Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
File: vQScpC4dgs4ntUu_0Bd4HVRaebc.mft (raw, json)
Hash identifier: pbVDSYs80HU4o1Lczsm8y2LisN++qcJS4TWwUQGAWk8=
Subject key identifier: B7:12:F6:59:D2:75:EE:B9:A8:9C:F2:A0:C7:CB:EE:9C:D3:B3:80:87
Authority key identifier: BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7
Certificate issuer: /CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7
Certificate serial: 019A4D06594A37B64E26F1DA9B31289B8377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
Manifest number: 08F3
Signing time: Tue 04 Nov 2025 04:00:52 +0000
Manifest this update: Tue 04 Nov 2025 04:00:52 +0000
Manifest next update: Wed 05 Nov 2025 04:00:52 +0000
Files and hashes: 1: QDWgbXviJq4AecTUTzdtmUBRPkM.roa (hash: w5dWr+EFjY2DSPcv8scrS3s0nFXLYMuY90DVs/hZPLI=)
2: vQScpC4dgs4ntUu_0Bd4HVRaebc.crl (hash: OtAyS/ZIs84OSuC8hkKv65NNW2aLVG497tdL2uFrPPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:59:4a:37:b6:4e:26:f1:da:9b:31:28:9b:83:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7
Validity
Not Before: Nov 4 04:00:52 2025 GMT
Not After : Nov 5 04:00:52 2025 GMT
Subject: CN=b712f659d275eeb9a89cf2a0c7cbee9cd3b38087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:24:aa:e1:07:e5:f1:27:23:cd:dc:19:28:
24:ef:b9:f6:11:11:1b:ec:db:b9:5c:12:90:e3:2d:
7b:aa:b3:6d:16:69:85:72:82:ad:d1:6c:64:1e:18:
75:f0:89:53:4b:47:47:20:bc:99:26:53:56:ad:ee:
d1:36:d2:fc:71:a1:56:62:d1:0b:19:e0:46:ea:40:
0b:c8:ac:f3:e6:13:96:32:12:cf:24:5e:69:ce:ad:
52:2e:97:25:d1:36:3e:92:d4:9e:df:cb:e7:f7:0c:
5c:65:c9:87:2b:90:93:33:c2:7f:bd:47:12:a0:7f:
8a:94:d9:15:d1:5b:68:5b:78:a3:15:49:f4:38:a1:
ef:c1:bc:20:ff:78:a8:6d:13:d0:0e:c0:7b:dc:1e:
fc:b0:59:2d:16:dc:78:8c:a7:6b:16:81:78:5d:7c:
29:27:da:44:a0:2f:d7:93:12:98:cc:bf:b7:59:35:
8d:55:55:05:27:51:24:4d:38:f7:f7:17:a8:b1:57:
7f:0a:f1:bc:5a:fd:fa:8a:d1:f2:bf:5b:cc:33:a7:
6c:61:f8:04:d9:af:bd:c0:63:ed:e5:60:7f:59:a8:
1f:ce:7d:39:7f:76:1d:fd:fe:6b:1a:0a:5d:89:a9:
84:f2:e7:c9:b4:9d:87:13:c7:01:58:70:d2:0f:33:
b3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:12:F6:59:D2:75:EE:B9:A8:9C:F2:A0:C7:CB:EE:9C:D3:B3:80:87
X509v3 Authority Key Identifier:
keyid:BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ae:3b:0f:1f:c0:52:2e:75:65:e9:2e:d6:06:b3:4a:af:bd:
7a:77:0b:b0:34:75:bd:c0:4c:90:68:a1:53:4f:9c:9f:d9:be:
56:db:36:d1:2a:f4:6d:b1:27:c4:d7:84:b5:62:54:79:91:1d:
0a:9d:e2:16:4e:83:bc:db:ef:44:50:d0:31:4c:7a:0d:bd:61:
43:16:38:af:b5:74:79:a0:36:17:16:04:1a:11:d7:38:b9:24:
6d:28:36:b8:c2:56:ca:60:ec:2e:4b:c7:f0:b5:bd:63:1e:32:
9d:ed:db:61:c3:17:b1:44:b3:3e:8b:bc:ed:29:67:4a:c5:b6:
57:a4:e7:29:9a:89:11:92:90:3f:ca:03:e6:1b:06:28:9f:d7:
ef:3c:b9:94:56:42:a5:ca:b8:7e:34:7d:06:1e:c3:83:ee:f1:
ec:dc:cf:0c:6a:78:30:a4:de:b6:ce:4e:13:26:65:62:00:4a:
a9:b1:bc:9c:51:c8:16:e1:84:95:55:61:15:e3:cc:79:b7:56:
68:ed:0e:d8:62:77:7e:70:b5:68:64:b0:a7:dc:b7:ae:b6:e1:
8c:11:4c:fa:e7:8d:98:04:7a:84:b1:84:be:eb:0c:ae:74:64:
2c:67:e2:7b:eb:5f:af:9f:1d:38:17:4a:1c:21:72:fe:12:65:
2e:fd:08:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:20 2025 by rpki-client