Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft
File: _vf9VxCuWkc-FY3D_WyPF--j5Vs.mft (raw, json)
Hash identifier: Nr1Bm4rdhZljzmLCX07pbmCE3GaIhd8oCO0MPHnxxWI=
Subject key identifier: CC:4C:CE:ED:0E:F1:C6:9E:D6:FE:7E:FA:36:E3:C2:4C:71:DC:20:17
Authority key identifier: FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B
Certificate issuer: /CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b
Certificate serial: 019A4EF5EF3A3E3ED813453D6DD410D54A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft
Manifest number: 0A0A
Signing time: Tue 04 Nov 2025 13:02:11 +0000
Manifest this update: Tue 04 Nov 2025 13:02:11 +0000
Manifest next update: Wed 05 Nov 2025 13:02:11 +0000
Files and hashes: 1: 718OhuWzPYV76do8dJwyLY1c4nY.roa (hash: 9f1oMEBCBFVGB8zDkVGomUjvRpOkdkFNzsMeZuhP+EQ=)
2: _vf9VxCuWkc-FY3D_WyPF--j5Vs.crl (hash: CR8u+oGaT+lUmFJRH1i1jtSTj3OH43O29NjMaASdHLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ef:3a:3e:3e:d8:13:45:3d:6d:d4:10:d5:4a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b
Validity
Not Before: Nov 4 13:02:11 2025 GMT
Not After : Nov 5 13:02:11 2025 GMT
Subject: CN=cc4cceed0ef1c69ed6fe7efa36e3c24c71dc2017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:58:c9:6a:03:f6:63:cf:1c:0d:0b:9e:93:00:
00:e7:fc:81:f8:99:d3:57:ad:d7:7f:60:4b:c3:8d:
e8:b2:82:98:cc:61:b6:41:60:f8:44:e3:93:02:27:
f3:2b:38:46:3d:eb:b4:75:c2:19:dc:55:f6:6f:fc:
c7:6c:b4:99:52:d1:98:57:7d:15:69:c6:18:25:cf:
09:37:eb:37:94:a0:36:72:f5:bf:8f:6a:75:73:98:
41:5d:f9:ce:f8:44:df:79:3d:7f:d0:93:1d:a6:d6:
5c:e0:5e:3a:de:df:50:43:9e:91:85:c0:76:f7:9c:
5a:1a:89:e7:e8:2b:89:c2:91:0a:46:75:a9:f4:84:
56:62:77:8f:5f:04:43:42:c7:9c:a0:ea:31:31:0a:
d2:47:46:5c:52:e0:60:49:46:57:fc:5b:56:64:ac:
7d:f4:19:c8:94:c9:1c:4b:16:5a:75:ff:5e:13:9a:
db:72:bb:65:21:f9:70:24:dc:d1:d0:f0:90:5a:5a:
05:bb:9e:3d:15:04:e0:51:ca:8f:4a:28:1d:27:34:
7b:b4:32:1b:ba:fd:81:0f:99:7e:7c:15:27:45:3f:
af:b7:73:82:8b:98:94:17:3e:65:00:5f:e7:c0:1d:
e0:93:a2:db:6c:c7:bb:5b:da:92:f6:cf:b1:bd:c9:
df:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4C:CE:ED:0E:F1:C6:9E:D6:FE:7E:FA:36:E3:C2:4C:71:DC:20:17
X509v3 Authority Key Identifier:
keyid:FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:be:69:89:5e:79:b7:99:00:d2:a8:49:f7:1a:42:84:46:a6:
a5:26:68:3b:85:85:40:d7:71:92:09:aa:b3:bb:b3:6d:05:2b:
3e:42:d5:05:93:72:15:87:29:7f:a0:08:04:3c:48:89:3c:91:
dc:f0:00:cc:d4:49:af:45:c0:16:e4:6f:aa:f3:d3:f5:36:79:
03:08:18:b6:e9:be:b8:0b:73:82:ac:f8:09:5c:7b:9b:f0:59:
d2:c3:51:59:60:d8:4e:32:f3:c1:2e:0a:dc:e7:99:1f:d3:89:
2b:e3:a6:16:c0:8d:7f:86:2f:a7:f6:23:c4:be:2a:74:f2:f5:
80:c4:ee:85:d8:f8:bf:e7:44:c0:50:03:d3:65:f9:ae:b6:f0:
01:e0:4c:ea:d3:55:d3:75:81:cb:70:79:bc:23:8d:2d:4e:a2:
a6:2c:72:2b:6c:c3:90:b8:94:0f:d5:09:b7:89:a4:87:0e:dc:
42:04:70:5f:26:a3:40:18:bf:e8:ba:9c:da:9c:0e:8e:cc:40:
63:6b:6d:9a:17:26:61:b6:c6:97:1a:e4:3b:98:05:25:8a:16:
b9:10:8e:02:e6:81:bf:04:0f:7e:ce:43:ec:c5:02:f2:89:27:
76:57:f5:9c:ac:4c:62:a8:a5:1a:bc:fd:ee:53:1b:9c:65:e8:
06:ad:6f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:10 2025 by rpki-client