Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
File: vJxAXxQuU-tnscSZI6t5XoQyjJs.mft (raw, json)
Hash identifier: 6dBhnWkfDWKDQBR9WyQp8zNYNv/OoOm5kfY3iR1fNy8=
Subject key identifier: 81:79:50:F9:62:64:40:A4:A2:B4:ED:97:2F:F0:96:F5:F0:39:22:B4
Authority key identifier: BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
Certificate issuer: /CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Certificate serial: 019A4D3D541BA56203CBA3976E2AE4EAA92C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 05:00:56 +0000
Manifest this update: Tue 04 Nov 2025 05:00:56 +0000
Manifest next update: Wed 05 Nov 2025 05:00:56 +0000
Files and hashes: 1: irXjb7CbWugP3w5JDOFWDswYhlc.roa (hash: xfc5cfeM1faq3Raf49DNOnepZD3IOLsHNfYtcKklaZE=)
2: vJxAXxQuU-tnscSZI6t5XoQyjJs.crl (hash: obG8JORnhuPKlw4EzByMklXcFZeTJUflb6Qpcv/ogEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:54:1b:a5:62:03:cb:a3:97:6e:2a:e4:ea:a9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Validity
Not Before: Nov 4 05:00:56 2025 GMT
Not After : Nov 5 05:00:56 2025 GMT
Subject: CN=817950f9626440a4a2b4ed972ff096f5f03922b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a0:17:11:19:7b:38:09:88:1a:22:a6:a8:d9:
d2:02:d5:dd:1c:50:96:29:dd:67:fa:23:b3:15:47:
ca:08:c3:28:3c:9a:e8:90:9b:84:32:e4:90:fe:28:
38:77:3f:31:bf:a6:f4:77:75:5c:fb:77:ea:2b:bb:
16:88:65:76:01:0a:5b:88:22:d6:ef:0e:a2:91:37:
f3:17:dd:2f:3e:28:8e:f0:90:6f:f8:cf:75:19:8f:
ac:af:1f:04:93:ed:60:2d:08:82:05:b2:b2:49:73:
9f:c2:a6:2e:74:11:f1:76:83:5b:51:ff:6c:48:d4:
41:bc:9c:e8:25:65:db:f8:de:78:56:ca:9e:62:1b:
ad:12:8a:82:17:b2:b5:94:ba:c8:36:f8:30:0d:06:
c2:6b:be:ec:33:c6:f0:b6:2d:cd:c1:b5:58:4b:88:
9f:aa:79:22:70:45:25:32:95:e6:c7:ac:eb:4d:da:
00:92:f1:18:51:c7:d5:00:b0:aa:6f:d7:50:38:00:
ac:f9:7c:6c:cc:7b:ce:4b:29:0b:be:9e:33:2e:24:
2c:a5:94:16:29:80:40:d0:42:e8:7e:08:a7:20:e3:
be:84:f2:d6:a0:f3:9c:9f:b1:24:95:31:6c:f9:24:
6f:37:0e:82:3a:9b:4d:b7:05:8e:df:f3:83:1a:58:
40:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:79:50:F9:62:64:40:A4:A2:B4:ED:97:2F:F0:96:F5:F0:39:22:B4
X509v3 Authority Key Identifier:
keyid:BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:53:f0:72:6a:11:e9:1a:0f:53:f7:98:82:7b:c8:8c:ad:70:
35:f6:14:b2:92:78:6d:19:7b:54:a6:9c:30:4e:2d:28:91:ef:
18:d5:2e:0d:55:16:a7:ec:5e:9a:c7:24:12:61:20:76:7d:9f:
31:e3:4e:c1:d4:42:1b:d6:ff:a7:f5:7a:b2:a2:0c:48:7c:2a:
7e:68:9f:1a:91:91:dc:44:0f:13:cf:ae:76:87:18:cf:fd:7c:
e3:73:d4:4b:63:bd:d7:b4:de:4d:e4:93:b6:47:f8:52:0d:a5:
4d:d0:04:14:a3:61:4b:3f:68:f0:77:7f:81:63:b7:4c:76:40:
6c:fb:e0:e5:11:92:fe:25:6b:48:65:1b:c8:94:c7:96:fc:64:
ec:00:b6:79:5d:fd:e1:e7:b9:f9:7f:d7:2b:52:48:ab:8d:2a:
5c:06:fd:90:5e:54:77:64:8a:4b:9e:fe:97:aa:26:69:b5:10:
b0:67:8c:53:36:f8:14:ed:f9:fa:65:53:da:f7:2a:22:e8:c4:
7d:e5:c8:ab:08:a7:55:d1:ff:ab:00:2a:23:7a:9a:a4:31:20:
10:b8:90:06:5b:bb:39:68:3e:ec:69:0f:cb:e0:88:aa:cc:ad:
8e:16:6b:d8:7f:81:ef:e9:95:d2:1f:cb:66:bb:3c:97:da:18:
50:43:64:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:41 2025 by rpki-client