Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
File: vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft (raw, json)
Hash identifier: tKE2krxxELAaEp65D6h1PX/3gXEZGdk0ay6mbGh89KQ=
Subject key identifier: DB:9B:D9:73:BC:08:52:22:0B:C6:38:33:9C:62:A0:C1:95:AA:A2:5E
Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
Certificate issuer: /CN=beb12ce6a91030e27d5abad146df27bc2880652b
Certificate serial: 019A4C9839BB3BD52D7B6EDB1C599E31DF88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 02:00:35 +0000
Manifest this update: Tue 04 Nov 2025 02:00:35 +0000
Manifest next update: Wed 05 Nov 2025 02:00:35 +0000
Files and hashes: 1: 68bf9tdtZQgGYg3-0B5PInDhCfY.roa (hash: f8IkiTce5GYVcsogjzR0QdHaU5oLadDEov52ZX8Qu0s=)
2: IRSQE14-Tz7sBccAsgZYt7JbvIs.roa (hash: HHWOf34cKB/cnxnIC3HjVQrTDRzDkhRKh2V00sDdnHA=)
3: ZTuZG35aq-_FRZAbaGaaD5vcMwI.roa (hash: ulXglv5m+ng8W6iFQKnfH2V7n7R22IWQlAJ1C+Bod0g=)
4: e7SUl4mSjdeGsAW__A2CvddXoNY.roa (hash: CZDiVjjgs0Krs+aiXIc/FeDFsKFYjTe8hPduuFN8E2k=)
5: vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl (hash: wYbcAXD4ibNePRdd179FwwHqGi7uxKHGHYP9B5IRnWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:39:bb:3b:d5:2d:7b:6e:db:1c:59:9e:31:df:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b
Validity
Not Before: Nov 4 02:00:35 2025 GMT
Not After : Nov 5 02:00:35 2025 GMT
Subject: CN=db9bd973bc0852220bc638339c62a0c195aaa25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3c:a3:19:dc:58:b8:62:35:25:6e:0b:2a:2d:
fa:b7:68:02:21:4a:02:0e:24:76:fd:88:65:0f:b1:
3b:ca:2d:4a:e1:2f:c5:92:3e:66:cf:4c:3a:06:d1:
ea:2b:a9:bd:33:6e:4a:d2:9d:63:29:f0:41:05:e2:
4a:a4:98:63:59:1a:0a:1e:0e:70:bc:a3:3f:2f:e1:
a8:a9:53:fc:4a:d4:c5:50:ed:15:cf:e0:82:73:28:
3e:5f:33:60:09:e3:16:16:7a:20:9d:84:95:b1:c5:
b7:b0:48:2f:c2:fe:e6:45:fa:ba:0a:a7:07:37:3b:
93:b3:02:0b:a0:ce:a1:2d:b8:50:da:2b:36:c1:3e:
68:67:2d:fc:50:00:91:8d:45:01:ed:af:37:32:66:
cf:82:4d:20:79:17:38:b1:40:8f:fd:1f:3b:bb:d3:
25:4b:e3:69:14:07:86:66:b3:15:22:9e:e3:34:3e:
ab:a1:00:47:28:57:f2:ce:90:86:d4:86:d9:cb:87:
b7:c7:ab:d8:23:56:6e:36:0c:a3:b7:ef:97:c3:27:
61:66:b3:70:7d:d5:8c:2b:81:5c:52:6c:77:5f:ad:
30:a0:fb:bb:a0:d6:11:5e:bd:6c:5c:5b:6d:8c:a4:
70:12:4b:71:2d:de:89:b8:02:3c:fc:40:fd:99:73:
c0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9B:D9:73:BC:08:52:22:0B:C6:38:33:9C:62:A0:C1:95:AA:A2:5E
X509v3 Authority Key Identifier:
keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:66:0d:02:f9:68:43:53:bf:dd:02:c7:b9:07:20:da:98:47:
c0:89:b7:02:65:ba:71:04:b4:2b:ed:44:93:50:b5:46:a8:b9:
e2:68:69:2d:b7:d8:e0:3c:84:85:c9:9a:72:8b:21:cd:be:ed:
ff:e1:38:5a:3d:80:a3:6b:85:5b:ce:18:76:d5:1f:e5:a1:a7:
d7:64:9a:38:ca:6a:ae:8e:6c:bb:d2:34:e1:2b:6e:a1:c4:46:
b3:d5:73:34:85:46:61:f3:22:dc:05:a5:a4:bc:1b:90:03:a9:
ea:1d:e6:62:1e:90:05:fe:28:9c:5d:d9:1e:4e:12:a9:04:87:
09:ca:09:df:83:bb:a3:12:4c:a4:23:dd:4b:35:a2:48:fe:0e:
e8:93:43:b4:a1:a6:51:7b:dd:9d:9f:85:e1:f4:31:e2:d9:d4:
bc:d6:ba:e5:3b:f5:68:f7:f0:13:ce:4a:d1:60:40:c2:da:33:
b9:b7:cb:72:c9:26:3d:81:c9:ad:34:eb:df:ac:a7:9b:a3:21:
46:c9:91:03:b3:85:47:7a:0a:e0:5f:35:c3:79:5d:1d:ea:63:
1b:74:4a:7e:63:c5:1c:c4:e3:5b:7f:31:ab:f9:9c:11:c1:fd:
e8:f3:44:20:13:04:92:38:ab:7b:d1:d1:2f:53:9c:0a:c8:2d:
e8:c6:42:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:49 2025 by rpki-client