Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
File: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json)
Hash identifier: oFbp6oJOvo1bgoiXxIPyfFY0nkq0uUxhxuUgMKF4hlI=
Subject key identifier: 08:54:5C:6A:0D:72:0F:A6:A2:9B:80:71:6D:C1:2A:5F:EB:0D:77:46
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 019A718081BC82D4FD4ADC8B218B8DE1E90F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
Manifest number: 0B2C
Signing time: Tue 11 Nov 2025 06:00:38 +0000
Manifest this update: Tue 11 Nov 2025 06:00:38 +0000
Manifest next update: Wed 12 Nov 2025 06:00:38 +0000
Files and hashes: 1: 4zZX5zJWUsfZ5zmG6bPbMr0lvbs.roa (hash: Qk/9tkVuHYR7bI8BB1K5v6WoVgCSt0kT7wqGusdLxvQ=)
2: b1CA5r7KforuhTMwFyQEdQXtFg0.roa (hash: /sCtJVvcy9/zMZdU963H1KU1tkn/lGiUH4SIeeLoE9A=)
3: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: aCjGYVoXXdL/K23Ehz36QA/zkxGnThxditP8oGhtdjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:81:bc:82:d4:fd:4a:dc:8b:21:8b:8d:e1:e9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Nov 11 06:00:38 2025 GMT
Not After : Nov 12 06:00:38 2025 GMT
Subject: CN=08545c6a0d720fa6a29b80716dc12a5feb0d7746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a7:6e:5c:e4:34:19:7d:d6:28:e1:ec:e6:51:
db:fc:55:aa:81:9a:70:33:f3:74:14:37:af:90:48:
74:3c:ae:33:54:aa:e0:5b:eb:5f:07:0d:cf:0b:5d:
ea:6d:16:f8:40:da:bc:d7:21:83:16:7f:71:00:60:
b5:7d:fb:d7:a9:e7:96:f8:a4:56:50:ff:21:3d:93:
2e:6a:79:49:5b:d9:35:32:82:b5:12:64:bd:9c:e1:
c5:ba:5e:e2:47:d5:83:47:b5:e9:86:75:fc:85:44:
2a:2d:37:73:ef:d0:98:0a:1c:36:e6:b4:d3:fb:3a:
8c:da:dd:17:f5:fb:03:d5:b9:77:a5:15:85:2e:42:
93:3f:6d:c7:29:ac:bb:b3:78:d5:43:fd:3d:85:a7:
50:87:29:1d:38:ee:21:0e:a4:fe:23:49:e9:9a:e3:
e6:e7:7c:9d:78:d2:79:8c:05:d6:dc:35:2f:76:6f:
ed:3c:00:49:99:d7:78:ff:1c:d3:f3:e3:db:8f:6b:
5a:b5:dc:92:6b:18:66:51:cb:9c:a6:f2:a6:06:0d:
8b:28:b5:df:f3:7e:66:23:ff:82:f6:c3:db:3a:79:
e3:69:6b:b5:25:21:a9:61:23:ce:eb:24:63:6c:cc:
13:de:3a:78:ae:ec:18:5a:0c:7a:69:a6:46:0e:63:
93:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:54:5C:6A:0D:72:0F:A6:A2:9B:80:71:6D:C1:2A:5F:EB:0D:77:46
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:7a:9c:4a:a1:f4:44:10:56:60:d4:e7:ad:f6:f3:74:b7:ff:
f8:a0:f6:7e:7c:b6:69:92:57:a9:a8:a4:57:15:42:38:1a:49:
34:5b:90:6a:23:55:79:a0:35:ab:04:a0:61:68:ee:7c:81:09:
c0:90:01:b4:b5:4c:77:ac:76:d0:3b:49:a4:b5:32:16:71:cf:
2f:3a:29:48:cc:c2:f4:1d:e1:46:3f:b2:8a:25:46:f9:57:ae:
a3:06:0d:a6:11:30:3f:2d:03:1b:21:2f:15:f2:57:1a:09:86:
52:50:d2:6a:da:22:ee:da:6f:42:9f:bc:0e:b4:43:b7:d0:c6:
34:13:dd:8c:24:14:95:f2:e2:a5:17:45:e7:d9:f2:1b:01:33:
65:12:91:a1:b5:bf:bc:f5:f5:7e:a4:29:50:e0:93:48:8d:cb:
37:bd:e1:f9:3c:58:7c:8d:ff:d5:1c:ea:ca:60:8f:29:c4:72:
c4:1a:8d:05:44:e1:53:4f:a3:3d:bf:10:76:de:2d:e9:64:b5:
44:a5:f8:95:3e:9f:9c:bd:b6:f1:82:1a:0a:93:49:ea:07:74:
de:50:6a:2d:e5:3b:bc:9d:75:27:13:eb:91:bd:e9:4c:5a:46:
54:45:db:b3:4c:6a:09:29:d6:b9:b4:2e:35:04:41:c8:b7:2b:
61:df:79:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:20 2025 by rpki-client