Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
File: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft (raw, json)
Hash identifier: iFXrJNrI1DYZjUFE0ZTgG+qjAsNY7tX463gu92m3FSM=
Subject key identifier: 5A:60:AC:81:0E:C7:88:20:81:2F:02:D4:33:32:DB:E7:64:F3:9B:8B
Authority key identifier: BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43
Certificate issuer: /CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
Certificate serial: 019A53080554FB82EF4F9409E7658E60C589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
Manifest number: 0C73
Signing time: Wed 05 Nov 2025 08:00:25 +0000
Manifest this update: Wed 05 Nov 2025 08:00:25 +0000
Manifest next update: Thu 06 Nov 2025 08:00:25 +0000
Files and hashes: 1: 3Vc8GAv3OdpXw-IEwIeY1NxUP6c.roa (hash: qDWay94UtnkH+WvsjYkj9wPwpR3+5E60OgC2LXVgLK8=)
2: hj3e4V3BcXmmC3J4J-LR8jJvgpQ.roa (hash: ajCXRDGbAHENq7O0wMkVKgSnARDHbWRHh8qUlDNLW3k=)
3: o3kVjVR-Bk2kY6NJIMAGFLe8Jgw.roa (hash: RhEyDbo5nJOAevwisCtwUttff0SfpdFcDo7LzXQNDoo=)
4: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl (hash: dC7gtCm0n/xYaHO1tMKDjo5b1I5YiU3KIR3TJyqEvnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:05:54:fb:82:ef:4f:94:09:e7:65:8e:60:c5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
Validity
Not Before: Nov 5 08:00:25 2025 GMT
Not After : Nov 6 08:00:25 2025 GMT
Subject: CN=5a60ac810ec78820812f02d43332dbe764f39b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:50:7d:cf:53:f8:d2:b3:a2:41:91:72:da:4c:
bf:cd:70:a3:56:db:88:bf:db:cf:e9:a7:23:a7:3f:
8e:ff:0d:b0:93:35:7c:ca:0b:3a:2a:6b:ab:cb:3b:
1e:b7:5b:29:0c:0e:55:65:de:73:79:0d:ec:d0:c9:
d2:62:25:1a:a4:83:4d:cc:40:27:5d:40:e8:1f:79:
4c:37:d1:c2:27:d5:14:95:fd:dc:05:6d:56:a3:d7:
29:23:0c:bb:89:74:0f:88:fd:09:75:0d:1b:33:29:
5d:8a:30:5b:fa:19:3c:14:3f:14:68:9a:7f:ec:84:
d0:bc:29:2e:2f:20:ce:92:17:4c:ab:ad:ca:eb:3a:
c0:7e:93:e8:cc:27:14:65:64:4e:18:91:b3:f0:34:
08:a0:8e:b9:78:4e:46:5c:c8:fc:81:e2:62:86:6f:
d4:75:58:1c:91:fa:94:e2:fa:5f:6a:61:68:a2:ed:
cf:f0:10:30:f8:79:28:cf:9e:8c:3b:e2:ab:eb:04:
9d:ae:0c:62:ce:86:8e:42:e4:7e:58:2c:35:26:3d:
ef:f9:f8:03:b6:c5:0a:fb:13:d4:88:d3:e8:94:a0:
bd:1a:6e:00:44:95:8f:c8:db:69:ed:72:a2:33:a1:
0b:20:12:a1:fd:a1:76:62:8c:b6:fa:04:c6:cf:f1:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:60:AC:81:0E:C7:88:20:81:2F:02:D4:33:32:DB:E7:64:F3:9B:8B
X509v3 Authority Key Identifier:
keyid:BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cb:1d:7e:1b:ea:73:1a:26:36:42:f0:f0:bc:07:79:d1:3c:
e8:a5:6c:36:04:ff:42:7c:62:2d:ce:f7:0f:13:6d:d3:a4:aa:
ee:a1:19:7b:4d:69:a6:3f:06:d2:a2:06:c9:d5:1a:91:d4:89:
bb:b3:7c:be:1c:bb:c6:e0:b0:58:ec:d6:2e:61:f8:97:69:aa:
09:2a:d0:2b:3a:b8:84:e0:63:5f:b1:d9:44:02:d2:c6:de:59:
c7:3a:01:c3:e5:91:49:b8:0f:4a:a0:73:40:62:0f:f1:34:13:
10:2d:26:cf:c3:39:70:55:f6:64:cc:bb:83:8f:d6:93:ef:5d:
29:96:59:36:9c:06:85:27:06:50:bf:7a:1b:45:7a:7f:67:7f:
23:f9:73:bd:61:08:e6:a0:23:ad:4a:b2:ab:26:00:0c:87:92:
fb:0a:79:2e:54:e9:29:98:f3:05:d9:7f:17:5c:80:85:0b:aa:
97:1e:ee:c6:51:6b:5a:2c:fc:76:ce:b5:63:ef:3f:ee:20:d0:
f7:d4:8e:42:f7:bd:60:4a:7d:02:79:0c:92:b6:85:97:96:ff:
ce:18:13:e2:7f:a1:13:12:5e:be:12:ec:96:46:7d:47:8a:99:
87:25:b9:7b:ed:ca:f1:ff:0f:79:d5:11:7c:dc:b2:75:bf:ba:
f5:6d:75:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:03:44 2025 by rpki-client