Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
File: dv4wVehykAAOMof3q1iDgCpapto.mft (raw, json)
Hash identifier: MPBlcs+S7gddGIWeruAOlHFBfLPN9DvNZQxXvBmHmjE=
Subject key identifier: 59:94:C1:A6:EC:84:91:61:36:BB:8D:2A:85:8D:E3:35:92:2F:D2:39
Authority key identifier: 76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
Certificate issuer: /CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Certificate serial: 019A4EF49776E13556E4111EFD592AD92538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
Manifest number: 0A34
Signing time: Tue 04 Nov 2025 13:00:43 +0000
Manifest this update: Tue 04 Nov 2025 13:00:43 +0000
Manifest next update: Wed 05 Nov 2025 13:00:43 +0000
Files and hashes: 1: 8nt8dsbMeiqtSt6KoDNGgs5pyTM.roa (hash: RvFtibhd8tSawl3iSjZ76rX4z9HhG8SM7MwleTD5nY0=)
2: dv4wVehykAAOMof3q1iDgCpapto.crl (hash: KC1RudHQlPiveH4u3mPNwGp40tqnTHqYDdpYAkxbnuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:97:76:e1:35:56:e4:11:1e:fd:59:2a:d9:25:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Validity
Not Before: Nov 4 13:00:43 2025 GMT
Not After : Nov 5 13:00:43 2025 GMT
Subject: CN=5994c1a6ec84916136bb8d2a858de335922fd239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:78:aa:46:a1:5a:89:66:b0:14:5d:07:93:
7a:db:17:d4:62:ce:17:e3:3a:ed:e0:6f:88:a5:ab:
fd:cb:ef:9e:7c:46:4b:cb:8a:1f:c4:95:fb:40:45:
7d:23:6c:e4:29:59:38:98:ed:d5:d4:80:09:87:64:
72:cb:ee:1d:1e:20:8a:5b:4c:6b:30:8a:ae:96:42:
a3:41:44:b5:11:59:ec:d4:17:04:be:e8:99:62:7b:
b4:b6:43:6d:5b:f7:dc:d9:30:13:eb:23:0e:b2:2d:
a2:04:da:11:6d:b1:71:dc:0c:3d:2c:80:75:47:e1:
bc:90:07:ac:40:25:78:3c:21:50:67:20:b4:a0:4c:
a8:ba:f3:a6:65:8e:3a:fa:02:d7:61:dc:0e:c9:ce:
97:d9:95:6b:98:37:8c:b1:90:62:75:c1:0c:a6:f0:
73:71:f7:f8:66:eb:6f:fe:c0:95:00:3d:03:c1:5c:
4c:3c:34:17:72:3c:58:71:2c:fb:f5:4d:2b:c1:49:
2f:96:23:15:25:b3:af:ca:1a:8a:ec:d1:a0:26:ca:
aa:ad:4b:0a:fd:84:74:37:c4:91:2a:5c:1f:9f:dd:
aa:f1:74:00:aa:4d:19:8f:fe:fd:e9:c6:cf:d0:70:
8e:e7:ff:88:b8:28:fd:3e:a4:2a:3a:76:8e:55:4e:
fb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:94:C1:A6:EC:84:91:61:36:BB:8D:2A:85:8D:E3:35:92:2F:D2:39
X509v3 Authority Key Identifier:
keyid:76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2d:69:d8:fd:57:1b:a3:6d:1d:54:b4:93:69:bd:2c:23:e6:
1c:43:4e:92:be:80:a8:46:98:c4:8d:eb:09:1b:87:73:d9:00:
40:56:42:f8:b6:38:4f:10:61:1c:b4:a5:03:56:0b:36:18:67:
48:77:b1:6f:34:87:25:ea:e7:cb:b4:f2:e7:be:a1:21:d2:2c:
2f:cb:d7:05:9e:ac:4c:3b:a3:e3:db:60:eb:c7:b1:52:10:a3:
35:58:31:fa:c8:79:df:98:2d:a2:fb:ba:59:96:a2:13:e6:8d:
78:de:fe:f3:6a:08:70:40:2b:09:9b:55:ad:f3:dd:0e:72:cd:
54:88:a0:8d:e6:94:a6:7e:ef:73:f2:79:04:d5:65:6b:ac:40:
c3:4b:c3:65:4f:52:ea:88:d4:b5:16:09:5c:05:ee:30:80:f0:
3e:98:2e:12:e7:0a:ad:75:ee:c5:25:5d:0c:23:2e:59:e2:8a:
3b:b0:15:5f:ca:d3:a3:32:67:86:9b:91:83:df:3a:82:79:40:
ac:35:0e:61:0f:f9:ad:d4:3b:a5:0e:a1:5d:ee:c9:85:48:67:
1a:bf:89:23:de:1b:7d:ca:a4:84:00:88:bc:51:cc:b8:56:55:
a3:8a:b2:96:4a:ec:c4:2f:46:8e:ca:7d:1d:21:50:5a:b2:65:
be:5d:74:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:44 2025 by rpki-client