Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
File: dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json)
Hash identifier: mdxW3Tc3E2LeH/52LlGFMYYwdjCa3sFYV9Drzr3iZnw=
Subject key identifier: E0:34:51:7A:08:A7:2D:68:54:B8:87:98:0A:53:43:5D:A5:57:9A:FE
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 019A4E4FFECBD82495DBE9427FE94D4394E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
Manifest number: 171D
Signing time: Tue 04 Nov 2025 10:00:56 +0000
Manifest this update: Tue 04 Nov 2025 10:00:56 +0000
Manifest next update: Wed 05 Nov 2025 10:00:56 +0000
Files and hashes: 1: 54dHE0jadLwCWG8zkr-DJUOEEaw.roa (hash: oNDnO3daYus3xELeZDv1QShW9ceHJLAT7TByuVM8qlM=)
2: G5C1ZqYlTLCRRxbHStMwHe3D7Ns.roa (hash: LpFTYAOw4TDfnjUrddNXOWvBHb296+OG0h5PcCYbZJE=)
3: L_hiJ_zTIPvJHKnWltGOdh1BBUE.roa (hash: fnkqnOVp0hCGhUIs9oj2vYD3xsZ2o6VTqPgLKa54b08=)
4: _udyEbevQeyPMsntui78RQRmYXo.roa (hash: 8RRyytezjUw6YTel2ifQgoEKUcJPXqM6Y67HGaLLOtA=)
5: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: dH5YdWA14LOe9alHBIYxMsrLcfouRkJl/nJmcAa2TPw=)
6: d_QjM08NyWxu6Tcwa6Z9vaHDI6E.roa (hash: 2UiuRNdprh1vh3n/JUuIuP4pSF4iJgcL2G0BqHfLcb8=)
7: gu5dao22fJp9scPActSQNTp8QK4.roa (hash: SFp8Pdfj96YgeaI0ilX+9ls8kY++x5GaLl2llXmCJNc=)
8: jwpY6rERA_zyIv98bpD7R8nes4o.roa (hash: zhq9elSEk74CwB7NZMhv2D35pQpbRAFiT6FBizp5Yp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:fe:cb:d8:24:95:db:e9:42:7f:e9:4d:43:94:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: Nov 4 10:00:56 2025 GMT
Not After : Nov 5 10:00:56 2025 GMT
Subject: CN=e034517a08a72d6854b887980a53435da5579afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:73:fe:88:d7:67:58:81:81:f1:75:33:c1:f8:
ee:e7:b0:88:ef:c1:4c:fa:5e:5f:d6:54:97:bb:53:
82:a2:ed:18:76:bd:79:a1:a4:1a:f4:b0:73:ec:c7:
dd:20:26:be:e1:a0:de:10:ea:af:f8:d4:f4:78:4c:
2a:fb:e2:25:1c:cd:0a:b8:0e:b6:0e:f4:ca:10:fc:
38:6b:ff:e1:68:6f:5f:c2:d5:da:71:a4:4b:57:43:
c2:7e:a3:47:d0:8d:be:68:74:46:27:bf:b9:d6:c8:
e2:39:0e:9f:73:b4:fc:7a:ad:73:b8:1c:ae:0a:1d:
24:53:87:a9:a0:57:7b:19:ab:13:1d:35:9f:6e:1c:
61:40:d6:b9:f6:dc:72:49:f9:19:c4:8a:e7:2a:96:
d7:4b:a8:b9:2a:6e:35:ef:2b:96:a4:e9:57:95:14:
e3:eb:2b:77:49:61:1e:2a:ac:c1:bf:1f:f3:f6:16:
19:1f:c9:ea:b8:c0:3d:d5:73:1b:30:da:9f:27:94:
e1:8d:7c:b3:e8:a2:34:bb:49:eb:5b:db:d6:36:92:
74:fb:f9:50:9d:35:8e:f3:da:5c:a6:6b:3b:ad:2b:
f5:36:79:a2:d5:85:00:6f:78:aa:b8:52:2d:ce:0b:
1c:e4:84:40:4f:f0:ad:77:7e:29:d9:33:38:ba:5d:
ed:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:34:51:7A:08:A7:2D:68:54:B8:87:98:0A:53:43:5D:A5:57:9A:FE
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b5:67:8c:13:bf:30:c3:6c:8b:b1:a9:d3:94:73:6f:5b:e9:
74:46:d7:bd:94:9f:af:69:c0:a9:6c:43:b3:1f:84:ef:98:21:
c5:a5:71:77:04:42:b2:75:d7:16:6c:1e:f0:8f:8a:ff:79:53:
4a:0e:0e:0a:48:0f:f2:c4:eb:d4:81:ce:d0:77:05:80:66:f6:
db:2b:c3:29:3e:98:c7:96:60:b4:d3:6b:a5:1d:fe:c1:9f:47:
87:e6:23:8c:b3:10:6a:9b:94:25:90:ab:38:5b:83:91:e7:f9:
b8:bc:23:0f:a2:9d:ff:02:22:b4:38:a8:02:41:98:5c:dd:0b:
45:8c:59:82:28:29:3d:a9:6a:c7:15:d0:37:12:aa:ea:06:c6:
c5:00:95:97:cc:42:d2:28:0f:42:fd:66:b4:13:0b:b4:12:6a:
bc:2b:ee:45:2b:02:e1:f8:03:90:fd:5b:93:49:b0:de:28:68:
e8:51:b7:ce:a1:3a:c1:81:e8:9a:dc:23:19:09:b9:a2:ee:eb:
c9:0e:69:1a:d4:f6:e7:87:37:44:63:ab:29:2c:74:f2:bb:60:
43:89:10:0d:6d:d2:fd:14:ab:f4:6d:bb:5d:2b:b7:75:73:60:
f0:6a:f5:43:47:c9:65:20:08:dc:a1:e1:43:aa:d1:3f:14:02:
79:9c:4e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:57:43 2025 by rpki-client