Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
File: vOGWOkBKcyQMrRFrloi_ExDy_lo.mft (raw, json)
Hash identifier: SIERFRnXOd99ETTD/s4Mvp3fyOULXrFANnfPDHvuJs4=
Subject key identifier: E4:3F:C8:D2:BC:E9:03:AA:CE:29:A4:53:63:E4:3F:8A:33:2C:16:B8
Authority key identifier: BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
Certificate issuer: /CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Certificate serial: 019A4DAAFF3220C03A1FDBD637EE77A1F4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
Manifest number: 1106
Signing time: Tue 04 Nov 2025 07:00:42 +0000
Manifest this update: Tue 04 Nov 2025 07:00:42 +0000
Manifest next update: Wed 05 Nov 2025 07:00:42 +0000
Files and hashes: 1: EyG9e2Y-kxvmuOydUJDDgq2-Jvs.roa (hash: dN8Yi0kIJplgFqGhn/wQEirsJIam2YZVzXUASivGFy0=)
2: vOGWOkBKcyQMrRFrloi_ExDy_lo.crl (hash: apCMflwLrrESUHuIWUuYFZk6Uos/4MFuzfXLml3IkF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:ff:32:20:c0:3a:1f:db:d6:37:ee:77:a1:f4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Validity
Not Before: Nov 4 07:00:42 2025 GMT
Not After : Nov 5 07:00:42 2025 GMT
Subject: CN=e43fc8d2bce903aace29a45363e43f8a332c16b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ba:09:29:14:f1:66:c0:0b:83:9c:11:13:a6:
9d:93:1e:fd:8a:5b:7a:f2:a6:98:7b:1e:dd:1c:82:
ba:52:37:01:62:38:22:8d:32:e4:8a:02:ad:7a:f7:
6f:85:23:22:07:0e:49:9b:59:d6:0f:ea:cf:65:67:
bb:85:09:0c:b1:78:82:b2:f6:b5:51:77:40:a7:35:
45:02:c3:0d:43:df:25:c2:82:10:72:2c:b0:8a:4c:
0d:83:3f:7b:91:1b:75:36:5b:36:12:ef:d3:0e:43:
f6:21:4c:8a:ed:1e:6f:ac:f1:a4:84:ee:b4:54:da:
bb:bf:30:2e:ad:c6:8d:82:1b:fa:b3:a6:4b:92:83:
84:01:92:a8:03:32:b6:63:ea:09:51:80:4e:d2:5a:
f9:ef:cf:a1:28:97:6d:4a:cb:9d:a3:9a:cd:9f:64:
f6:5b:08:e5:57:d8:e9:b0:aa:ce:fe:e1:75:a6:b4:
dd:c1:f2:3f:c5:c7:dc:39:0b:73:4c:db:ed:ea:f6:
e0:c1:40:dd:bd:b3:19:b5:9a:d0:4f:f8:b3:04:93:
88:07:8d:b3:fa:58:f8:83:08:7f:19:40:58:0e:5e:
ea:4e:c0:14:03:77:4a:1a:5e:8c:16:9d:bd:6f:a0:
f4:63:12:ab:b2:2e:8b:b2:04:23:e2:e9:ba:92:31:
41:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3F:C8:D2:BC:E9:03:AA:CE:29:A4:53:63:E4:3F:8A:33:2C:16:B8
X509v3 Authority Key Identifier:
keyid:BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:d8:e0:28:f6:e6:f0:60:a1:74:b7:6d:16:6c:28:c2:63:81:
20:69:e6:b9:4d:5b:0f:26:18:be:d0:ad:98:05:6f:e1:bf:1d:
0c:29:a8:79:06:87:65:ef:42:ea:09:e9:06:e7:ea:dc:3f:cc:
b3:46:c5:54:36:53:d2:e0:29:d6:14:a9:18:a6:aa:9d:21:29:
cb:fe:ad:5e:25:67:3e:d5:cc:b3:9c:21:3d:f7:b3:74:ab:60:
84:17:30:a1:8f:1b:45:59:05:74:b5:f4:4a:6d:b8:5f:04:b0:
dd:10:4c:ab:c9:8e:33:0d:f9:d2:35:65:1d:d2:87:f1:2f:75:
0c:9b:5a:6f:14:84:b8:b1:07:6f:83:4d:d4:74:06:30:5a:36:
7f:75:d6:48:7b:43:02:e3:d7:6a:93:c0:fa:96:12:51:1a:04:
9d:9f:d0:8a:fb:65:b4:26:d7:85:8b:49:43:53:56:10:c6:23:
79:98:5e:67:9e:9a:04:17:fb:c0:c0:9e:85:7b:ca:8f:cf:b7:
83:7f:b6:1f:96:c8:44:5b:b5:ba:63:8e:ac:9d:f1:4a:f1:76:
88:15:14:66:61:4a:cd:5b:e4:fb:1d:20:c7:65:ec:1f:85:70:
27:cf:22:c8:eb:52:c8:5f:dc:72:0e:b3:88:dc:c0:a4:bc:e6:
9c:86:f4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:45 2025 by rpki-client