Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
File: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft (raw, json)
Hash identifier: Pzwd7rcYpkwaVRx2GefTXkc2dssRbdre8rfOsB2I7eI=
Subject key identifier: 72:DF:B9:84:4E:76:84:06:D0:60:5F:6A:5C:17:F2:96:A6:DF:F0:CC
Authority key identifier: BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
Certificate issuer: /CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Certificate serial: 019A503DFEE565FA62F8864761B18467BA45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 19:00:31 +0000
Manifest this update: Tue 04 Nov 2025 19:00:31 +0000
Manifest next update: Wed 05 Nov 2025 19:00:31 +0000
Files and hashes: 1: QGrvcoxIsYHGrK6BrR6dYV6XkJM.roa (hash: sWNP0/965vZch5nrsrQ4iKgd5GS8sH4fFHr8G2MSO3w=)
2: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl (hash: fJ7rV4yokmtHmNOih3OECNZW9VLWoSoSmXCUg04h1iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:fe:e5:65:fa:62:f8:86:47:61:b1:84:67:ba:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Validity
Not Before: Nov 4 19:00:31 2025 GMT
Not After : Nov 5 19:00:31 2025 GMT
Subject: CN=72dfb9844e768406d0605f6a5c17f296a6dff0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:0e:bb:b3:64:aa:e4:fe:26:fd:be:c4:7b:
7e:5c:c8:35:2e:64:43:3f:3f:e5:d1:b1:35:16:c9:
9f:33:bb:9d:02:c2:3e:d4:4f:44:11:58:ba:ab:26:
21:b4:9d:48:9a:10:7e:5c:30:c2:2a:91:44:65:04:
30:68:39:c3:4f:dc:c1:8c:36:8f:5e:2b:c3:13:21:
d3:9d:5c:7e:b0:ec:7b:fc:39:8a:c4:ac:b3:bc:7b:
b7:8b:bb:a2:fd:98:c4:c3:ff:19:a1:1f:0c:8b:9b:
db:5e:c1:68:7e:a1:43:b5:65:dc:0b:73:e6:99:1f:
94:bb:ea:a1:e4:9c:15:f0:16:e8:6c:4f:93:0f:a5:
40:0e:37:9f:4f:26:b7:55:be:3b:34:31:54:4b:45:
02:66:d9:79:ff:fd:ac:a5:84:8f:38:34:33:61:45:
fa:10:04:7d:48:55:0f:b3:4e:7f:b5:5e:1f:d1:52:
d1:d6:81:ab:af:ef:c7:42:5b:00:84:28:43:36:10:
f3:51:5b:e9:1c:7f:81:16:64:e9:b3:08:01:d5:8b:
ee:81:ef:41:e2:7a:03:89:56:99:f2:e5:3b:6e:7e:
11:70:ba:6b:05:27:62:07:2f:d2:b2:33:35:b5:9f:
92:4a:b1:f3:23:44:83:f3:19:fc:68:af:1d:59:05:
d5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DF:B9:84:4E:76:84:06:D0:60:5F:6A:5C:17:F2:96:A6:DF:F0:CC
X509v3 Authority Key Identifier:
keyid:BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f7:77:6a:75:d1:60:a0:66:60:1b:6d:c8:d5:d9:27:fa:25:
00:25:53:75:bd:65:a3:b0:84:af:c5:58:c7:bd:ff:ca:14:e2:
7a:69:66:64:0d:70:55:a3:0f:f1:0c:29:5e:85:95:11:55:1f:
8f:36:da:54:87:ae:ca:cd:8f:45:cf:e3:b6:20:39:6a:43:50:
2d:6d:ee:db:c9:18:86:bb:bc:94:80:0c:2f:a5:be:81:5d:07:
8a:6f:b7:e4:ff:e4:b0:17:03:92:8a:d3:da:df:bc:36:73:36:
67:0b:6a:53:1e:f5:26:ec:ec:e5:fe:c3:84:14:b0:d2:bb:72:
90:32:cf:54:2a:87:3d:d0:44:11:3d:55:cb:47:55:37:13:33:
b7:ac:10:9b:0c:4e:ee:cb:9e:0c:20:78:ab:ef:ad:8c:04:a8:
6d:59:e6:aa:6f:d3:1d:dc:0b:e9:b8:5f:4a:a6:8b:f2:df:02:
46:af:cd:84:55:04:62:cb:6b:ec:54:70:64:88:0d:a1:9b:05:
b5:80:9f:ea:fd:af:d8:9c:fb:1a:b7:e4:ec:2b:3e:ca:46:01:
54:82:b0:df:fd:81:85:51:af:32:fe:61:c9:06:56:64:d8:f6:
3d:e2:63:2e:d2:7a:c1:49:f5:9b:95:ed:09:4d:16:96:d7:0c:
09:b0:58:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:34 2025 by rpki-client