Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft
File: VUg02oYAyWxf3pEnj1IObA0m__M.mft (raw, json)
Hash identifier: 7fo2o7Q4+G2wfeCSbXh4irWIXMS9s0bspwVHOLDHktM=
Subject key identifier: 13:41:D8:2D:76:AA:B2:B7:65:9D:B6:C6:6D:74:8F:01:7B:02:B5:51
Authority key identifier: 55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3
Certificate issuer: /CN=554834da8600c96c5fde91278f520e6c0d26fff3
Certificate serial: 019A4EF43CCC30566976AFDD724F366B6BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:20 +0000
Manifest this update: Tue 04 Nov 2025 13:00:20 +0000
Manifest next update: Wed 05 Nov 2025 13:00:20 +0000
Files and hashes: 1: 5ViHo8CP-gF060JRbv2sDnYVvwI.roa (hash: QuO6jCw1G7bEtuq5gtmVrfr4TZNPSxo88gcCHtVd/jE=)
2: 8fof93hByfwq17Ckt-3keL0U8qE.roa (hash: fPV8OZM9BBwYkvL7Bz4KdU4owCtM7tBBVj0Rie52yyQ=)
3: VUg02oYAyWxf3pEnj1IObA0m__M.crl (hash: VP0KCOOet5UbtxXc2+DyLOli13n0AfvLSGA8O6e9CNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:3c:cc:30:56:69:76:af:dd:72:4f:36:6b:6b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=554834da8600c96c5fde91278f520e6c0d26fff3
Validity
Not Before: Nov 4 13:00:20 2025 GMT
Not After : Nov 5 13:00:20 2025 GMT
Subject: CN=1341d82d76aab2b7659db6c66d748f017b02b551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:d5:86:75:ca:cd:1a:06:d6:d4:85:4b:8f:
10:0b:11:f9:49:f9:34:3c:9c:15:fa:e7:4e:fe:1c:
07:07:93:a5:7c:39:09:6b:a6:34:9b:cc:07:82:c3:
5f:a4:a7:32:28:dc:5a:60:86:04:dd:10:82:c0:92:
4a:50:bf:bf:a4:f2:9d:d9:ab:65:e2:93:fa:48:b8:
4a:12:73:8c:36:e5:b2:79:5c:ed:c3:0d:d6:ee:df:
87:23:b7:68:e2:f6:c9:65:4b:89:1c:b3:5b:25:98:
34:da:74:d8:ec:aa:08:77:bd:eb:17:d3:e9:8b:5a:
09:91:5f:36:ff:af:42:55:b7:68:ac:90:36:c3:a0:
e6:d9:b4:7e:88:fa:d8:6a:7e:bf:30:47:a2:ec:df:
85:2a:58:68:eb:f6:7a:5f:4f:31:b9:e2:47:d6:b3:
b3:af:e7:41:38:f8:7c:51:05:10:cc:a3:c6:ac:b7:
f5:9c:c2:d8:67:30:c2:4e:7b:83:d5:be:13:48:62:
ae:c7:62:15:ab:15:5c:3b:fb:4f:87:63:71:95:22:
97:5a:04:d4:b3:26:b1:bc:7d:92:94:a8:01:3c:0f:
e8:4f:bb:40:52:40:23:87:23:1a:3c:32:0e:05:bd:
f1:d5:8b:ab:e4:bb:af:08:d5:e8:ed:91:3d:a0:19:
94:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:41:D8:2D:76:AA:B2:B7:65:9D:B6:C6:6D:74:8F:01:7B:02:B5:51
X509v3 Authority Key Identifier:
keyid:55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:83:93:12:d4:6c:87:4b:c0:91:aa:c9:a8:bf:65:f8:7a:56:
f4:4d:a3:f1:dd:57:c4:6e:8d:a7:24:cb:3e:71:95:85:c2:ab:
05:cb:2e:2d:fe:43:59:cf:f2:76:9e:a4:20:17:66:69:2f:27:
51:0d:1d:2c:49:d3:f3:d7:c4:ad:46:b4:99:e0:d1:36:f1:87:
ae:3d:25:bd:50:2f:11:c8:e8:e7:b8:3d:06:74:a6:70:4d:10:
75:f3:ea:d2:1f:2d:0a:9a:6d:74:a3:23:f1:1b:fa:ee:bb:d9:
ef:6e:69:ed:af:ad:9c:98:a3:bb:5d:c0:53:13:90:1e:43:fe:
e5:fe:f7:15:90:3c:1b:c3:46:8b:05:11:92:a4:42:36:b2:a4:
1b:66:6c:a6:68:4a:47:04:d7:e3:0c:66:7f:c4:2e:9e:3b:0d:
41:51:53:b4:0e:da:3c:ea:1a:7c:1a:42:7f:38:47:2e:4a:a0:
2f:2c:76:61:c0:a4:35:96:57:8d:68:57:7c:97:da:5c:f7:e8:
97:b9:c8:55:1a:0d:cc:da:7d:81:a1:43:6f:73:8b:33:4d:eb:
20:55:00:37:29:e3:12:2a:a8:28:54:f7:e9:83:36:72:31:13:
ad:cc:cb:3a:76:6a:08:bd:75:01:61:da:f4:23:ee:2c:36:91:
dd:5f:9f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:49:20 2025 by rpki-client