Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
File: vJ8LmsHVZS89yh7xYjv5mrKWR98.mft (raw, json)
Hash identifier: w3aOQXoj2xMxpf9YO9I2tjmzHpY/Hll1+9O2blI9Pm8=
Subject key identifier: 25:67:E2:2F:72:23:7C:66:CF:15:D7:5F:D0:5D:EF:EF:22:33:FA:A9
Authority key identifier: BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF
Certificate issuer: /CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
Certificate serial: 019A4E18B88C73E810EACE2C7EBE5E76A0C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 09:00:34 +0000
Manifest this update: Tue 04 Nov 2025 09:00:34 +0000
Manifest next update: Wed 05 Nov 2025 09:00:34 +0000
Files and hashes: 1: FrLoQw9Tk2q53G3qePuE3CPqiJw.roa (hash: w3xxWOqtTqCnhtgzBMiz0Hnx9M0t8vYZOEOxsv+EFns=)
2: XuWyQ_h13oHMYelX1eEehMBE4QM.roa (hash: 55GFOmkogCsmTmcypUyvrH3xFalGu40zdpw3o3u8qPY=)
3: vJ8LmsHVZS89yh7xYjv5mrKWR98.crl (hash: mbDCTYUEQexKsnYSkj6b1DjIy1M0urRLm3QED9Y7+G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b8:8c:73:e8:10:ea:ce:2c:7e:be:5e:76:a0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
Validity
Not Before: Nov 4 09:00:34 2025 GMT
Not After : Nov 5 09:00:34 2025 GMT
Subject: CN=2567e22f72237c66cf15d75fd05defef2233faa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:36:48:90:48:50:7c:76:74:73:8e:75:8d:0d:
bb:39:1c:13:d7:ff:ac:f0:d6:41:72:88:b0:a4:18:
e0:6c:4a:dc:3a:bc:6c:4a:2e:75:4e:b1:a1:fb:68:
4d:36:e7:28:7e:e1:3d:aa:72:be:4e:42:d3:90:0e:
37:0a:02:95:47:7a:bd:01:2a:79:57:4f:44:81:ba:
20:c9:b2:20:07:9e:c9:a1:cf:50:b0:ba:c4:9b:0d:
ba:d5:31:dd:3e:8a:0d:17:67:bc:4e:6f:69:66:bd:
b7:fe:6e:98:59:fe:5a:1e:e9:02:2b:c3:58:06:c1:
e7:4b:53:17:2b:ab:03:a5:17:6f:13:b0:c7:18:fd:
22:84:55:60:ce:0b:ac:8b:04:62:a8:ce:90:c8:d4:
e3:1f:0f:e4:b5:0c:f0:1c:82:1a:8a:96:8d:c4:e0:
4a:de:4f:ed:67:37:1b:ce:c9:b6:16:9e:c4:35:fc:
51:3a:d0:e2:41:6b:b8:58:97:84:ee:48:19:d0:ed:
ed:aa:0a:bf:eb:51:78:39:f7:4d:b6:38:29:03:1a:
f8:54:44:39:f4:40:c7:60:4a:a3:f4:22:11:3d:53:
f3:f3:9c:95:c3:ee:f8:63:88:63:52:b6:bb:cd:4d:
64:92:2c:41:3d:c2:50:a3:7e:f9:a5:af:44:72:ef:
a8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:67:E2:2F:72:23:7C:66:CF:15:D7:5F:D0:5D:EF:EF:22:33:FA:A9
X509v3 Authority Key Identifier:
keyid:BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:aa:11:b3:06:83:e7:49:30:2c:02:6d:08:51:f6:b5:ac:39:
2c:16:c3:53:b5:a2:16:00:f1:ff:c1:19:47:5c:54:0a:a5:a5:
ce:b0:43:e9:fd:61:05:93:84:7d:82:a5:f7:b7:d5:9f:b4:b2:
ec:b9:b0:28:5e:45:a4:e8:68:99:9a:bc:87:be:82:4e:0a:d1:
c4:98:db:41:1a:ac:e5:a2:6c:4a:52:6d:bd:8c:b8:fa:d9:72:
75:bd:1b:e4:ed:3c:5e:bb:cd:19:78:55:c1:0e:e0:08:63:0d:
00:fb:27:aa:b3:e1:83:36:46:0b:4f:8c:13:53:77:c5:e2:7f:
c2:61:2d:0d:db:96:97:04:86:5f:75:be:0e:24:87:c8:5a:8d:
34:92:0c:c8:ba:84:13:db:71:72:9b:01:91:c4:7e:50:df:95:
bd:05:aa:11:a4:0a:6f:b6:65:8c:f9:90:6d:77:33:5e:48:50:
ca:ae:74:3c:15:d9:16:75:37:83:73:b4:1c:91:3d:1b:f8:3e:
ad:8d:a4:2d:32:c2:48:f6:84:61:a5:1c:e6:de:dc:7e:59:a7:
e5:87:d1:c6:77:f5:5a:94:5c:c3:6d:84:fe:da:4c:11:56:6b:
7b:13:9c:cb:e6:82:49:28:7e:50:9d:2f:98:78:79:af:2e:93:
bb:a5:1d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:26 2025 by rpki-client