509v3 Authority Key Identifier:
keyid:BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c9:f9:c3:6c:b8:c5:3e:a3:40:94:72:e6:b2:ca:16:13:4f:
a2:80:61:21:14:d7:0a:e3:f9:a4:f2:aa:d9:b2:b3:d9:c8:de:
87:52:6c:41:88:14:bf:e5:6d:41:ae:52:2a:51:6d:82:2a:7c:
28:01:93:5e:2b:4c:ff:e3:f5:99:59:86:91:79:66:21:0c:65:
bd:25:49:3e:7d:0d:81:6b:54:bc:27:de:cc:2d:b2:ac:5a:f7:
42:6a:2a:7c:e9:d5:69:ee:f0:08:0f:65:72:d5:83:72:59:1c:
a6:38:0c:4e:19:49:e8:9c:fe:96:55:7a:ca:06:5f:2e:fc:4a:
4b:34:67:65:30:4d:6f:52:8e:13:04:11:e0:18:33:cb:32:ff:
1d:e4:e7:ac:47:c6:40:38:7c:d0:31:30:ec:02:e5:1c:6b:28:
17:ef:d5:4c:e9:33:a5:b5:57:f9:62:37:8b:32:32:45:18:8d:
2b:8e:0a:86:d7:6d:6b:2f:01:78:c8:16:c8:ee:d3:1e:90:b8:
8a:78:74:dd:b0:9a:8c:e2:46:4c:e0:88:7f:07:b1:ce:e9:2d:
0a:51:fd:2a:be:0c:a9:4d:f9:c4:be:cf:18:c7:1a:69:cf:79:
89:7b:6f:93:29:64:14:92:6d:c9:06:3c:9f:19:a4:83:e8:6d:
b3:c6:cc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 21:43:24 2025 by rpki-client