Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
File: r1vEnV8BojWvkonPSSav_vevkrA.mft (raw, json)
Hash identifier: jiBkl9VEp19Mmgyf5QBOX9oiiRnp8zT1IXr2Eu+LsQU=
Subject key identifier: 60:77:B3:2A:55:1D:CD:FA:C3:84:93:97:4E:70:E0:BA:52:51:16:04
Authority key identifier: AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0
Certificate issuer: /CN=af5bc49d5f01a235af9289cf4926affef7af92b0
Certificate serial: 019A5119BE3460E06D5993223E79EB0DD0D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 23:00:32 +0000
Manifest this update: Tue 04 Nov 2025 23:00:32 +0000
Manifest next update: Wed 05 Nov 2025 23:00:32 +0000
Files and hashes: 1: 6d-AyMF7ZaaM5Mjt7QfO5cW_2AY.roa (hash: ZUwXdaD1P85dbAvt2mEWIMU5POb+euNbtRK/RK4dLgk=)
2: r1vEnV8BojWvkonPSSav_vevkrA.crl (hash: 7cplzmTQiOisbzLmHIxoiLJW4xL1UvGkmxRyfqh0JJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 23:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:be:34:60:e0:6d:59:93:22:3e:79:eb:0d:d0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5bc49d5f01a235af9289cf4926affef7af92b0
Validity
Not Before: Nov 4 23:00:32 2025 GMT
Not After : Nov 5 23:00:32 2025 GMT
Subject: CN=6077b32a551dcdfac38493974e70e0ba52511604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:22:dc:ee:a2:cd:38:0d:f9:1b:51:1f:bc:f3:
52:ec:fc:6f:23:1d:a9:b5:6f:a3:7f:1d:73:ce:65:
93:89:b4:2f:cc:46:02:a8:83:9e:d4:f8:d7:03:6f:
d7:80:c6:7a:5e:1c:05:e9:09:2c:ea:19:28:66:c2:
d0:a1:73:49:75:7d:ab:48:17:4d:8b:e8:1a:60:d3:
c3:5d:92:63:3b:a1:ce:b9:4c:2f:37:0d:ad:ce:77:
65:d4:a6:fe:0f:1c:e5:a2:60:03:c8:26:db:69:b3:
85:03:fe:55:db:ce:11:ae:da:8c:85:24:30:c3:cd:
d8:7d:5f:6c:ae:5b:7e:58:6d:21:b2:b8:3c:9c:c0:
e6:0c:f1:a2:c1:ce:7a:04:eb:66:f0:b9:22:df:1b:
50:7f:11:4d:f0:9e:d4:50:02:0c:86:e8:51:0b:2d:
d7:ee:2b:d7:ac:6c:86:85:57:b6:69:0f:7f:d6:f9:
32:f0:d0:4e:b7:ac:99:24:ba:c2:0c:12:48:be:60:
b5:36:e8:e3:61:87:0d:ad:7a:16:c2:c2:75:3e:40:
e1:eb:5d:24:77:c5:eb:d3:5a:7a:e8:0c:b9:f6:57:
c0:54:79:87:55:3c:85:59:09:fa:8a:ef:c1:86:23:
e6:e1:7f:26:9f:06:3a:e7:ab:b5:1c:1c:23:3f:ee:
98:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:77:B3:2A:55:1D:CD:FA:C3:84:93:97:4E:70:E0:BA:52:51:16:04
X509v3 Authority Key Identifier:
keyid:AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3b:6c:b4:09:8e:61:bd:07:9b:e4:23:e7:91:16:92:a9:5f:
90:b0:21:11:f2:01:68:e5:53:f5:2b:29:49:60:56:97:11:fe:
0a:5c:62:cb:8d:44:bc:43:f4:45:fa:9c:a6:e2:4b:75:82:9c:
42:48:d3:83:63:29:f5:14:35:7b:91:aa:4a:0d:a8:0b:2d:d8:
58:c5:61:18:ca:95:ba:ef:f2:5c:60:34:73:46:ec:44:77:88:
e3:6b:39:ee:ac:df:d0:7f:16:69:16:18:23:f5:ec:01:0f:00:
70:f9:e2:0c:e7:7e:d1:d2:61:83:9a:fd:95:bc:25:d8:0e:04:
d9:bc:23:be:ba:49:6b:c2:cf:0b:f1:33:86:51:db:6e:00:60:
98:b9:ec:71:de:d2:e4:7f:80:21:48:22:8a:ab:99:a8:9e:ff:
09:c1:9a:99:2e:92:4c:0f:4f:1c:4e:02:f4:90:45:9a:ed:c2:
13:f5:7f:9d:ca:2a:2a:f1:e8:0a:34:22:8d:77:f1:c3:f2:9e:
64:38:dc:b8:e4:60:2f:c1:88:34:5a:52:88:7f:5d:39:b7:7b:
ea:98:f3:70:6e:fe:77:91:b9:f1:2e:b9:d4:94:53:7e:c0:4f:
a3:68:ff:40:8b:16:e8:02:99:b3:26:b9:24:8f:bf:37:3b:1c:
a8:90:8b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:38:27 2025 by rpki-client