Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
File: vfyN37hBh58OUw3OO3-Fgn8MGT8.mft (raw, json)
Hash identifier: 8z0FaIIJg1TgYMN3oxv30L2Dk57r4xf3Rky2zi76upk=
Subject key identifier: CC:51:73:F9:04:F2:8E:C1:A7:B9:ED:A8:5F:06:FD:C0:D9:6D:99:10
Authority key identifier: BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F
Certificate issuer: /CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
Certificate serial: 019A4D071EB4869B4E39DB5FE86ACD2A5267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
Manifest number: 068C
Signing time: Tue 04 Nov 2025 04:01:43 +0000
Manifest this update: Tue 04 Nov 2025 04:01:43 +0000
Manifest next update: Wed 05 Nov 2025 04:01:43 +0000
Files and hashes: 1: evKF7Ghixw06TsX8m9WS1kttuTQ.roa (hash: C0t0ubGvyf/fMEfN+yYg9iML6okU33nNE7cYDrXAdGg=)
2: vfyN37hBh58OUw3OO3-Fgn8MGT8.crl (hash: GZF+7OgFtjmrO9KJaesisqKxLs6v4Xmkl9UjhRXAdK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:1e:b4:86:9b:4e:39:db:5f:e8:6a:cd:2a:52:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
Validity
Not Before: Nov 4 04:01:43 2025 GMT
Not After : Nov 5 04:01:43 2025 GMT
Subject: CN=cc5173f904f28ec1a7b9eda85f06fdc0d96d9910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:ba:34:67:9f:f9:7c:a8:c4:49:c9:42:b8:
a1:a3:31:43:43:3d:f8:ee:13:94:e9:cd:ad:f5:0b:
26:78:cc:1a:1a:0e:69:ea:7f:c1:ca:8c:dc:69:18:
9c:97:c8:0e:f4:15:6b:89:d7:9f:29:a3:4c:0f:59:
1b:b6:82:81:2b:d2:6e:15:bf:9a:cf:bc:af:e8:a4:
f0:71:6e:f8:c9:8c:49:64:21:a0:08:bd:6d:39:64:
d6:81:26:48:22:7d:45:de:b4:e1:bd:f4:dd:a8:01:
0a:6b:ec:40:0a:3f:17:64:d1:e4:bd:a7:ff:90:e2:
f5:e3:b8:a8:fe:5d:6d:d7:59:a5:00:71:7b:48:6c:
7e:48:87:1f:1a:f2:44:5f:32:64:cd:8b:f0:4f:1d:
bd:96:16:a8:55:f3:17:49:46:f1:00:20:67:54:46:
bd:4c:33:1e:cc:14:ec:8a:6d:31:76:f3:19:d0:c0:
55:c1:1b:c7:05:88:e8:c3:7b:d1:93:63:1b:56:7f:
c1:52:ee:57:a4:bc:3f:cd:5b:14:c6:92:52:82:45:
e5:fe:6a:4e:ef:59:4d:37:68:14:e2:56:55:a1:b8:
de:01:ea:ce:2c:76:c2:de:02:20:48:a0:06:5a:ac:
6a:ec:bb:ad:24:32:f3:6c:8e:b8:66:67:7f:06:94:
1a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:51:73:F9:04:F2:8E:C1:A7:B9:ED:A8:5F:06:FD:C0:D9:6D:99:10
X509v3 Authority Key Identifier:
keyid:BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:64:33:b6:63:8e:a2:57:64:2e:f3:bb:b9:c5:bf:01:03:e6:
58:3c:11:21:85:70:d3:ee:4c:13:c9:99:3b:58:cf:a4:fd:ab:
1d:4e:d0:44:8c:0f:94:c1:0c:b8:db:ce:4d:c2:6a:da:72:98:
d1:45:4a:b0:15:d9:75:b1:26:89:15:83:af:0b:c7:f3:ed:4e:
10:5a:71:13:0e:40:08:56:b0:f6:1e:3e:b8:3a:2a:1e:e0:d6:
6e:4b:7b:02:b2:b0:79:62:96:fc:3e:6d:94:ec:4d:1a:57:a5:
85:aa:04:02:39:e5:19:a7:37:f6:24:7c:69:2a:a3:f6:2a:ff:
3a:95:8e:10:af:19:f4:b6:53:c6:fa:20:23:cd:28:d4:d6:d4:
c9:45:50:23:c0:c1:89:ce:cc:ee:71:d6:ba:38:51:2d:3b:e6:
a9:cc:5f:32:27:23:35:a7:23:f0:e5:7b:f9:97:12:b6:42:cc:
83:fe:64:03:aa:fa:fb:7c:06:37:c9:7b:d8:e7:1d:55:0b:db:
27:82:d1:34:f6:a3:49:fc:8f:23:5f:c4:65:c1:f2:de:62:02:
67:ba:c7:c7:6f:cd:d0:80:3e:bc:df:19:73:74:00:32:c8:2a:
22:e7:d5:5b:08:ab:bf:3b:fd:8f:60:d0:a4:5c:27:c2:d1:8a:
69:c4:32:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:36 2025 by rpki-client