Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
File: vttqTtOT2KO3UH-Wo4vuDEyLR38.mft (raw, json)
Hash identifier: kYEqES/dHcQSowkMTyHD5Gj1p5U+lcRrS+ZvhceCfpg=
Subject key identifier: D6:8F:9D:6C:32:CE:C1:46:17:6D:61:AD:2C:EE:10:1A:73:D2:87:10
Authority key identifier: BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
Certificate issuer: /CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Certificate serial: 019A4D075E85E2611FFCB15CC0346CFE016D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 04:01:59 +0000
Manifest this update: Tue 04 Nov 2025 04:01:59 +0000
Manifest next update: Wed 05 Nov 2025 04:01:59 +0000
Files and hashes: 1: 70lNK5fBDtyKP1-Uoyim5AlDIhs.roa (hash: j96/AeWDc3evjhceJaK+DEno6uY4hCQMsDxAEfX1LUM=)
2: vttqTtOT2KO3UH-Wo4vuDEyLR38.crl (hash: cCBruec4Hp6Zkb6++KzVs2BxIXF4fwhjkE+ALRDFUuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:5e:85:e2:61:1f:fc:b1:5c:c0:34:6c:fe:01:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Validity
Not Before: Nov 4 04:01:59 2025 GMT
Not After : Nov 5 04:01:59 2025 GMT
Subject: CN=d68f9d6c32cec146176d61ad2cee101a73d28710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8a:aa:8c:f1:65:c8:6b:7d:4d:08:9c:b9:f3:
44:cd:08:9f:62:b3:8b:7b:3f:93:8f:aa:be:03:54:
04:a3:57:da:1a:fd:92:9b:04:af:42:fb:1d:e6:24:
b6:d8:c6:e2:60:4b:e2:6b:e7:bb:e8:b5:a7:22:17:
99:f6:96:16:58:06:94:3e:f2:7a:cb:b3:c2:37:6e:
cf:e4:7a:f0:fb:c1:e7:39:0a:91:08:4f:58:c2:b1:
79:1e:56:2d:c2:09:4e:2b:86:cb:00:6e:6d:31:c7:
e5:76:6b:af:8b:3f:87:35:5f:48:5b:c3:a1:6e:ce:
32:dd:f1:ad:c2:25:bd:d7:5c:93:04:c1:fd:79:c1:
3a:fc:c1:91:b8:54:0b:14:99:65:9c:13:2f:f7:f4:
1f:0c:68:71:31:17:4d:2b:7d:23:26:95:fd:15:92:
b2:8a:27:5a:ac:30:99:c8:3a:21:81:f6:be:86:8b:
78:71:2c:cb:02:d0:cd:e0:e4:cf:2b:f5:c1:d8:df:
86:c0:39:ac:a3:a0:f8:92:40:79:23:a9:be:a9:84:
1e:16:70:89:0b:9b:00:aa:35:91:cb:88:06:71:71:
d4:90:a0:29:48:ee:93:e1:9c:d8:4b:48:2c:6b:7f:
dc:4c:26:ae:96:93:b8:e5:30:c0:de:48:10:43:93:
f2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8F:9D:6C:32:CE:C1:46:17:6D:61:AD:2C:EE:10:1A:73:D2:87:10
X509v3 Authority Key Identifier:
keyid:BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3c:30:2f:30:35:1a:be:fc:e6:9e:17:15:76:30:2d:b0:26:
e8:69:64:d7:44:f1:f0:c8:e9:ff:3f:b4:6b:72:2c:60:62:af:
79:f4:86:21:6e:6d:75:bd:89:05:80:ef:b0:f2:51:92:4a:d5:
27:c4:b7:02:9b:7a:f1:06:84:ca:1d:e0:85:84:b0:77:0b:16:
aa:7f:54:5e:0f:20:bc:00:4e:6d:e6:93:13:77:33:3e:ef:c6:
0e:23:ef:6f:f1:91:59:47:cf:0e:cd:fc:9c:31:c2:ae:8c:37:
2a:39:1c:24:27:cb:8b:22:c2:6b:7f:d2:52:4f:a7:15:c2:7f:
ec:fb:fd:23:c5:7e:8f:ea:78:3d:cc:3c:eb:4b:09:9d:43:98:
33:18:4c:de:3a:e3:62:65:58:f8:c9:f6:4b:8c:a2:00:fb:c8:
27:f8:f8:f2:4b:ea:67:fc:c1:bc:d8:94:6e:1a:4d:c3:6a:65:
68:a7:fb:6e:20:7b:aa:d1:70:2f:dc:88:75:ed:d1:5b:fe:c5:
86:11:b8:f1:b2:0b:36:59:41:7e:ee:b7:10:7e:f3:1a:56:bd:
a7:66:a0:0f:49:db:b7:87:03:15:4a:fe:33:9a:e4:d1:88:3c:
8f:66:ec:0b:b9:9c:53:06:ab:21:2c:66:cb:0f:70:02:4f:0c:
55:8a:f1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:46 2025 by rpki-client