Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
File: vMY_AQxUC81FVDRL-5pZou26vCk.mft (raw, json)
Hash identifier: sdoCDGW4DTacTDZ7l+trceiAIy9QMsym5d3pSFk2VJg=
Subject key identifier: 84:78:3C:91:4E:3A:5C:87:D7:8F:A2:49:AE:70:D1:DC:72:3A:1B:6A
Authority key identifier: BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
Certificate issuer: /CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Certificate serial: 019A4D3D2EAF82D0209AE1D2202B65679567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 05:00:46 +0000
Manifest this update: Tue 04 Nov 2025 05:00:46 +0000
Manifest next update: Wed 05 Nov 2025 05:00:46 +0000
Files and hashes: 1: f54g9Idv6PqQc5NMQvmsvFWJIzA.roa (hash: l130lZQGnDRQWTrBtDjmk6wY+7GBZMzcTr0yBlbCoVI=)
2: vMY_AQxUC81FVDRL-5pZou26vCk.crl (hash: cqQHvP6wI3/6aLyd233knhoSu7vbFlFqFq9vs2ayBhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:2e:af:82:d0:20:9a:e1:d2:20:2b:65:67:95:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Validity
Not Before: Nov 4 05:00:46 2025 GMT
Not After : Nov 5 05:00:46 2025 GMT
Subject: CN=84783c914e3a5c87d78fa249ae70d1dc723a1b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ba:4d:06:02:4b:72:a5:4c:08:82:f1:3c:d3:
fa:71:ea:dd:9a:3a:f6:44:1b:c8:27:16:20:c1:0f:
b2:62:53:f9:c3:3a:f5:9c:c8:ff:8a:ca:4c:94:ba:
3e:a3:82:fe:24:bb:79:a9:ec:59:7c:dc:25:b2:1e:
ac:74:e3:d1:be:e1:f1:c4:d9:6d:37:9c:ba:8e:60:
11:a8:4a:c0:2d:5a:fd:d0:ef:b3:76:d9:67:94:f6:
7c:38:a1:43:63:d9:69:45:d8:df:f4:49:dd:0c:b5:
63:c3:c2:cc:6d:8f:4f:c2:9f:f0:34:c0:4f:1d:7f:
b7:4e:a9:0e:20:da:08:01:2c:d1:ee:13:fb:d4:62:
58:f6:40:36:b7:a4:b0:c6:c6:83:d8:ad:77:69:58:
31:3a:b8:24:e8:64:f8:93:71:7e:d8:99:c5:62:f0:
2b:59:cf:11:47:fc:75:12:b0:0f:bd:f3:63:b4:05:
fe:6f:bd:20:ea:24:6d:b9:c3:c8:88:1f:a5:c4:4d:
ad:81:6b:cd:b2:b9:63:e1:c6:d5:e0:8b:07:3b:7f:
72:f0:65:a4:a0:36:35:69:c5:84:f8:86:91:e8:33:
a4:b2:d8:be:60:a9:34:77:c1:17:2e:9e:86:2b:49:
0e:bb:b3:ae:9e:ac:e9:c1:a6:a7:aa:24:a4:c8:35:
69:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:78:3C:91:4E:3A:5C:87:D7:8F:A2:49:AE:70:D1:DC:72:3A:1B:6A
X509v3 Authority Key Identifier:
keyid:BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:cd:ce:64:05:e1:a4:b5:73:80:4a:5f:79:a7:1c:b8:66:f5:
62:c7:6a:1e:df:d0:e1:de:51:57:04:1c:a1:a9:86:25:ea:00:
cc:1d:7e:f6:3f:3e:03:fa:68:ec:38:ac:9f:50:7b:4d:ee:70:
a5:19:1b:c1:dd:dd:34:ea:8a:f3:96:76:fc:74:11:34:4d:05:
0a:b4:d1:fb:48:ae:17:2b:85:49:54:5f:a5:ae:bd:0f:e0:2d:
19:98:d4:1d:27:0e:7e:00:d8:cc:f9:af:39:c9:23:38:b2:61:
d3:d2:ca:d1:65:f8:7b:2f:5b:cf:66:0e:e6:cd:f6:a1:62:2e:
7d:da:5b:bf:5f:21:2c:f2:15:8a:03:38:0b:c7:92:60:e1:79:
78:00:3c:49:ce:2b:f3:04:86:e6:6c:45:5e:45:d0:56:b9:bb:
ca:ea:75:92:4b:de:cd:17:79:ca:9b:23:ee:19:33:3d:ec:48:
ff:51:1c:15:7c:35:9d:5d:c6:f6:9b:95:93:7c:3e:20:ef:e9:
c7:82:be:6a:cc:b0:57:d4:fa:9b:60:ab:64:ab:8f:5a:94:2f:
27:c3:e1:0a:8a:fd:ca:62:f3:fb:c1:b4:d5:0b:30:9c:f5:28:
5b:89:4f:44:00:20:b0:60:58:b0:ec:03:6b:86:bb:22:6b:54:
01:88:9a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:18:12 2025 by rpki-client