Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
File: vyYxqJlAx3n72dojGh0umEDJx8Y.mft (raw, json)
Hash identifier: NkjS2bED4BXgt2XYiWkmCC9fKHppd+dPN7I2vUsqKxU=
Subject key identifier: DE:95:0E:97:94:31:55:64:62:AC:FB:6D:2F:6D:C2:C5:D6:D0:22:62
Authority key identifier: BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6
Certificate issuer: /CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
Certificate serial: 019A500731D9D6B728D850BB8424783A7051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 18:00:40 +0000
Manifest this update: Tue 04 Nov 2025 18:00:40 +0000
Manifest next update: Wed 05 Nov 2025 18:00:40 +0000
Files and hashes: 1: DEn4JQPghs2T3ZxJbDlQm6KWdJI.roa (hash: L1xxxOCLHdiHBvdX2bAU1yEEGqFCGIfW3cUmFenxpnE=)
2: vyYxqJlAx3n72dojGh0umEDJx8Y.crl (hash: bY7kRCoERbUCRicWr1dXvc8AnzFj8y4PlIsuDYIeAJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:31:d9:d6:b7:28:d8:50:bb:84:24:78:3a:70:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
Validity
Not Before: Nov 4 18:00:40 2025 GMT
Not After : Nov 5 18:00:40 2025 GMT
Subject: CN=de950e979431556462acfb6d2f6dc2c5d6d02262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:dd:b5:af:00:2d:af:6b:76:fd:42:86:2b:
5c:2b:03:8f:29:99:d7:51:d6:5e:c7:b2:de:f9:c4:
5a:5a:3b:bc:3e:2a:8a:a6:22:6b:f4:d1:b4:fa:b2:
8d:15:a1:2c:d0:5d:37:d1:b7:08:d4:18:28:89:0a:
e3:33:bc:93:26:8c:eb:3a:2a:6a:8f:6e:90:09:40:
0c:e2:8a:d2:c9:a4:c3:3c:87:21:58:19:98:65:b1:
3c:f2:fa:2f:07:e4:c4:50:6b:ea:4f:69:71:05:ea:
8d:b4:95:da:4b:b3:b5:55:b0:d8:fd:2c:08:ff:27:
71:b6:1d:92:57:45:ed:fe:f0:d3:aa:8d:e8:55:e9:
cc:97:78:28:93:b9:89:f7:c1:dd:3e:50:1c:18:09:
75:07:d5:d2:d8:ef:e2:9c:94:39:5a:6d:7a:38:69:
f8:e2:5f:2c:80:78:73:54:a4:72:bc:a3:60:e0:50:
b2:dd:fd:40:41:24:d6:52:fa:07:a2:0e:08:0a:ba:
96:99:bf:9c:40:38:b5:49:13:9d:8c:d3:45:35:e9:
9e:03:53:96:08:4e:5c:97:e0:11:3d:8d:0e:ab:bd:
93:53:52:48:8d:26:72:66:55:c2:60:dd:25:8d:a1:
f8:98:ff:20:c7:47:ba:d0:96:ef:90:9e:4d:70:05:
d3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:95:0E:97:94:31:55:64:62:AC:FB:6D:2F:6D:C2:C5:D6:D0:22:62
X509v3 Authority Key Identifier:
keyid:BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a7:26:8b:6a:b1:21:b0:ab:97:63:18:3b:c5:d7:0e:bf:2d:
8f:d1:fc:c3:4c:08:a7:69:15:0d:39:73:a6:11:bf:c6:1a:1b:
36:97:d6:6c:f4:4c:a8:6a:e7:9e:4b:57:6d:cd:5b:39:ff:07:
4d:f0:36:08:93:c4:47:48:ee:17:c5:1a:20:aa:b3:71:11:b7:
4a:81:6f:6e:14:47:8c:0d:48:46:8c:b1:59:95:a3:9d:af:cc:
af:39:bb:da:8f:57:5c:61:d6:7a:cb:9f:46:67:4e:a4:97:9a:
99:ca:80:d6:8f:71:02:03:df:0a:be:dc:dd:74:ff:18:01:be:
08:5b:64:85:72:82:fd:ad:ba:55:54:2a:8a:04:8b:f3:4a:dc:
e6:c1:c1:11:04:b2:f6:e5:56:55:7c:0a:36:2b:38:e2:df:4c:
47:c6:c1:3f:1a:d2:a7:f4:51:86:96:02:9f:3d:98:2f:4c:9a:
32:92:0b:73:25:1e:24:7e:f8:1e:3a:08:ab:f2:8c:0b:cd:82:
f8:7e:d4:ce:fc:47:0c:ca:d2:38:4a:0c:da:f1:db:00:77:d0:
66:79:38:ef:9a:cd:7f:e7:36:cd:f6:ac:17:92:4b:9f:ae:91:
c9:2b:b3:22:2c:c6:36:0f:3b:29:5c:23:91:96:c2:0b:ee:15:
0b:30:31:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:18:03 2025 by rpki-client