Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
File: vvUlLMrD9twUJrVT8sHHIzrMiUs.mft (raw, json)
Hash identifier: R8ELblJmTnBKletcVPkSF2vt1YgjSAHR7vCOTgwNmoI=
Subject key identifier: 2D:D4:D5:8F:12:7F:02:5C:8D:B8:A5:F3:0D:DE:0B:74:B0:B6:BA:2B
Authority key identifier: BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
Certificate issuer: /CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Certificate serial: 019A4F2B498C0A36EE0C340B94D632F8BA08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 14:00:28 +0000
Manifest this update: Tue 04 Nov 2025 14:00:28 +0000
Manifest next update: Wed 05 Nov 2025 14:00:28 +0000
Files and hashes: 1: cztKiFowQoK_UYPJ2AEdLhmfdJY.roa (hash: zSStQQUNC6z+zgYsdleYs1GIe5kvbt6u6C94AWl4nn0=)
2: vvUlLMrD9twUJrVT8sHHIzrMiUs.crl (hash: DldCGxPvoaf90CuCuo3LEaCkxFKLwxFKOvGiUHAlTmM=)
3: xlHcoYULH7mPEmpcqtscwUSRg-k.roa (hash: A4kztX9ZPQEUnGsY/7aFwo4jdiC6qf6Ig/R2vXwJcNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:49:8c:0a:36:ee:0c:34:0b:94:d6:32:f8:ba:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Validity
Not Before: Nov 4 14:00:28 2025 GMT
Not After : Nov 5 14:00:28 2025 GMT
Subject: CN=2dd4d58f127f025c8db8a5f30dde0b74b0b6ba2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e4:bb:93:b1:61:40:fa:fb:21:fc:d1:d2:54:
11:2d:e2:18:89:d7:21:bf:85:02:f2:a3:b6:28:70:
19:22:0f:d7:5b:7a:97:52:ab:0b:45:01:b9:df:cc:
65:09:57:c4:49:65:c1:d3:b2:3d:53:4c:01:a3:6e:
0a:b1:22:70:b8:69:7a:8b:d1:29:50:b0:b4:83:4f:
fb:ec:e2:08:f6:b1:c4:35:61:aa:a1:1e:5e:4d:62:
29:61:97:08:cb:e4:54:4e:81:06:99:da:ca:77:94:
00:dd:8a:3d:83:fc:f9:d7:91:d3:64:f8:a2:77:98:
c6:34:cc:9d:a3:6b:c4:aa:4e:0e:38:aa:4b:c9:5d:
31:27:29:c4:a5:ad:33:3c:d7:35:e3:b8:db:d5:90:
fe:e3:df:3b:b6:33:af:36:72:5b:50:8b:1b:3a:04:
3d:f8:3a:ff:df:e6:5e:55:f5:8e:dc:a0:05:a7:e9:
b5:8c:5f:17:c8:c5:91:31:b7:30:28:17:de:aa:45:
7e:8a:d0:b4:c1:58:c1:46:fa:09:02:89:94:95:f7:
dc:13:fe:9e:3b:cc:a3:49:77:a3:06:f8:7e:d7:57:
10:ae:59:b8:6f:12:f4:00:6b:2d:bb:9d:3b:f8:87:
2e:dd:71:1c:b6:bd:a2:b0:5b:74:7c:86:71:f6:d2:
ab:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D4:D5:8F:12:7F:02:5C:8D:B8:A5:F3:0D:DE:0B:74:B0:B6:BA:2B
X509v3 Authority Key Identifier:
keyid:BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:dd:1d:bb:0f:00:d4:51:26:69:0e:50:fb:64:3b:3e:94:48:
d6:58:bd:33:90:db:92:13:77:15:b0:29:9c:0a:2c:f7:7f:d2:
5c:5d:af:37:19:86:28:74:f3:4d:2e:fe:24:c8:03:66:9b:a3:
ff:a4:03:c6:52:83:0d:eb:1f:48:5a:a5:c6:e5:28:21:e1:f2:
82:63:c5:7e:99:91:bf:9f:ff:99:68:be:00:1d:56:41:b8:6e:
e1:ad:77:77:02:55:4f:84:d6:a8:74:52:cc:0e:01:8e:6b:91:
ec:50:4c:31:bf:a8:a4:e8:2d:ae:a2:a5:dc:e7:c3:09:44:bf:
d2:c6:d5:a0:ce:14:c5:b2:29:72:1e:81:35:57:e4:ba:e6:aa:
f7:b3:cd:ad:31:e4:7a:f3:c3:45:a4:a7:f5:52:42:05:25:ed:
10:9a:90:95:d7:10:5d:e9:03:7b:fb:75:7f:f2:f5:62:0d:68:
06:d6:b5:c3:70:43:51:44:2f:b7:dc:0a:22:33:43:7f:84:f5:
c2:1c:01:cd:dd:81:57:1d:fb:71:df:16:e6:99:51:ad:2e:81:
a9:8e:1b:c5:c7:c4:90:7e:ae:6b:42:f5:12:cd:9b:cf:62:90:
e2:77:ec:5c:54:2e:a2:cb:4f:40:00:02:30:68:09:2e:3f:e1:
bc:e7:13:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:27:54 2025 by rpki-client