Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
File: vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft (raw, json)
Hash identifier: OcbEkbelka8atKwmKBu3/ijjNEQR0LYNeN3fFc1k/KE=
Subject key identifier: 75:C8:74:5F:24:E2:26:0B:EF:A7:0E:C5:0F:1F:A0:FE:03:ED:04:77
Authority key identifier: BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39
Certificate issuer: /CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
Certificate serial: 019A4EF4FB036ACE07034D26E5FB6539865F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
Manifest number: 0828
Signing time: Tue 04 Nov 2025 13:01:09 +0000
Manifest this update: Tue 04 Nov 2025 13:01:09 +0000
Manifest next update: Wed 05 Nov 2025 13:01:09 +0000
Files and hashes: 1: L6lTyFXKtOF9j4M00RgctdL3DPI.roa (hash: 82l0fSJIXKbiY5RynH8uwdUeGbScGZ+VMQbyrw1pJ3U=)
2: vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl (hash: MLhupkDTUrv8nWdldSFP4XyEgRQxwSsDfYRaeXi3AU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:fb:03:6a:ce:07:03:4d:26:e5:fb:65:39:86:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
Validity
Not Before: Nov 4 13:01:09 2025 GMT
Not After : Nov 5 13:01:09 2025 GMT
Subject: CN=75c8745f24e2260befa70ec50f1fa0fe03ed0477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1d:95:0c:9f:13:89:38:34:cb:9d:03:75:73:
8f:f2:ea:bf:17:8b:e0:d8:65:42:33:de:2f:16:97:
13:2f:3f:94:61:54:79:67:e5:1f:07:c4:b9:98:35:
21:5a:86:f3:a2:16:49:df:10:b0:29:20:cd:ab:64:
3c:f6:ec:b1:a5:38:eb:fb:8b:73:a1:39:3e:c2:eb:
f8:59:95:c7:83:fa:54:d1:46:26:21:1e:dc:1b:e0:
d4:11:bd:a2:97:b4:ce:47:1a:f0:c2:98:90:c8:d9:
7a:36:bb:a0:a8:c4:7d:50:34:76:ba:3a:67:34:0b:
b8:3d:d3:2f:4a:2b:32:7d:a0:90:1b:7b:e9:40:08:
9f:2e:9d:91:69:1c:33:05:30:7c:c2:7d:f8:ff:f4:
25:fe:e2:aa:7f:01:ef:80:6d:0c:d3:ed:38:b3:67:
7a:a0:78:12:21:21:61:48:78:21:f5:25:48:3d:0a:
bc:4f:4a:ff:fc:59:a0:ad:41:bb:0b:c8:8b:df:ab:
4d:bd:81:93:31:6e:24:04:55:ee:8c:eb:00:01:45:
de:0b:e5:03:8f:b3:0c:86:c9:e9:2e:86:45:b1:db:
1d:30:e6:63:d7:5d:42:59:f9:9f:ee:fe:b9:ca:df:
d1:61:bd:07:b0:59:d6:44:b1:79:54:de:41:52:2e:
67:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C8:74:5F:24:E2:26:0B:EF:A7:0E:C5:0F:1F:A0:FE:03:ED:04:77
X509v3 Authority Key Identifier:
keyid:BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:be:15:8e:b7:f4:e5:d5:59:f0:d5:de:37:95:4a:f8:e8:f6:
6c:0c:e3:61:b7:bb:94:da:e3:84:0e:09:3b:e8:f9:da:bb:00:
fa:c1:9c:f4:aa:fa:51:fc:67:e9:51:4a:f5:19:ae:1a:ed:f1:
66:57:61:a4:44:8b:8c:02:f5:54:d1:a9:0e:e6:81:8b:21:8b:
5f:18:b5:2e:3a:a7:13:0a:56:0c:bf:40:a4:9a:45:dc:a8:3a:
1b:63:9f:09:d6:77:64:dd:a6:b9:93:27:ce:98:fd:64:00:49:
3f:0b:f5:8c:80:76:9c:b2:0e:66:47:c9:ff:57:61:37:4d:3c:
bf:dd:e1:1e:66:3f:16:89:a1:85:51:da:ff:72:88:2a:2e:9e:
41:64:22:a7:7a:86:a1:da:18:f5:3f:93:3a:d5:5d:1a:24:1a:
fc:f6:33:85:bb:9a:0c:cc:1a:c9:dd:b7:19:ec:6f:16:51:ab:
ce:75:50:f0:07:47:3d:1b:23:a6:93:5a:6f:d1:59:95:8f:4f:
f8:0d:b5:7c:02:b6:b4:55:35:f0:c6:e7:6d:5a:23:68:68:1a:
bd:ed:b5:76:f7:16:87:91:a5:7e:58:13:6b:5c:9f:8b:56:80:
9a:60:fc:44:74:1b:24:b8:62:73:f9:3a:8e:76:50:e6:8a:be:
d8:19:18:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:45 2025 by rpki-client