Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
File: vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft (raw, json)
Hash identifier: misU5bQI3/nQwfUTv3ZkUhtSmEBPQI2oqr3UrH4yT+E=
Subject key identifier: 3C:9D:C0:AD:D0:20:A5:4D:80:E2:39:A6:AF:31:B6:BC:CB:18:35:FA
Authority key identifier: BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1
Certificate issuer: /CN=bc3a4697447d190308644a58bceaa124c074b7e1
Certificate serial: 019A4C616FE01157A046A4EE81337EFBCC1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 01:00:45 +0000
Manifest this update: Tue 04 Nov 2025 01:00:45 +0000
Manifest next update: Wed 05 Nov 2025 01:00:45 +0000
Files and hashes: 1: qTBKuXrMd7XLtQiqUfmYTbV0cXw.roa (hash: AGYgB26zdYDExNCMKB1Sk+TLZC3itvMITHqWkeGpeU4=)
2: vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl (hash: 5gDKLDrcT5ze22Iynofhxso9Z2h49Q2i24yiKksmbfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:6f:e0:11:57:a0:46:a4:ee:81:33:7e:fb:cc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc3a4697447d190308644a58bceaa124c074b7e1
Validity
Not Before: Nov 4 01:00:45 2025 GMT
Not After : Nov 5 01:00:45 2025 GMT
Subject: CN=3c9dc0add020a54d80e239a6af31b6bccb1835fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:0a:89:47:51:1e:9c:e4:d8:b2:6b:f8:a0:
c0:f9:96:54:d2:c9:2d:9a:57:1c:c7:02:95:22:bd:
1a:8e:83:8c:6d:73:74:02:e6:b0:82:03:85:95:b4:
d1:a8:3b:a5:26:a5:64:be:e2:e2:05:a3:8c:57:17:
4b:87:c3:3c:82:4f:9f:0c:b4:99:de:f9:28:be:ae:
ff:9b:01:97:c1:05:dd:28:ed:af:24:a3:41:89:73:
4f:9f:7d:da:5a:02:a7:72:8b:42:59:66:e6:4c:80:
ef:22:fe:e1:59:32:90:91:90:13:43:7d:2c:49:dc:
63:88:a7:fe:51:ed:16:e5:bb:3f:9b:97:0f:02:36:
5b:d9:cd:93:a2:27:bf:98:c8:9f:16:3a:85:9b:f2:
df:32:ac:07:a8:56:db:5f:b3:d1:c0:a5:ea:b6:88:
e8:13:df:c5:9e:99:63:cb:40:3f:c8:84:91:54:b6:
99:78:8e:90:75:43:09:29:c9:27:24:e7:47:68:ae:
4b:c6:c3:b9:45:15:0f:d1:a6:d1:67:50:ee:0b:56:
3c:72:04:6c:73:ef:aa:ef:bf:af:29:a4:5e:4e:df:
99:1a:39:02:1c:1c:38:31:9a:5b:e9:ec:9e:25:5c:
5c:49:55:31:1b:4d:49:01:6e:c9:b8:a4:b7:92:c4:
83:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9D:C0:AD:D0:20:A5:4D:80:E2:39:A6:AF:31:B6:BC:CB:18:35:FA
X509v3 Authority Key Identifier:
keyid:BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:12:df:c9:35:83:fe:59:4c:88:8a:76:a5:2e:80:70:f3:3f:
bd:74:7e:56:85:10:d0:06:5c:d5:97:f0:55:69:7c:28:63:df:
ce:79:37:15:96:88:29:c2:18:19:fe:f7:51:69:6d:16:d1:46:
11:0d:a9:62:95:2e:fe:37:2a:e9:ca:86:5e:ac:59:5c:dc:66:
bc:96:a1:e2:9a:e3:41:8c:ff:16:1e:c8:79:62:37:0f:7c:79:
85:51:e9:20:23:aa:bb:0f:63:56:1b:8f:30:f1:e3:91:f1:e0:
fa:c4:33:c8:b0:c0:8b:1a:26:c3:6a:35:3f:04:84:13:8f:0a:
5d:89:63:8d:0e:d5:d9:f3:1b:e4:1e:99:57:b7:ee:22:46:07:
69:bc:6e:a2:ca:96:49:db:e0:2f:f5:b1:51:56:bb:e6:99:a7:
08:3d:e7:7f:68:a2:48:6a:ec:c3:ee:d2:05:1b:6c:9b:48:fe:
3a:67:02:3b:bb:f6:ed:94:f0:ca:de:41:77:f5:aa:40:1e:f8:
49:a1:44:ce:a6:98:ee:93:ad:5c:75:aa:73:da:89:ab:fb:83:
9c:03:a4:7b:f9:2e:a7:b7:42:79:e7:00:de:9e:8f:9e:bc:08:
0c:65:58:e9:7a:ae:fe:ac:34:7e:35:45:c7:6c:b9:26:69:6b:
20:df:39:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:17:51 2025 by rpki-client