Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
File: vWqnNi02eSy8-oNgm111zJZfP68.mft (raw, json)
Hash identifier: LwHUSPd0ne4e3wlQv71sfyU3bl9M9v5M9VlT9irMz6M=
Subject key identifier: 8D:9E:90:B3:B9:59:38:4C:08:BD:B7:6B:AC:D9:FC:77:2E:6D:71:0D
Authority key identifier: BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
Certificate issuer: /CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
Certificate serial: 019A4E4FD9509713F924438730B6ACD9E193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 10:00:47 +0000
Manifest this update: Tue 04 Nov 2025 10:00:47 +0000
Manifest next update: Wed 05 Nov 2025 10:00:47 +0000
Files and hashes: 1: Sl2g3CrSt9KX4nf7RqblAxhzwzY.roa (hash: V3ZD7OVN+yHlCXCBI+yKadNAgEWwEZET8SnJuQKupx4=)
2: vWqnNi02eSy8-oNgm111zJZfP68.crl (hash: SZVyxoDj9i6UOhk9IN5UGe4pYv5vJKLZQb8tTsPRn+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:d9:50:97:13:f9:24:43:87:30:b6:ac:d9:e1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
Validity
Not Before: Nov 4 10:00:47 2025 GMT
Not After : Nov 5 10:00:47 2025 GMT
Subject: CN=8d9e90b3b959384c08bdb76bacd9fc772e6d710d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3a:97:6b:0f:b5:42:47:bc:c2:96:05:37:2a:
11:44:58:fa:8f:06:d3:80:85:dc:7a:e4:84:b9:9d:
01:54:b5:69:86:4e:53:b5:3b:fa:0f:53:c2:e4:bc:
a6:59:f8:ca:7c:74:0c:49:f0:c4:03:e9:d5:78:0c:
7b:48:8e:19:d9:52:69:74:e5:38:51:83:f2:52:c4:
18:ec:d5:27:2e:c1:5b:a3:92:01:cc:2a:29:47:1f:
7e:b0:15:2d:91:62:fc:65:22:ac:84:da:13:9e:52:
58:91:9f:fc:02:78:7e:ed:63:a9:3d:cd:17:50:10:
bf:a5:fa:91:73:55:bf:73:f5:9d:e2:73:39:35:8e:
6c:ee:a2:d8:0a:2e:3e:47:83:3c:6b:a7:de:12:45:
0f:ca:a9:7b:cb:1e:75:d8:8a:7e:aa:8d:51:3e:dd:
8e:c3:25:9d:26:d3:be:7d:26:26:16:fb:ad:cb:e6:
da:73:1e:57:4f:99:5d:17:ba:f1:37:a3:df:41:0d:
28:1e:55:fe:06:4a:66:32:27:af:b1:ce:b1:72:51:
91:84:1e:83:2c:04:04:bd:53:06:e3:5e:7f:d8:46:
5f:d6:6d:96:0d:a8:92:fc:7b:4c:40:9d:35:7e:b9:
45:3d:9d:95:9f:8a:6c:eb:d5:72:f4:f0:85:9c:96:
1e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9E:90:B3:B9:59:38:4C:08:BD:B7:6B:AC:D9:FC:77:2E:6D:71:0D
X509v3 Authority Key Identifier:
keyid:BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ee:b2:d6:68:5d:ed:f1:17:05:3f:72:b7:8b:06:07:f3:de:
26:5d:92:16:cc:0c:e3:19:10:f3:ea:c1:af:44:d4:88:d4:43:
6e:e4:5c:eb:8b:f3:e9:b9:a5:13:0a:ac:c4:76:0d:05:73:1d:
ba:52:b7:cb:a8:7b:86:49:6c:24:e5:24:a1:2f:ae:16:ab:37:
3f:ed:0c:7f:b3:e9:26:2b:9b:b7:31:80:54:82:7c:35:d1:64:
f2:b5:14:86:51:71:8f:8c:36:e2:c1:35:61:62:79:ad:48:84:
d8:90:e7:5f:8c:9a:c9:f5:9b:7a:cc:6e:92:13:3d:0a:eb:e4:
5b:c2:fa:90:13:cc:ef:21:24:20:d7:bc:2a:14:75:78:eb:b8:
ab:9a:44:1e:a7:42:6d:e3:f9:0f:17:f1:19:32:fc:cc:36:bc:
00:dd:c8:08:b1:87:c5:8d:f8:89:f5:74:59:af:a0:3f:b4:6d:
0d:4c:21:7b:c7:3d:47:ab:49:58:9a:d3:63:d5:ca:32:e0:ca:
7f:ae:ae:fb:69:1b:9b:a8:51:3b:e9:bd:67:d6:57:77:40:e0:
43:8f:8e:11:f1:0e:51:f7:b1:6d:b5:c0:49:3a:34:df:67:ab:
ed:1c:4a:7c:86:34:9e:91:de:1f:71:32:23:ab:f7:e5:9f:60:
d0:3e:37:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:44 2025 by rpki-client