Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
File: vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft (raw, json)
Hash identifier: df7R44xEcb4Uw9HUFQLiUWwqdKD1M2cCCnHghgpYGog=
Subject key identifier: 42:C6:97:90:F8:D1:25:AE:F1:09:3E:9B:84:91:AC:C4:6E:34:89:20
Authority key identifier: BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
Certificate issuer: /CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Certificate serial: 019A51199C8CD5EF1BAE92A1A7FA90334AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 23:00:24 +0000
Manifest this update: Tue 04 Nov 2025 23:00:24 +0000
Manifest next update: Wed 05 Nov 2025 23:00:24 +0000
Files and hashes: 1: 9VNbjYPZNCWhcZlYCO8YbXFUdTs.roa (hash: DW1s4poaFcxeoMfxfTTf75NS52EQcgEZYuwjPKvajE0=)
2: TbgjMEdQ0rbdH1wsIeqh_-bYUgk.roa (hash: GE4J211d6K3inNZ5KwcVMOOJlKd9Y0lNHq1APwdB4fA=)
3: g1mm45j_OkLlur_SqI7WDyJYFdM.roa (hash: RaLkgB3O9bQ5zciuBh3cX5AYs1JmNx5tm4PsA2iWmaQ=)
4: vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl (hash: SmP4K9wtOLbwfKpzTGqHAqnzDJ14nQOMd1TXEI7ZcLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:9c:8c:d5:ef:1b:ae:92:a1:a7:fa:90:33:4a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Validity
Not Before: Nov 4 23:00:24 2025 GMT
Not After : Nov 5 23:00:24 2025 GMT
Subject: CN=42c69790f8d125aef1093e9b8491acc46e348920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:24:62:1b:5a:a8:75:85:06:86:4c:0b:25:fc:
c9:2d:b2:2d:46:57:a5:cc:32:c1:75:00:06:34:01:
cd:8f:74:2f:20:41:da:ff:23:8f:f8:93:1d:2f:77:
8b:a2:14:48:8f:77:d2:a2:35:5c:3d:d0:ce:bc:d3:
c7:7f:01:5b:d4:c7:4b:b5:73:25:b4:34:aa:ae:d0:
6f:96:b0:58:63:b1:e3:1a:cb:8a:86:6d:41:c4:01:
80:21:73:6f:52:05:6a:b6:44:85:86:e5:d5:6e:98:
87:18:11:57:4d:89:fc:c1:ad:3f:8b:9b:3e:9b:a6:
07:66:68:e5:1c:4b:6b:1d:20:66:d2:12:c5:c3:20:
54:ea:30:e6:b0:24:c4:65:a3:95:17:76:d4:89:74:
90:71:7c:e7:1b:6e:65:df:a6:98:7b:fd:43:73:90:
fa:d7:64:77:6d:ef:05:4d:22:68:6c:a7:a9:b1:d4:
98:29:82:ed:52:64:79:ab:f6:fd:10:b3:4f:1d:f4:
0f:33:45:97:89:7e:4f:29:87:46:b7:06:ed:51:ae:
ce:ab:1d:86:df:4e:a1:b3:26:11:13:30:c7:66:4b:
e2:51:20:44:09:fe:ad:0e:17:19:3c:28:2e:4f:74:
f0:de:93:05:b6:d0:65:a2:a6:81:32:cf:8c:54:b4:
a4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C6:97:90:F8:D1:25:AE:F1:09:3E:9B:84:91:AC:C4:6E:34:89:20
X509v3 Authority Key Identifier:
keyid:BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8c:5b:7d:a5:67:1f:e0:ef:36:a2:72:cb:3b:8c:c0:0e:d3:
be:ad:79:57:40:a9:3f:17:41:f1:25:dc:cd:e9:cb:40:85:af:
80:bc:10:f8:96:a1:fa:fc:21:30:9d:b5:38:38:cd:cc:35:78:
2b:3c:cd:aa:65:ce:f2:6a:98:c7:f9:4e:bc:ec:23:b1:09:4d:
89:cf:78:a2:a3:37:16:b1:8d:79:d1:0b:32:e8:30:49:2e:f4:
72:34:36:6f:5e:cc:2f:eb:8f:ff:69:3b:6c:c4:05:af:85:89:
68:4e:18:50:b8:42:88:0e:27:17:b5:a9:9a:46:6c:77:0b:78:
99:bc:cf:9c:b3:1f:29:8c:30:35:f0:e9:bd:a8:19:93:db:12:
c3:14:22:c5:b7:68:c5:4b:2d:12:16:08:17:53:c9:fc:24:46:
5c:eb:b7:f0:12:91:46:25:d4:87:b5:3d:d5:a8:fe:32:fc:65:
8f:92:06:24:7e:f1:be:c0:71:ee:7e:c2:fa:04:16:62:f6:9e:
c6:95:c6:23:bd:ad:fd:d4:a8:84:67:72:07:29:db:53:d0:62:
23:6f:f1:db:cd:f8:a6:41:47:16:49:9b:34:d3:d3:ea:5c:3a:
04:ed:77:be:84:53:a6:07:ac:29:49:ca:8a:99:da:48:a9:75:
c5:c9:04:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:22:13 2025 by rpki-client