Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json)
Hash identifier: yHfhphjE8hNquUATAVF6bOpfUOkp12G3L3nd9lmIAT8=
Subject key identifier: B1:66:69:3A:5D:2F:B8:11:71:52:A9:03:68:A3:38:99:14:9D:CB:F1
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 019A4E4F8F44303B8B29E7D2FB56DD8FF20A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 10:00:28 +0000
Manifest this update: Tue 04 Nov 2025 10:00:28 +0000
Manifest next update: Wed 05 Nov 2025 10:00:28 +0000
Files and hashes: 1: FG-qCrDb70MUjmpPeG_ABqm2g4I.roa (hash: hYgrw8pe3ohnrPXEYOqOtmTKKEz+HL/P8NWGWnKRQYA=)
2: hsH2HQBoiRDw665UcWSV1lTXYOg.roa (hash: 3M/n4+ffcKMFrGFddlkXam66igSrpB60cTzmDDLi+7s=)
3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: DyoUfRnskr0Ge9LdM6qesnly5mEJgBtBA4mbGai/2lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:8f:44:30:3b:8b:29:e7:d2:fb:56:dd:8f:f2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: Nov 4 10:00:28 2025 GMT
Not After : Nov 5 10:00:28 2025 GMT
Subject: CN=b166693a5d2fb8117152a90368a33899149dcbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:33:0a:ef:7e:16:f1:06:8f:2a:a3:24:ba:0c:
42:17:e9:15:a1:1e:cf:02:58:bd:87:5a:8f:2d:f7:
10:0d:03:97:1e:f7:b8:6e:8e:0a:09:fc:fa:4c:4c:
87:97:e2:45:3c:bb:07:95:4f:c3:a5:f0:ac:1c:f6:
f9:4c:c6:98:60:43:ef:8d:c4:9e:7a:55:f7:5c:38:
15:e1:ff:ad:1e:42:04:13:83:7a:cf:9a:24:28:10:
4f:11:ac:52:18:ea:1b:5d:16:87:14:df:48:40:94:
1e:a0:27:3b:fa:a7:f9:3e:92:49:ff:3a:6a:55:85:
90:78:f7:84:85:30:b4:20:1c:c8:3f:ab:d5:91:d7:
56:49:e8:dc:e2:b7:20:1c:1e:5e:d3:6a:4f:b5:3d:
ef:3d:42:89:3e:72:07:e6:83:fb:f3:7b:d5:69:d3:
f4:a9:80:36:e7:74:24:64:4c:d2:84:bb:18:c7:0d:
0d:c9:a3:92:94:50:ce:fb:11:3f:6f:a5:7b:49:56:
b6:ee:0d:ee:8d:d9:56:49:57:27:2b:6c:a1:7a:12:
53:83:a3:c6:79:da:27:31:d1:16:e6:bb:2d:bc:5f:
08:b0:66:56:99:36:ca:3e:b1:f8:46:aa:ee:9f:6f:
3d:a5:26:a0:d4:92:78:71:2d:3f:73:8e:24:ad:de:
a0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:66:69:3A:5D:2F:B8:11:71:52:A9:03:68:A3:38:99:14:9D:CB:F1
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e0:61:7f:2a:ed:b5:af:5c:24:a3:fe:63:9c:45:2f:45:b6:
f6:c4:ad:a3:0a:b4:77:60:af:0b:f8:37:9e:cb:f2:39:76:b3:
8f:7f:71:1f:5a:c7:d4:f4:62:31:62:88:07:0c:b2:d1:e8:19:
ba:77:40:0f:a3:a3:ca:5e:fd:7c:c5:e1:a4:63:70:23:d8:3a:
f6:8e:55:d2:a5:3a:7d:27:e8:9d:85:19:ca:51:f6:e0:c9:f7:
0c:d3:a0:9b:cc:57:78:6a:7e:d0:9c:bf:a2:a2:33:cd:48:cb:
e4:66:82:29:6e:e1:26:12:64:64:f9:8a:bd:65:3f:43:65:13:
93:e4:f9:1f:c4:33:5f:c9:4d:69:ac:8f:82:4a:57:39:aa:4c:
96:fa:1a:70:46:9d:d6:9c:4c:4d:63:3c:ad:f9:75:e7:83:af:
0b:c2:fa:46:5e:12:6e:07:7e:f2:8a:7b:1c:94:aa:1b:f7:d8:
2c:11:eb:0b:16:9b:b7:d3:0e:17:66:11:3e:4f:ef:50:63:bc:
76:66:af:b6:47:d8:50:37:69:9b:44:7a:30:e9:6b:d6:c3:df:
1a:95:b1:b6:94:1b:91:81:f6:69:e8:fa:84:dd:64:09:96:75:
06:9a:8d:87:4d:bc:2e:a3:14:88:34:2e:0f:90:95:5c:02:a1:
d9:0e:52:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:47 2025 by rpki-client