Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
File: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft (raw, json)
Hash identifier: lJ1jSOmvYxnwF5jwFovsTJy8TgTp3Yj/93tAiTy6/AU=
Subject key identifier: EB:10:67:E0:7F:BC:81:9D:63:1D:46:D1:DE:59:A9:A8:76:4A:91:78
Authority key identifier: BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
Certificate issuer: /CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Certificate serial: 019A53ACCCCA72F93721265D8B43E2B3A7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 11:00:24 +0000
Manifest this update: Wed 05 Nov 2025 11:00:24 +0000
Manifest next update: Thu 06 Nov 2025 11:00:24 +0000
Files and hashes: 1: 1rkUPHoUCa7mNvZ-1McSv4VTlL4.roa (hash: 7aGZcVrrNLU0uixa8/gBU4YvCztU5V0t53AcHm6cX3E=)
2: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl (hash: 6iQGVvigHdxkm6v6bF6Di9HZrn+x08mjOprmU29Lcp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:cc:ca:72:f9:37:21:26:5d:8b:43:e2:b3:a7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Validity
Not Before: Nov 5 11:00:24 2025 GMT
Not After : Nov 6 11:00:24 2025 GMT
Subject: CN=eb1067e07fbc819d631d46d1de59a9a8764a9178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a4:f3:c9:5e:3e:a8:b4:55:b3:84:8e:72:95:
4d:8b:6b:c2:8b:c7:db:c5:92:b6:f3:6a:0c:ac:37:
d8:20:e6:a7:75:93:c9:ef:05:bf:ab:2e:7d:3e:51:
56:53:2f:da:b3:a6:5a:0f:bd:43:34:4e:42:4d:ce:
5a:03:ad:32:67:1f:7c:42:05:b7:4f:6c:f9:86:7b:
5a:7b:8d:f1:ae:0e:5c:49:85:5c:34:e0:4a:0c:10:
7f:65:c6:14:df:e0:69:a1:63:ab:87:44:2a:a9:14:
ae:17:b7:2f:a7:a6:58:0a:dc:db:43:2a:1a:06:90:
f2:5f:1d:32:f7:d0:3e:c7:6c:20:5f:2e:d5:ff:90:
9a:51:cb:c1:5f:12:e0:fd:e1:bc:b2:5f:44:7b:12:
c4:e2:9e:ed:ad:c2:b0:3d:d6:0d:c3:cc:e1:a6:ac:
96:eb:fa:46:4e:05:f5:29:b6:78:ae:30:7f:a3:61:
18:e0:27:13:8b:0d:24:aa:4d:7d:b5:f7:5c:b8:d8:
0a:f1:46:66:85:7d:88:bc:da:9f:3e:e9:d0:46:29:
ef:aa:bb:56:48:5c:f9:82:fb:06:15:87:ed:ba:25:
cd:39:4c:eb:fb:0c:cf:2f:bc:ea:74:98:c6:d4:d8:
70:8c:77:59:2b:0f:8d:a6:39:fa:99:0c:95:b1:cc:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:10:67:E0:7F:BC:81:9D:63:1D:46:D1:DE:59:A9:A8:76:4A:91:78
X509v3 Authority Key Identifier:
keyid:BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:40:ca:63:b8:19:ca:84:62:e7:e5:a7:85:b2:09:89:1b:3d:
3d:cd:9b:bf:68:2e:52:48:83:7e:01:27:98:9c:41:c1:af:a5:
2d:65:b3:cf:40:38:9c:50:48:71:94:b0:a9:52:66:c7:7f:c6:
6e:68:69:7b:89:aa:46:73:0f:f7:32:76:ac:91:ba:73:9d:17:
7c:c7:86:13:d8:ab:00:85:e0:42:c6:1d:2e:17:19:04:de:8a:
f5:52:a2:27:c9:cd:8d:d3:e7:9c:8d:a5:f8:a4:07:a0:da:67:
68:aa:cb:03:09:3d:c1:0f:0f:71:2b:d5:d5:fc:7f:9b:e7:5d:
65:38:ed:ba:6b:f6:17:cf:fb:68:b5:c1:51:af:9c:bb:7e:7e:
e7:51:85:f4:9c:9b:49:79:ef:41:d2:7d:ef:75:61:da:fa:87:
e7:cb:92:ab:5d:59:da:db:bb:33:70:1e:8e:1d:96:1d:88:3f:
8b:9c:e0:ef:79:21:d8:86:9f:88:5a:f3:ff:8a:36:38:6b:01:
c9:84:63:fc:f2:98:87:16:a1:b2:f6:aa:a9:22:80:74:42:e1:
69:eb:87:db:1a:41:bf:6b:be:0c:b6:a8:78:d0:98:83:bd:51:
1c:55:7e:33:2a:70:52:e1:44:48:e9:98:73:65:25:b3:a5:3f:
5e:8f:38:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:56:02 2025 by rpki-client