Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
File: vh89wilTBsx9-HLO7M1olNDg6uY.mft (raw, json)
Hash identifier: YKB6CLW9QSbU0MorU3MFgVFjqCK6SQ4BbCAeGf1KBdk=
Subject key identifier: C5:60:76:F0:A8:BE:CB:C5:02:D5:40:17:FE:36:D8:1E:EB:69:37:11
Authority key identifier: BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
Certificate issuer: /CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Certificate serial: 019A4F61EA81BFC9934D10FCF04124A6D469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
Manifest number: 082B
Signing time: Tue 04 Nov 2025 15:00:07 +0000
Manifest this update: Tue 04 Nov 2025 15:00:07 +0000
Manifest next update: Wed 05 Nov 2025 15:00:07 +0000
Files and hashes: 1: 1DMwz6cy5-zMTggYwJ41QekWZIY.roa (hash: nwmEuQjAVrxnR0Ze+XAFnQ4uH1WM0zEOCcXND1iguH8=)
2: tAG_ogHK36F9dYARrabqMiVm7WI.roa (hash: XyLTR6YvVH7wVie2ZS7kPXzKlWsXCj8THEJuI5lJwIg=)
3: vh89wilTBsx9-HLO7M1olNDg6uY.crl (hash: HA9Wcs7eeV3DKprMiTz443MS8W093zNtbu+qEZb4k1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:ea:81:bf:c9:93:4d:10:fc:f0:41:24:a6:d4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Validity
Not Before: Nov 4 15:00:07 2025 GMT
Not After : Nov 5 15:00:07 2025 GMT
Subject: CN=c56076f0a8becbc502d54017fe36d81eeb693711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a9:99:4b:f0:07:75:ed:1c:8d:80:a7:4e:92:
ee:b5:c3:10:11:f3:bc:05:84:c7:93:9e:c6:d4:d5:
f1:1e:a2:87:cb:f9:32:12:f4:08:7b:c2:5a:e7:e2:
d5:38:d4:c9:88:01:2b:cf:f6:1b:3e:70:08:5b:38:
df:3f:6d:74:4b:dd:32:eb:c1:05:28:32:9f:37:e2:
4a:b4:40:14:4e:1c:ef:18:a0:14:4d:38:f6:7a:fe:
96:99:48:ac:34:c9:ed:a1:03:5e:e8:24:2d:8c:a8:
b7:54:2b:00:df:ef:b6:8f:6b:a8:00:ca:97:dd:84:
45:b5:6e:6e:cc:02:c9:c8:a8:bb:d4:2c:1d:f1:36:
b2:27:09:da:36:bd:92:ad:79:c8:76:96:83:be:44:
39:b5:d7:27:39:81:e8:c5:04:a0:08:99:79:0b:be:
b2:b9:c5:00:dd:75:4a:8f:72:a6:90:4b:e4:6a:3d:
d2:f9:4c:9c:80:34:73:ed:7c:5e:00:47:eb:14:2a:
5b:d0:e7:75:23:f1:6a:e6:03:fb:e8:ed:b0:3e:01:
7e:74:4d:5e:ee:95:45:0f:e7:bf:86:92:a9:57:3f:
50:05:0b:67:ba:3b:ef:af:49:d2:3b:55:04:c0:9c:
9e:56:88:a3:fe:74:d0:92:3d:69:f1:ff:01:ff:e9:
b3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:60:76:F0:A8:BE:CB:C5:02:D5:40:17:FE:36:D8:1E:EB:69:37:11
X509v3 Authority Key Identifier:
keyid:BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:5f:f9:23:56:4d:84:39:2a:7a:da:62:b6:eb:6a:a2:6b:51:
65:2e:37:3c:9c:87:eb:46:64:d9:9a:90:a6:58:e7:55:0a:c3:
6e:a2:9c:71:01:f5:d0:16:db:02:cf:da:7a:f2:0a:66:ae:e1:
30:b6:87:8f:5d:6f:2b:9e:e3:ff:8f:28:67:ac:c6:17:10:2d:
e3:63:a2:24:b0:ab:44:49:e5:79:8e:0f:08:b3:de:b8:d8:94:
49:71:80:20:57:bc:31:8a:bd:80:ef:a0:62:b6:42:eb:82:54:
8e:75:9e:db:62:a2:27:3f:a0:0c:d2:89:13:08:14:be:e4:f6:
db:b9:f5:c2:6c:f8:81:21:ce:3a:8b:a2:f3:d4:1f:de:7f:92:
95:d5:d1:f1:4d:31:e1:b1:e4:2b:2f:6b:19:ad:2e:2b:f9:98:
dc:2c:d5:30:d7:06:fa:e8:3f:c7:5e:b3:90:4e:c1:85:46:23:
45:71:a1:ac:7f:31:67:7b:6d:28:db:58:d7:ed:1e:99:d0:fb:
00:fa:04:25:8e:23:ca:c1:8f:f8:65:83:fb:5f:01:d3:40:bd:
ee:f6:38:2b:10:54:16:ce:7d:fd:01:61:fb:ed:43:42:90:c8:
9c:dc:16:35:c0:83:1a:2a:51:68:53:f8:6d:11:5c:9b:ae:26:
3b:42:48:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:29:57 2025 by rpki-client