Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft
File: vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft (raw, json)
Hash identifier: uY2wznNHzgEcPXDJIBlIxavUwaEo6DpC0oFidZPgFoE=
Subject key identifier: 95:7A:83:A6:17:24:09:57:2A:06:B1:89:B4:7B:B8:1B:32:BD:F4:7B
Authority key identifier: BD:35:06:06:91:43:33:F7:BF:C2:C0:D1:F8:D3:C3:E4:B7:2A:30:2D
Certificate issuer: /CN=bd350606914333f7bfc2c0d1f8d3c3e4b72a302d
Certificate serial: 019A4FCFD6596522A6D2E37E726D94F46AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft
Manifest number: 0665
Signing time: Tue 04 Nov 2025 17:00:12 +0000
Manifest this update: Tue 04 Nov 2025 17:00:12 +0000
Manifest next update: Wed 05 Nov 2025 17:00:12 +0000
Files and hashes: 1: 0mezxsUX4q6nwfHNel9WWB_Brao.roa (hash: cM9upUcEP9+yZQjw/tmDzQZgWLtHsK18dVAiOO9hG6U=)
2: vTUGBpFDM_e_wsDR-NPD5LcqMC0.crl (hash: f1KnstOro3WktQLoFnBxGB5g00p0tzka5ak0KiAA7Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:d6:59:65:22:a6:d2:e3:7e:72:6d:94:f4:6a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd350606914333f7bfc2c0d1f8d3c3e4b72a302d
Validity
Not Before: Nov 4 17:00:12 2025 GMT
Not After : Nov 5 17:00:12 2025 GMT
Subject: CN=957a83a6172409572a06b189b47bb81b32bdf47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:bd:0d:f3:ce:90:f5:ed:31:04:11:21:63:
52:cb:2c:bb:d8:16:db:dc:3e:e9:6d:c8:3a:3c:0c:
25:cc:62:31:1d:b8:df:90:33:d9:a6:b9:38:30:3e:
e7:0f:d3:51:f0:dd:bb:c0:67:4f:eb:68:69:46:64:
f9:90:81:34:3d:49:e6:ca:4b:2a:1d:4f:2b:9e:0d:
84:22:95:09:50:2c:f8:d5:1e:c0:bb:0d:f8:3e:54:
b6:4d:dc:c4:2a:de:be:f7:e8:74:fc:24:10:96:79:
fa:8d:37:31:73:fc:70:5b:44:81:e3:79:17:5b:9b:
89:81:c5:fc:f1:05:24:5d:da:3c:c9:af:b9:a8:da:
0a:2b:8a:34:56:ff:46:b5:d5:a6:d9:e9:2c:3d:fc:
87:7d:84:e0:f4:3b:45:bd:00:10:e1:a3:95:a5:77:
45:cc:fa:71:c7:1a:df:77:f1:c5:6d:bb:79:57:c7:
08:3e:ad:54:ca:36:58:95:0e:ee:67:eb:3c:1e:d6:
ea:66:97:6d:2a:e2:f4:70:d2:3b:fa:b1:9c:65:3d:
6f:30:0d:ef:42:b7:d3:d0:3c:2c:10:cf:08:d1:a4:
b2:6f:22:b7:21:73:1f:cc:96:ea:d1:e4:c0:f3:f9:
40:2c:a6:ed:ba:a1:00:0e:9b:ce:00:55:93:b3:aa:
47:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7A:83:A6:17:24:09:57:2A:06:B1:89:B4:7B:B8:1B:32:BD:F4:7B
X509v3 Authority Key Identifier:
keyid:BD:35:06:06:91:43:33:F7:BF:C2:C0:D1:F8:D3:C3:E4:B7:2A:30:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d4:6d:49:1a:4c:92:07:f1:96:a5:8b:b7:7c:48:38:8a:6c:
c1:c3:e9:40:e0:22:c2:3c:51:01:c8:0a:3d:8a:5d:4f:ca:b0:
7e:fb:30:b7:e5:d2:35:cc:3e:6e:aa:96:43:e1:69:8b:59:b4:
b4:bf:1e:cc:30:89:3e:75:69:bd:b9:bf:4c:a4:a9:57:f9:38:
0c:17:97:b0:38:7b:c4:1b:8f:65:56:92:3e:a9:9b:36:60:af:
58:a8:95:a8:25:99:ef:e8:11:1c:89:f2:f0:99:f9:a5:25:55:
84:d9:0c:8b:0a:78:d0:34:3e:9d:69:7c:69:6a:4f:94:05:ea:
8b:77:6e:bf:76:92:54:cf:d9:74:22:1b:ed:19:79:4d:f4:20:
eb:e9:05:4a:f5:fe:a4:97:1a:5d:aa:e5:1c:81:8b:de:57:b3:
fd:14:42:6c:d1:30:24:27:0d:41:9b:2f:0d:25:3c:d4:8e:a0:
02:61:4c:7a:0d:7b:6a:8e:b3:52:d5:40:ba:b0:e3:a4:71:67:
30:8f:e1:25:54:3b:f2:62:0b:ab:b1:3d:cb:9a:5b:78:d6:90:
3e:4f:2c:45:c1:e1:fb:f2:bc:1a:ae:c2:06:ae:cb:5a:3d:be:
1a:41:51:5e:3f:d1:bb:69:07:97:60:3f:9b:b3:a7:e0:67:5b:
62:c0:cf:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:03:49 2025 by rpki-client