Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
File: pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft (raw, json)
Hash identifier: jaTEdI/UvFbGUluZjK/qIpqspRabtXMuOc6S3u0rewo=
Subject key identifier: 3C:73:B3:2D:0C:A2:AD:FA:42:48:84:47:FC:15:3E:B0:B0:53:9A:65
Authority key identifier: A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
Certificate issuer: /CN=a5541609cd947bedfc99125840030108a3f141c1
Certificate serial: 019A526374B696DD0A399F4FE234C6D33A69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
Manifest number: 84
Signing time: Wed 05 Nov 2025 05:00:40 +0000
Manifest this update: Wed 05 Nov 2025 05:00:40 +0000
Manifest next update: Thu 06 Nov 2025 05:00:40 +0000
Files and hashes: 1: iLByoUx0bSCHlK7naUf7Pjeg10s.roa (hash: p3s+AOmmmdMwW9p+y2A48IFtADeAkvA1dJFhumD2cdE=)
2: pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl (hash: mhTDe/nDkaq/4WwpW6erJYw1qeNHOLf1A5vYxj+kGrU=)
3: r_gNy_NosPTOUZDPM9v1Nr4pMtI.roa (hash: rrscO3NmKjsybDb1fyB6oQll5WC+7i7OHcmPMCVOfDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:74:b6:96:dd:0a:39:9f:4f:e2:34:c6:d3:3a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5541609cd947bedfc99125840030108a3f141c1
Validity
Not Before: Nov 5 05:00:40 2025 GMT
Not After : Nov 6 05:00:40 2025 GMT
Subject: CN=3c73b32d0ca2adfa42488447fc153eb0b0539a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:34:50:5a:d1:fe:a1:fa:f1:40:0f:81:52:76:
92:d3:17:6b:54:76:00:6f:0a:5f:a4:13:b5:fd:26:
dd:fb:73:40:a0:42:82:7e:62:92:14:f7:78:b7:7c:
54:27:e0:7d:54:7c:67:60:8b:ce:f2:a8:76:79:0a:
f8:3d:c3:5c:5d:9f:f1:89:aa:32:3b:1d:68:5e:d0:
cc:41:d7:9e:5d:7d:7e:a7:a9:77:f3:9d:02:02:75:
73:a0:81:24:24:ec:81:21:68:cf:3f:b2:26:ba:15:
42:23:1c:25:75:8a:c9:49:c1:07:b8:92:29:ef:d2:
76:dc:9a:8b:9e:f7:82:c8:96:6c:1b:40:f1:6a:8c:
63:64:2e:68:6b:df:ef:b1:50:0f:6e:dd:85:ba:57:
6c:00:29:59:19:34:a0:99:dc:16:2a:01:d7:0c:d4:
18:86:94:1e:d4:44:dd:e5:14:8b:58:fd:15:a8:74:
9f:22:08:06:8e:b1:56:b4:62:9f:03:a8:27:5c:d5:
c8:4e:44:a1:a4:2a:17:9d:f0:bc:5a:9c:83:10:85:
18:2f:26:61:7b:87:7f:f8:53:9b:e7:ed:c3:54:97:
cd:0a:ac:25:30:b3:90:4e:c6:91:58:9b:eb:b3:b9:
3f:27:a2:1b:44:c1:74:99:c5:6a:f6:6e:9e:72:ef:
6b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:73:B3:2D:0C:A2:AD:FA:42:48:84:47:FC:15:3E:B0:B0:53:9A:65
X509v3 Authority Key Identifier:
keyid:A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b1:c8:fd:eb:e2:3c:a3:2f:53:d6:39:4b:da:c8:85:18:73:
4e:fb:56:9e:0f:82:36:28:31:ad:2d:f9:38:a9:e0:f9:f0:fe:
16:12:57:7b:9e:81:1f:02:e4:fd:f4:a2:dd:65:37:92:17:17:
16:ff:f4:97:02:ff:3e:14:2d:c0:05:c8:52:15:92:92:78:b2:
4b:7f:df:fe:91:4b:ba:d9:4a:c5:ea:a9:8b:47:89:cd:53:9d:
6d:16:a4:63:da:02:cf:97:4f:f4:a1:fb:0c:53:2a:98:ba:ed:
52:82:50:9e:e3:bb:6a:8a:66:99:37:48:9c:ac:ea:31:74:90:
a2:29:c2:a5:b4:b9:a7:0c:b2:e8:9b:96:41:9a:f2:e4:fe:e5:
be:dd:34:cd:be:e4:f8:48:85:62:8a:f1:5b:3e:20:f2:03:be:
0f:ba:46:73:55:cc:8b:d8:55:e1:7a:a4:15:c6:86:c4:4f:77:
69:b0:3c:bc:35:db:f7:96:a4:57:8c:3c:f3:e3:c2:44:5d:dc:
1d:cf:66:3a:bc:07:1d:f0:e3:22:0a:82:01:ad:51:85:f3:56:
e8:8f:0d:d2:11:f6:29:de:dc:de:df:e1:7e:7a:ef:ae:c2:5e:
4e:4f:7e:f3:46:d3:04:bc:c6:ef:17:9b:9a:be:c1:c5:31:0b:
2e:39:b6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:31:15 2025 by rpki-client