Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
File: vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft (raw, json)
Hash identifier: XkFrQ5RCwSs4Bku3xFwDVfes1ZzdGD3OV++XJKRtS7M=
Subject key identifier: 9E:80:E6:F4:90:C7:A8:99:6D:9C:4B:6C:5E:87:10:6B:60:99:1E:A2
Authority key identifier: BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58
Certificate issuer: /CN=bc75052b50256ba562904e6f134350d3e75ded58
Certificate serial: 019A7293FECF6CAB3CF7352336F700C8E287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:01:32 +0000
Manifest this update: Tue 11 Nov 2025 11:01:32 +0000
Manifest next update: Wed 12 Nov 2025 11:01:32 +0000
Files and hashes: 1: vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl (hash: uYVLraJfQMMs78iee2b8/tLfGM76DSW2sr4qjJ7eFkQ=)
2: yPRaM8Xt_LjcnEp6FMoPxSjubrg.roa (hash: 5MRfMsBo6t3UJiAKxq7MCbDbIZDyOCcBOja7hPHJABg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:fe:cf:6c:ab:3c:f7:35:23:36:f7:00:c8:e2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc75052b50256ba562904e6f134350d3e75ded58
Validity
Not Before: Nov 11 11:01:32 2025 GMT
Not After : Nov 12 11:01:32 2025 GMT
Subject: CN=9e80e6f490c7a8996d9c4b6c5e87106b60991ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5e:4f:b1:fa:76:b5:65:f2:22:c7:32:2e:26:
e3:85:a4:c4:59:02:45:84:94:9b:97:0d:61:bd:42:
b5:75:6a:8a:63:f7:77:40:7e:78:a7:43:e1:fe:94:
39:66:76:48:9e:85:74:e1:7c:75:78:2f:4c:0d:c6:
57:94:f8:08:fa:ce:d4:83:23:ac:f4:cd:51:7e:2a:
01:43:41:70:21:4d:b4:7a:74:08:c4:f6:bb:8f:07:
8b:f8:d4:a1:ed:fc:7a:9a:b0:50:52:c1:51:6b:5f:
7c:db:15:78:54:b3:2b:51:25:7c:ec:a7:7c:bb:6f:
36:2b:93:50:71:51:23:95:f9:fc:33:5f:46:e1:1a:
ca:25:1c:48:b6:9a:36:57:f1:42:a7:06:d8:b9:2f:
69:52:46:c7:f6:bc:69:3f:1d:30:55:b8:67:cd:36:
5d:aa:eb:40:8b:2a:37:5f:3b:8a:e8:40:7f:fb:53:
87:07:9d:ab:73:94:89:53:ea:cd:80:de:55:25:e8:
2c:0d:11:e5:ba:fa:13:79:e5:67:e6:b2:71:3f:bf:
f4:44:74:9e:23:b7:5b:fc:dd:f7:de:de:6e:ca:92:
51:01:ab:a6:b2:94:c5:99:28:8c:44:b2:07:25:dc:
8e:be:4b:15:c8:37:cd:47:7b:b3:d1:2c:49:d1:d0:
52:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:80:E6:F4:90:C7:A8:99:6D:9C:4B:6C:5E:87:10:6B:60:99:1E:A2
X509v3 Authority Key Identifier:
keyid:BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:76:29:3e:d2:a9:d2:9b:af:b3:72:85:fa:1a:f7:67:5d:a7:
88:00:ba:85:a9:01:52:16:38:97:4a:82:66:62:a3:4f:fd:b7:
9a:bd:eb:e5:46:50:3f:a7:33:ab:37:44:10:95:54:ec:ff:3c:
31:78:7d:e4:ea:25:d1:88:f1:25:58:1d:98:fd:a0:eb:94:04:
6b:0c:ef:bc:22:52:ef:bc:01:8c:c9:41:80:48:29:64:61:cd:
71:07:de:1e:f2:8a:1e:59:83:5c:39:8c:b7:de:a3:bf:d3:88:
75:42:4f:a7:ed:d6:47:83:51:24:09:00:3f:ac:01:80:e8:b6:
c1:32:44:36:06:70:f9:da:5d:64:66:2e:2d:49:36:1f:e5:5f:
d9:ab:52:8c:da:a3:d3:fe:0e:c3:4f:6e:37:f3:af:a4:7c:05:
9e:9d:a7:ea:5b:48:45:29:22:06:33:39:a7:a9:62:cc:a5:d2:
7b:37:7b:8f:64:16:26:e4:da:a1:7d:2a:6a:76:f4:40:1c:15:
0c:1f:f8:ed:24:83:e8:c7:d0:54:d9:06:dc:11:84:46:56:11:
19:0c:df:f5:27:02:e1:2d:68:90:6a:92:b3:6d:ce:46:75:71:
1a:72:ab:36:4b:d0:e3:a3:e9:ee:ba:04:7d:f2:1e:41:18:b8:
b4:6e:e0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:15:34 2025 by rpki-client