Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
File: vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft (raw, json)
Hash identifier: RZslXmlNm46YJLkb1+zuwnus2OrNyQIISGzpKnkNOZ8=
Subject key identifier: 1D:E5:DD:F4:D6:67:5F:BA:98:42:B2:71:21:0E:3E:6A:53:47:BB:61
Authority key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
Certificate issuer: /CN=bccd52a6a7f957171b15f7be5e20916428369401
Certificate serial: 019A4F994C4D6239B73D91DA3E9C104DAC12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
Manifest number: 0D1C
Signing time: Tue 04 Nov 2025 16:00:37 +0000
Manifest this update: Tue 04 Nov 2025 16:00:37 +0000
Manifest next update: Wed 05 Nov 2025 16:00:37 +0000
Files and hashes: 1: MlrZXY467hcKkUIRGGimefuysqw.roa (hash: 8xTFNLaI9ZUN0WOAqjHb1HCh8TndFu6MdTiusUYVPKk=)
2: PH8esjlGPr5XZMLNZBxjvSMMmns.roa (hash: SLv7cyYvUTE3oyGowfNA00S/oJCYt4i19Q1cbVhOESM=)
3: Yg6DTQFOxUODDTv6-H6dvQEVbTM.roa (hash: PJ7rQ8sF0YgySYec9mOacXXxzI2i0BkcNGpRRCBKL7I=)
4: vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl (hash: Wn5v1J+Ejd5LR68AvVztm389gXOGZk7hBS4HPWM7ACg=)
5: vy4QEQmpfFko8qvKIrvH3kTRn8Q.roa (hash: JR6T1NXgPEvUk1k6IDW5N+7/dwOJQQ0UovxQWbtVdiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:4c:4d:62:39:b7:3d:91:da:3e:9c:10:4d:ac:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bccd52a6a7f957171b15f7be5e20916428369401
Validity
Not Before: Nov 4 16:00:37 2025 GMT
Not After : Nov 5 16:00:37 2025 GMT
Subject: CN=1de5ddf4d6675fba9842b271210e3e6a5347bb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:aa:b3:60:90:1a:6b:77:0e:ec:d6:62:c7:ca:
7e:6f:e5:1f:36:0f:2c:d2:77:28:69:27:29:39:18:
7d:f1:b6:91:25:84:13:c6:64:fb:0b:46:48:1f:53:
91:24:d7:92:6c:4b:c2:97:0a:44:88:da:79:db:a7:
6d:21:cc:6d:6d:3e:a5:6b:70:17:cb:da:40:ad:37:
de:4d:f0:76:65:71:e2:35:ec:3a:47:1e:fb:da:dc:
dc:c7:81:f2:93:a1:63:e3:a7:e4:c6:91:7e:33:70:
a2:c7:d3:d7:5c:5d:97:4a:f2:55:e8:14:a8:8b:b0:
fb:49:b3:d1:aa:b2:3a:6f:ab:e7:8d:15:fd:47:38:
47:0e:3b:b2:cb:50:ee:40:5e:2e:5b:3e:59:3e:34:
76:39:8a:f3:83:b7:4a:9c:9e:23:dd:2f:4c:d1:ec:
3e:5e:5c:8a:8f:4f:7f:66:96:b0:f5:77:76:e8:b4:
a7:87:64:d5:d1:0d:41:b2:36:64:ff:8a:df:6d:f9:
e2:ff:48:ea:fd:8a:ed:49:88:2f:6e:51:2b:57:20:
c8:c1:77:d7:70:7d:06:a9:b0:c0:df:f6:ba:4d:8d:
be:8b:04:55:4f:bc:f8:2e:b3:cf:57:1f:45:78:06:
77:72:25:86:ca:f0:f1:fe:48:63:a8:31:02:0c:3d:
36:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E5:DD:F4:D6:67:5F:BA:98:42:B2:71:21:0E:3E:6A:53:47:BB:61
X509v3 Authority Key Identifier:
keyid:BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7c:a9:e7:5b:44:d4:72:95:9d:35:35:da:00:f8:c1:48:4e:
e0:56:07:4e:0b:99:9f:3e:b4:96:2f:99:e5:72:74:4b:24:9c:
8c:a8:2a:0b:53:f1:fb:f8:f2:1a:da:7d:30:fe:85:f7:a2:da:
1d:24:d2:21:1a:d4:45:ae:d5:c3:70:4d:81:e6:81:68:ac:57:
f1:f1:f6:cd:5b:3b:37:51:d1:26:a5:55:4f:94:f7:5b:5b:74:
83:2a:bc:e8:46:08:a8:6c:bb:ac:ab:3d:eb:fe:ec:80:39:9a:
7d:82:fb:31:1c:0f:14:2b:e6:aa:3c:6d:bb:37:08:dc:41:a5:
3c:2e:c8:96:2b:7c:bf:63:78:80:70:7b:d5:29:b2:0b:45:6f:
76:4d:4f:2d:fd:2b:a4:08:b3:02:0e:99:5c:7a:bd:b5:ec:8b:
03:2b:7a:d1:f7:ec:b2:53:57:4b:b8:c8:8b:03:07:c2:15:5c:
e8:73:02:09:9b:d7:1c:24:3e:42:4f:c3:35:a5:d1:44:8c:77:
6a:cc:5d:1a:50:43:0d:73:3f:3c:92:a4:2c:01:b9:84:8c:0c:
42:fa:ee:a5:d5:6f:8d:16:74:82:d8:ad:a3:0a:9e:f1:cb:b7:
19:f3:1d:63:76:2b:19:d9:0f:14:85:5f:81:33:36:e7:d7:53:
8b:07:9d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:54:43 2025 by rpki-client