Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
File: vIwagDL1fyKwFFSmXvMt6ndJbQs.mft (raw, json)
Hash identifier: 1844GVDN9ijEc9AyTpkv7YMIhP5t9icwh4WT//AINgc=
Subject key identifier: 7C:85:2C:17:13:86:FB:14:E7:9D:6B:9B:25:C0:BB:92:B6:79:6C:D9
Authority key identifier: BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
Certificate issuer: /CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Certificate serial: 019A4DAAA04206A42EDC57C62E0D996F2DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
Manifest number: 0A40
Signing time: Tue 04 Nov 2025 07:00:19 +0000
Manifest this update: Tue 04 Nov 2025 07:00:19 +0000
Manifest next update: Wed 05 Nov 2025 07:00:19 +0000
Files and hashes: 1: 87EiEbuhBkMDFm619edEsUyoB7Y.roa (hash: iu5N7p/QfYR3g8fpVRiIN4OpWGAgMRa+uUZVim92tYw=)
2: hhHnsqFssAy3cZ6p2eic8J_5Jkg.roa (hash: 4+RUythcb8WdsV0R43hgKvkcYTcHEmIS4/pDs5LGxZk=)
3: vIwagDL1fyKwFFSmXvMt6ndJbQs.crl (hash: 7dwBFeRj0TUUH9fEYdc6PX48tiFI7tl2o/Rjmf5onFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:a0:42:06:a4:2e:dc:57:c6:2e:0d:99:6f:2d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Validity
Not Before: Nov 4 07:00:19 2025 GMT
Not After : Nov 5 07:00:19 2025 GMT
Subject: CN=7c852c171386fb14e79d6b9b25c0bb92b6796cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6a:3f:17:bf:5f:ef:c0:a9:eb:d5:56:e0:3c:
4e:64:f4:70:fd:7c:56:7d:81:6c:9d:c0:b7:a0:9d:
74:3c:5e:fd:fc:74:a2:fe:4b:cb:11:40:6e:83:fa:
07:74:eb:55:c2:f3:04:82:dc:5e:eb:22:d7:51:05:
e8:12:8a:77:73:39:7d:44:32:7a:30:13:6c:b3:d3:
24:93:bf:25:47:cf:69:09:5c:5a:d6:9d:61:1d:42:
b2:ae:08:04:6c:0a:14:41:72:aa:ac:c1:26:b4:8d:
63:3d:87:b4:63:71:fd:2a:4c:20:a0:7f:cb:a7:11:
02:9c:0c:f5:cf:36:48:ef:d4:58:50:fc:ce:69:c7:
d5:31:21:42:a9:4d:36:d2:ec:03:00:cf:aa:23:50:
13:6d:86:10:bc:29:32:e5:ed:a8:13:1f:aa:79:92:
6b:ee:39:3b:cc:3c:5a:e3:e4:8a:7e:6b:22:3b:08:
07:94:09:82:63:f8:78:93:dd:32:86:ea:2a:9d:0b:
19:34:4f:7d:dd:eb:02:ef:40:ea:9b:be:df:69:39:
41:9b:06:16:e2:8b:56:8c:62:38:6a:1f:5e:38:59:
3e:3c:e3:03:01:65:c9:86:61:a5:cf:0b:3a:17:13:
50:7c:17:94:f9:de:c0:d1:79:f7:34:ad:f2:42:29:
f3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:85:2C:17:13:86:FB:14:E7:9D:6B:9B:25:C0:BB:92:B6:79:6C:D9
X509v3 Authority Key Identifier:
keyid:BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:72:bd:1f:dd:c3:0e:07:15:29:a5:7a:0f:20:96:2e:4f:2d:
b0:f5:ff:f2:ab:b9:99:d0:2a:18:91:30:51:e8:44:d3:35:7f:
72:80:82:70:5c:b9:3e:47:06:9a:3f:9a:bb:f8:51:2d:78:71:
12:c1:3e:b3:6b:03:40:d4:86:a6:78:4a:77:1f:5c:86:e8:d3:
4b:4d:d6:8b:c5:7d:66:8d:0a:f6:bf:b1:e7:ff:67:7d:09:d4:
a2:ff:a2:92:c1:ca:76:d4:72:02:25:6d:8a:6c:06:40:76:c5:
d4:3f:90:ad:38:2d:87:d9:9a:3f:c2:a8:5e:1f:e4:0e:d7:9a:
66:02:51:b6:32:9f:15:90:bb:0d:80:7e:9a:a4:e6:0e:d3:a2:
4d:9a:76:23:7c:68:6c:d1:b6:f7:7f:c6:4a:03:02:53:a0:84:
8e:88:3a:bd:dd:63:d6:78:a4:e3:a2:59:73:05:ab:21:07:82:
6f:a2:ed:80:f8:4c:b5:a6:de:bf:73:d9:72:02:06:51:a3:17:
3f:57:f3:0e:5a:d5:65:9c:cd:f4:2d:26:0d:b4:76:8b:b7:bd:
8d:5c:17:8b:3f:19:16:c3:f9:18:e0:73:cc:3c:bd:cc:b6:4e:
4f:90:ca:5f:8c:56:e4:21:4f:02:b4:ae:e2:5a:a4:c1:91:cf:
64:e6:19:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:17 2025 by rpki-client