Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
File: vIPChDwWSbAFTJEST-4DEUCV4WM.mft (raw, json)
Hash identifier: yaetKUHsOE/R2FVPUcJ4qkS4NryznYowoZbd1trTtvM=
Subject key identifier: 2C:DC:61:3D:21:27:CE:8D:38:68:DA:B0:71:8D:A5:08:EE:EA:A1:24
Authority key identifier: BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
Certificate issuer: /CN=bc83c2843c1649b0054c91124fee03114095e163
Certificate serial: 019A4D069DBA8A0BEF41D04BB5B9BC4B99C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 04:01:10 +0000
Manifest this update: Tue 04 Nov 2025 04:01:10 +0000
Manifest next update: Wed 05 Nov 2025 04:01:10 +0000
Files and hashes: 1: SyfvPrUk0EqUlUibCeR9AFkwGwg.roa (hash: zvu0Xkf7wJgRiFUAHEOyER7LyU5jW8xnRDY/dZI92fo=)
2: vIPChDwWSbAFTJEST-4DEUCV4WM.crl (hash: EmYO10KFZ7NWN0EtyufrVXtZnATU4+KrlT71o4xt50w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:9d:ba:8a:0b:ef:41:d0:4b:b5:b9:bc:4b:99:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc83c2843c1649b0054c91124fee03114095e163
Validity
Not Before: Nov 4 04:01:10 2025 GMT
Not After : Nov 5 04:01:10 2025 GMT
Subject: CN=2cdc613d2127ce8d3868dab0718da508eeeaa124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ec:56:fe:59:3b:33:a8:e5:d4:b0:e3:6a:bf:
ed:2c:2d:9d:9a:0e:94:c6:b7:aa:8f:8e:22:60:4e:
7e:d2:63:81:dd:d9:03:b7:eb:19:af:92:f3:28:61:
52:2f:8c:77:bf:be:11:e0:27:e4:1b:ba:12:d8:25:
93:77:00:b5:4e:ca:db:af:87:e1:73:82:76:49:d5:
79:45:00:02:93:fd:2b:c4:c8:7b:68:ab:e0:5c:c6:
85:bb:13:9d:34:d4:51:44:0e:b7:f9:14:cd:92:86:
e0:85:72:cb:02:2a:ab:e7:0b:79:95:7a:a2:53:37:
3e:e4:30:ca:34:db:f2:f0:a8:7f:03:eb:82:3c:29:
e7:d4:30:00:63:13:42:91:d1:18:75:e0:ec:81:df:
d1:78:d8:bb:d2:ec:ce:0e:61:26:ca:de:e4:df:7e:
60:e2:fd:a0:bd:bd:62:4f:4a:22:bd:94:09:13:8f:
51:7b:00:7c:c7:b0:95:ec:f5:b6:1f:a3:85:6c:38:
3d:fa:75:56:60:77:f9:59:72:22:00:13:6d:f7:f9:
12:f5:b5:a7:ce:df:d6:96:30:53:c6:19:0a:35:3f:
25:a1:b3:7d:07:b6:c6:0a:5a:b0:f9:a5:48:60:af:
c0:49:9c:1e:35:15:4d:2b:5f:fe:2c:83:46:9d:14:
a5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DC:61:3D:21:27:CE:8D:38:68:DA:B0:71:8D:A5:08:EE:EA:A1:24
X509v3 Authority Key Identifier:
keyid:BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:37:14:79:e0:d6:12:f5:0a:43:dd:33:03:bd:a8:3a:1b:07:
86:b7:c2:c6:1e:d6:13:43:dc:c8:e5:c0:dd:de:98:04:f5:4a:
7b:2d:73:3d:9e:45:4f:fd:66:2f:84:d0:f6:c8:1b:e0:f8:10:
4c:0e:b5:2e:7b:f1:f0:16:87:1e:e3:d3:0b:4b:24:ce:6e:22:
e3:cd:b1:e1:97:fc:99:61:d1:fa:60:8e:0e:af:e5:5a:d9:68:
a6:e4:f5:d8:3a:d4:0f:dc:3c:1b:ad:bb:e0:5c:0e:72:ab:0c:
e1:0e:a7:d3:c2:9a:22:15:e0:e9:13:0a:42:0e:d9:f4:15:f8:
7d:6c:fe:bb:f2:09:4a:ad:7e:83:87:83:bf:bf:28:ef:d1:91:
3b:7a:90:55:83:16:a0:c8:7b:d0:ed:2c:9b:7a:f1:f7:50:d5:
63:57:e0:9d:06:7f:34:62:a1:ab:37:43:7b:8a:8a:ad:b0:e7:
7c:1b:c7:d6:85:d1:db:39:f0:4d:3f:66:0f:6e:e3:63:82:c8:
aa:8b:b1:26:6e:a0:73:b3:98:31:da:1c:a8:e2:59:ff:e9:6e:
c8:a7:3b:2a:55:d8:17:a1:c2:b9:45:b9:74:63:6b:2d:70:80:
72:b9:f4:e1:ba:bd:7d:19:1a:92:22:10:1a:30:eb:9e:8c:5c:
86:f9:16:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:50 2025 by rpki-client