Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
File: vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft (raw, json)
Hash identifier: 6rfnt1e6zTJ484dH5B8TILkiVGaGgICcdbJ3C4rneOw=
Subject key identifier: BE:0F:CD:8E:2A:20:21:3A:26:D5:D7:60:31:DE:0C:B4:C4:38:0E:28
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Certificate issuer: /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial: 019A52D17E3A1C9049EC0D047A7B561740E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 07:00:52 +0000
Manifest this update: Wed 05 Nov 2025 07:00:52 +0000
Manifest next update: Thu 06 Nov 2025 07:00:52 +0000
Files and hashes: 1: D4-_NyM3vwkXYlu-mJ9EwymWROo.roa (hash: jmfn8sb8ov8NeJ0KfbubQ1wvTdk/ufMjoTE9s0yWgsE=)
2: TeFaZ4zKnJuYW1U6fAsNH1VarVE.roa (hash: 3nZzR0avNgt7/s2NV+FklcMPV5cBZpJIPzIuCfYYbl8=)
3: bL9ewQCt4RdgNbYkLxPSTrmyc9w.roa (hash: jBes/JXB5Pa9fZGI6VO0yVOLtKRuEN7Q7HgrRfyiy4I=)
4: sJa8reR2mkuVQCPsBOyH2kdgHt8.roa (hash: XUKMRflOYqtRl78E3R0klOa+kDeCKWI6ajUh/jBFZW4=)
5: v4QrgtblJ9YZHJ2hce6GFI5FWqo.roa (hash: IPVSappB/my+2I72ZgF53a9v013O3iiBW8wa9eIfulg=)
6: vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl (hash: rzGQ0Hm72ut6uSUiqIu9IqOhM+KPI3rBy1Ps6Iw7Enc=)
7: wa6NcU7XwuvzaWsIZAv7WsszO5o.roa (hash: kXg66oE0eqkMI6otmLSvECRSREoGo1YKzKjRF+u7yi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:7e:3a:1c:90:49:ec:0d:04:7a:7b:56:17:40:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Validity
Not Before: Nov 5 07:00:52 2025 GMT
Not After : Nov 6 07:00:52 2025 GMT
Subject: CN=be0fcd8e2a20213a26d5d76031de0cb4c4380e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:de:f7:ae:2d:6c:d4:88:77:30:44:ce:cc:e9:
56:15:df:cb:8e:c8:02:9e:8a:be:f6:b3:7b:87:ec:
8c:f2:c7:ab:fa:c4:4e:87:7d:ed:01:f9:38:e7:82:
48:dd:8b:a6:95:27:7f:cd:c7:68:8d:ab:e6:2a:1c:
c4:a4:c6:14:82:eb:da:3f:09:b6:7e:20:bc:4e:6e:
1f:3d:cd:68:0d:84:11:61:c1:91:bf:4b:70:bb:ed:
31:b2:5b:fc:83:e5:3e:3f:25:b0:cd:6f:27:92:a3:
11:fe:5f:2d:18:6c:43:34:a3:08:1a:e1:75:ae:71:
e6:ea:11:dc:c6:85:66:ed:24:f2:76:fd:35:ff:9b:
db:5a:9c:d5:13:e4:b0:bb:b3:51:1f:ce:60:3c:86:
c3:9d:b8:13:dc:8f:95:f7:02:ee:78:de:22:4b:e7:
1f:bb:6e:95:c1:10:24:e7:81:e7:63:08:3b:eb:12:
9e:fd:3e:f7:43:6f:6f:86:c0:53:15:b5:8a:f2:35:
88:55:91:5a:d5:ee:2f:12:9f:66:12:f9:02:d4:a8:
45:b6:ca:d6:e1:e8:b3:8d:98:3c:28:9f:e1:e4:d5:
db:c1:a3:fe:a6:81:db:72:79:82:13:71:c9:c8:48:
5a:cb:b2:90:db:17:2d:87:e2:62:69:5a:bd:ba:64:
60:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0F:CD:8E:2A:20:21:3A:26:D5:D7:60:31:DE:0C:B4:C4:38:0E:28
X509v3 Authority Key Identifier:
keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:40:4a:ad:9e:f8:3d:46:b0:dc:03:5f:06:2f:05:52:f4:1c:
95:08:87:88:92:92:6e:da:fd:cd:cb:33:19:b6:49:3e:67:3e:
ea:07:41:a1:33:21:96:e2:b4:e4:e2:e3:34:df:f8:41:c0:ac:
75:a1:03:36:7d:d8:75:0b:bf:2c:fe:4a:ac:0f:29:23:63:40:
84:78:50:61:57:cf:53:e3:e4:71:32:ae:5d:01:84:c5:17:ed:
ec:5c:d7:89:dc:f4:fc:28:bf:c2:cc:d9:db:fc:77:d4:e5:15:
f1:18:fd:76:99:f2:4b:ec:d2:db:8e:a5:07:7a:5e:83:64:dd:
96:40:11:85:e0:6a:f2:36:f8:56:f1:e7:15:10:40:ff:ab:fe:
d2:e0:c7:ce:83:2b:68:19:82:87:e3:d7:ae:ff:06:df:71:bd:
61:bc:f5:db:f9:32:64:eb:5a:25:65:c6:bf:e6:fa:54:34:68:
7e:05:ed:59:71:6f:c8:a5:52:fb:b0:31:96:5d:4a:b4:c4:86:
58:7a:07:23:69:34:7b:8a:bb:76:f7:d5:ec:53:73:28:c8:22:
ce:0b:57:20:bf:c1:fe:c0:8c:31:8c:a1:04:45:ab:f7:4d:23:
f5:8b:bf:20:9a:ba:be:bf:91:2a:bb:de:3c:96:15:24:94:16:
79:1a:f3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:42:15 2025 by rpki-client