Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
File: vE4hsn1vhOvdiIxo55zlVchG2ss.mft (raw, json)
Hash identifier: 3ZsU8g+I0xIcLye1BA02Anvxjquy4LIYFR6zKnFcyeE=
Subject key identifier: EA:9E:92:47:24:26:0D:EF:B6:B8:7E:E4:B1:39:F0:40:DA:13:6A:C4
Authority key identifier: BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
Certificate issuer: /CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Certificate serial: 019A4FD0349AD6A914336743A70BB9A02D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 17:00:36 +0000
Manifest this update: Tue 04 Nov 2025 17:00:36 +0000
Manifest next update: Wed 05 Nov 2025 17:00:36 +0000
Files and hashes: 1: F3kOmnX-kEtjSilXO2Pe0L_37Jo.roa (hash: lIJ2C488mP6Ma0OF6csW3I8GzUd4jiMp8CCjsO6b5Eg=)
2: Po0728QWErCTmXCeFPKP0UlTEug.roa (hash: IpBaviswNtBt65qOWaQEl9AqBmhUCEIpYlrqfl+L76A=)
3: vE4hsn1vhOvdiIxo55zlVchG2ss.crl (hash: K018Kr8Uu/5jAf6nLl0ZaGtj+Ah11RpTQccpkbuqgRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:34:9a:d6:a9:14:33:67:43:a7:0b:b9:a0:2d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Validity
Not Before: Nov 4 17:00:36 2025 GMT
Not After : Nov 5 17:00:36 2025 GMT
Subject: CN=ea9e924724260defb6b87ee4b139f040da136ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c0:e1:1c:88:b4:09:90:0b:2c:42:c8:b4:32:
3f:5a:a4:8a:d4:c7:a1:a0:f2:1a:f7:82:2c:0d:77:
85:66:85:2c:e7:99:0a:bb:29:71:fd:a8:94:73:53:
5b:d3:a2:be:b3:85:ca:a2:34:47:ec:cb:43:2c:46:
e2:de:b1:37:0f:b4:b6:f0:35:ff:d4:81:b9:ad:35:
f3:b5:20:79:d4:69:62:7d:cd:f1:79:6f:e2:a1:5b:
50:18:6f:cc:79:e9:44:bd:88:a2:c4:f0:b0:51:70:
66:da:a5:6a:0f:4e:18:25:c0:1d:19:44:a6:1c:9c:
7f:43:b5:a2:28:79:a0:81:15:7a:60:91:99:20:35:
b5:03:fe:d4:10:72:ab:99:84:d4:f5:d6:3d:97:bc:
ca:fb:97:c0:7d:c8:05:d6:40:98:79:0f:b6:f9:67:
89:c7:e0:17:ec:ca:a2:3a:14:91:41:56:5d:99:90:
56:c7:e5:48:01:bf:2f:c0:55:c7:c7:6b:96:98:4a:
33:8e:fa:0c:ff:d2:e6:47:c9:62:16:83:43:5f:bb:
f4:ca:e8:f3:57:84:09:47:bc:a8:e8:a9:b2:9f:e7:
e0:f9:56:9a:b0:2f:6c:89:59:dd:86:a2:9c:11:14:
a4:af:2b:c0:41:5d:15:2c:cb:e5:a7:99:56:fd:42:
51:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9E:92:47:24:26:0D:EF:B6:B8:7E:E4:B1:39:F0:40:DA:13:6A:C4
X509v3 Authority Key Identifier:
keyid:BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ba:18:a8:fb:0b:30:90:0c:07:2f:67:5b:63:b2:2b:1d:7d:
8f:53:fd:5d:04:5f:40:5c:ba:e3:9f:9b:fe:ef:44:64:f4:e8:
12:e3:b0:78:d1:97:52:f2:5f:ba:eb:98:15:73:90:3f:40:31:
f1:3b:1c:05:d4:ed:ef:20:13:7a:c8:fa:ce:c8:d6:5b:68:b1:
1f:55:da:88:b1:da:21:0a:0b:b7:6d:ed:f4:7f:e3:71:63:6e:
02:0f:ae:07:00:b7:63:d0:0f:f4:0f:49:b2:6e:d4:c9:e0:74:
c5:d8:12:06:c2:18:d3:12:72:70:ec:04:c1:0d:93:fe:4d:be:
ad:95:45:03:e2:39:2a:ee:ee:58:dc:bf:28:d5:7c:d8:45:4f:
ca:b3:e7:b3:5f:96:18:af:49:67:ee:49:5b:6a:47:5a:b2:51:
52:94:9a:df:4b:df:05:6a:64:59:8f:d0:ee:dc:3e:2a:16:ae:
e6:c2:bc:17:c6:1f:a7:f0:ca:20:6f:31:9a:a7:d0:e4:49:c3:
4b:2a:dc:75:10:cd:b8:69:9c:b9:ca:cf:cf:42:a9:0d:c3:14:
5b:13:cf:16:67:2d:5b:a7:f0:d0:14:0e:c4:3e:b8:81:a1:0c:
e4:5d:ee:20:5b:fb:e6:a6:f9:fd:2b:91:0b:32:11:47:91:cc:
0c:2f:4e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:11 2025 by rpki-client