Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
File: vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft (raw, json)
Hash identifier: 7xdXKL+vNdohxumo2Pb3emEY3BiO3RA/psAKa3hUo6U=
Subject key identifier: 60:22:C4:FB:CA:95:CD:8A:93:3F:DB:F5:A8:48:FF:62:EA:90:A9:8B
Authority key identifier: BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
Certificate issuer: /CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Certificate serial: 019A5308159DC811B7D932B37B2302FCA2E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 08:00:29 +0000
Manifest this update: Wed 05 Nov 2025 08:00:29 +0000
Manifest next update: Thu 06 Nov 2025 08:00:29 +0000
Files and hashes: 1: 9VNbjYPZNCWhcZlYCO8YbXFUdTs.roa (hash: DW1s4poaFcxeoMfxfTTf75NS52EQcgEZYuwjPKvajE0=)
2: TbgjMEdQ0rbdH1wsIeqh_-bYUgk.roa (hash: GE4J211d6K3inNZ5KwcVMOOJlKd9Y0lNHq1APwdB4fA=)
3: g1mm45j_OkLlur_SqI7WDyJYFdM.roa (hash: RaLkgB3O9bQ5zciuBh3cX5AYs1JmNx5tm4PsA2iWmaQ=)
4: vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl (hash: ajRUg3s8jcfqyXU7o7JT54t08QO2IzgHi1r1GqsGhNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:15:9d:c8:11:b7:d9:32:b3:7b:23:02:fc:a2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Validity
Not Before: Nov 5 08:00:29 2025 GMT
Not After : Nov 6 08:00:29 2025 GMT
Subject: CN=6022c4fbca95cd8a933fdbf5a848ff62ea90a98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:04:bf:e0:e3:81:2e:18:d8:0e:51:da:7a:44:
a1:5c:f2:c3:04:b3:f9:16:56:11:97:5f:a2:4c:0f:
91:bd:c1:f9:1e:19:1f:85:2c:81:40:14:31:99:5e:
16:1d:49:82:60:c9:6b:de:c0:ab:7a:54:1c:e3:ee:
4e:f1:5e:97:53:2a:2d:58:4a:8f:0b:ad:d1:61:21:
51:3e:a6:04:53:3c:db:96:cc:0e:59:88:28:89:30:
88:72:a9:c6:50:88:73:18:99:93:0c:af:0b:4d:4f:
c2:b2:15:ee:73:8a:54:35:f2:dd:e1:13:82:47:af:
fc:5f:40:8e:c9:39:10:1d:da:92:9a:b4:a6:00:4a:
5e:86:56:66:e6:0b:8b:c2:d3:a1:2c:27:e8:b8:eb:
61:0c:d0:2e:b7:ac:c1:e2:77:d6:14:d5:d1:4b:02:
e3:29:4f:68:0a:23:74:e8:a8:d9:4d:c2:27:a6:f4:
17:6d:65:65:cf:22:2c:92:93:fa:d1:b8:e6:b1:60:
5b:c6:3f:72:4b:e4:9a:4c:cc:a8:59:29:6a:b9:7f:
c1:9f:75:69:3e:90:04:91:34:a2:35:fe:a8:a1:58:
9c:1e:88:5b:f3:49:d5:a1:ac:89:0c:f5:ca:75:fa:
71:22:b4:2f:4d:44:45:fa:6e:f5:c4:33:83:ef:75:
33:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:22:C4:FB:CA:95:CD:8A:93:3F:DB:F5:A8:48:FF:62:EA:90:A9:8B
X509v3 Authority Key Identifier:
keyid:BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:bc:ce:4a:ce:ec:53:d1:8f:c8:f1:fb:c6:23:25:d0:05:18:
fb:57:d1:f0:cb:f6:4c:de:b3:dd:bb:f5:26:17:30:5b:c5:52:
d6:c4:b5:b0:d7:d3:e0:db:9f:b8:c5:bd:c2:6d:20:52:9b:55:
d2:32:0a:4b:9f:04:61:ee:d3:08:e0:38:09:5a:f9:24:fd:2f:
48:c1:4e:65:e9:a2:ef:60:67:47:48:2a:78:d7:79:4c:17:8f:
83:b1:6c:95:4b:01:6c:73:13:ce:19:d5:90:23:67:14:35:d2:
20:c3:41:7a:5c:d6:70:e0:f3:3f:07:cb:c1:80:74:40:f2:bb:
95:b5:fc:83:15:f0:f5:7f:5b:34:87:61:7a:6a:7c:6a:fb:2b:
05:9c:96:d6:5c:74:ea:55:b1:78:d5:d2:00:4a:22:8d:28:50:
a1:6b:74:0a:d4:59:79:ff:0b:3c:7f:29:76:13:37:79:f5:47:
2e:7d:d5:09:37:8d:75:c8:8e:bb:a3:74:d5:dd:b1:d0:82:e9:
f3:93:a4:52:66:de:5e:b4:8a:d3:e5:05:48:7a:f7:8e:95:9c:
04:5b:79:90:b2:e9:59:1c:f8:61:78:3d:25:f9:e4:1e:f6:fd:
db:3c:e2:12:5e:e4:15:37:e1:29:1d:5c:95:ba:04:ff:3c:b4:
09:c6:d4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:16:29 2025 by rpki-client