Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
File: vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft (raw, json)
Hash identifier: WZoaW2PZDyAEq4ZbkhowK5X9KeCeUMdKrrLCCsUrVEY=
Subject key identifier: 08:0F:F0:F1:2E:A1:31:0A:89:3A:97:2A:BF:55:17:B7:62:89:1F:53
Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Certificate serial: 019A7225E9623F4FF592A95C07D5C5D16112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 09:01:18 +0000
Manifest this update: Tue 11 Nov 2025 09:01:18 +0000
Manifest next update: Wed 12 Nov 2025 09:01:18 +0000
Files and hashes: 1: 2_V6lJnSbHp-dXL7YMoo09f6snw.roa (hash: OhjwpaD5BnWeaMwPzsn2/JlXIUwI6tpxdz7vTY63lGM=)
2: vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl (hash: 4HY2l2p/YwIUDaRjUIc3cVqZ3fXAOuq1StCUuUDtiqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e9:62:3f:4f:f5:92:a9:5c:07:d5:c5:d1:61:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Validity
Not Before: Nov 11 09:01:18 2025 GMT
Not After : Nov 12 09:01:18 2025 GMT
Subject: CN=080ff0f12ea1310a893a972abf5517b762891f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ba:16:cd:dc:c0:19:f4:b7:70:9b:7c:17:87:
9b:a2:75:a8:f1:4e:ca:ad:3e:5a:66:e6:86:7c:3b:
8c:4d:f1:95:02:00:53:40:e5:b6:7b:f7:b4:2e:e0:
c1:ea:33:93:78:3e:61:5a:98:9f:7c:58:5a:ea:62:
45:a0:38:f6:44:f9:8e:2b:94:bd:82:d5:ae:10:7f:
7e:b1:af:29:0c:85:2d:72:51:34:f2:e4:3b:f8:a0:
0e:88:ee:b8:34:d8:99:9f:fc:db:8d:a1:a7:10:be:
4a:09:ed:2b:5e:f2:e1:fa:1c:32:05:73:73:b5:da:
a3:ee:83:bb:08:b5:bc:f8:cf:a5:99:3e:18:bf:2e:
b8:90:e2:a1:b8:b2:92:03:07:53:2f:d0:0a:1f:f3:
c9:fb:b2:04:b0:e4:82:3a:42:eb:96:74:60:4e:94:
da:70:e2:54:2f:b3:6d:46:39:f0:d4:ed:21:46:49:
c7:c5:a7:c0:fc:77:2a:76:47:21:dd:c3:3f:73:3f:
a5:78:f6:4c:0a:1a:8c:08:0f:9f:f6:4d:f4:69:4f:
5c:6b:f6:36:5f:69:c9:23:c4:46:c5:bb:d0:b5:60:
ea:ff:da:fc:40:df:d8:85:13:be:6e:59:b0:88:1c:
f6:3b:63:6a:6d:9d:2f:b6:dc:f0:04:a2:bd:99:8b:
66:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0F:F0:F1:2E:A1:31:0A:89:3A:97:2A:BF:55:17:B7:62:89:1F:53
X509v3 Authority Key Identifier:
keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:ee:2a:4a:9a:17:5a:5d:e5:f3:ab:e7:1c:df:9b:97:c9:30:
59:23:45:6d:0c:e9:43:d7:a2:35:40:c2:1f:1d:a5:ee:0a:f6:
c0:1c:d1:66:7c:c0:38:b7:48:18:14:25:c4:13:f0:6b:a5:2d:
f4:2f:95:bf:1b:bf:d5:21:4b:8a:85:f7:5c:ff:26:94:5a:cc:
10:5d:2f:13:4e:fe:6c:ff:16:33:68:80:de:26:e2:c2:dc:a1:
fa:9d:ee:93:c9:91:1a:8e:44:c7:e4:dc:09:51:22:79:11:50:
ae:8a:66:64:29:5e:39:06:bd:01:c1:20:d7:10:b1:7b:af:82:
47:d1:e1:64:33:44:5f:d8:08:b7:b8:09:4e:93:5c:3e:50:5c:
48:49:2e:5f:34:92:02:5b:7a:d0:f2:97:02:ba:9b:48:e2:d8:
b6:72:c8:9b:54:d0:65:6f:69:75:f4:f1:70:18:3c:ad:09:42:
1a:9f:51:e7:5a:db:cf:6d:61:ed:73:dd:a1:77:1b:b2:65:65:
be:2a:d9:98:64:a4:ec:af:64:5c:4a:e7:49:53:02:54:4d:4c:
f7:bc:3b:ed:4a:db:c5:33:45:1f:05:82:55:72:3e:20:7f:20:
c2:8e:f1:03:53:ac:a7:2d:6c:dd:07:16:56:cf:9d:07:fe:43:
51:ef:91:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:17 2025 by rpki-client