Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
File: vVwIMjrCerZVOlpppzpY-AJCPWg.mft (raw, json)
Hash identifier: 2V6maaWYIzouUdS+2rC5qkx7YEd1hujm1V7ncV30s18=
Subject key identifier: A8:A9:99:2D:F2:BE:81:F4:3C:07:59:7C:8D:42:D3:DB:21:57:7E:D5
Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
Certificate issuer: /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Certificate serial: 019A4DE1B59D858B407B7D5711B7402E6A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
Manifest number: 05D9
Signing time: Tue 04 Nov 2025 08:00:28 +0000
Manifest this update: Tue 04 Nov 2025 08:00:28 +0000
Manifest next update: Wed 05 Nov 2025 08:00:28 +0000
Files and hashes: 1: G_IYoZfZUxFUxoKj63LyULDLjWc.roa (hash: p32xiHa5RLyOZriAfbie5PUear7BZRAYgBWelDYnr3o=)
2: pBa3ZIYcjmcqVmvAHshpeA-YNy8.roa (hash: 4EmI7PijPu9Hj8achdjNLKa6nAug9jEr6AHyyJ1Ale0=)
3: vVwIMjrCerZVOlpppzpY-AJCPWg.crl (hash: ciGeOppvGzEDQlYr2ah2Za9jXI+6O0a/wNhIITL9Ms8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:b5:9d:85:8b:40:7b:7d:57:11:b7:40:2e:6a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Validity
Not Before: Nov 4 08:00:28 2025 GMT
Not After : Nov 5 08:00:28 2025 GMT
Subject: CN=a8a9992df2be81f43c07597c8d42d3db21577ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:29:7c:b0:ae:8b:40:8c:be:92:6f:43:69:
6d:65:4e:c0:04:9a:dc:40:39:12:85:a3:02:2e:a6:
07:d1:12:67:a5:ce:6a:4d:20:f0:38:47:65:7a:8c:
da:cf:1a:b7:0f:8c:08:28:99:41:84:52:f6:a3:b7:
5d:b3:3d:de:68:53:80:0b:cf:fd:eb:dc:6e:c5:3c:
5f:19:bd:bb:57:51:8c:d8:0d:47:80:76:29:f2:7f:
10:1f:2f:d2:78:0e:bc:2a:f8:fd:57:46:3d:e6:bb:
0a:cf:f7:83:c2:1f:06:8c:ea:61:cd:3a:12:a5:01:
23:68:16:f9:fc:ed:70:bf:e6:8f:12:77:1b:f3:95:
12:34:54:c5:c2:da:a6:39:83:fc:bd:18:1a:50:df:
db:70:42:4d:e0:84:a2:ee:9e:d9:40:6b:29:b1:73:
3f:4d:ed:b6:01:e4:79:2a:51:5f:d6:9c:d4:e4:7f:
eb:78:a5:7e:e2:10:1c:34:a8:6b:c0:69:a2:db:5c:
1b:96:32:b3:84:ff:28:4c:16:1f:2a:70:c2:7f:98:
16:bf:d9:bb:74:f0:e7:08:fb:09:8c:7a:d0:3e:e1:
37:bd:03:70:33:8e:d7:9b:e6:f8:49:a3:ba:df:ba:
cf:b1:17:02:4a:e9:2c:73:0c:fb:6e:2f:fc:2c:29:
e3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A9:99:2D:F2:BE:81:F4:3C:07:59:7C:8D:42:D3:DB:21:57:7E:D5
X509v3 Authority Key Identifier:
keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:50:fd:e8:3a:85:b3:c8:70:a2:8b:66:20:ed:26:7c:19:d2:
75:91:8f:af:2c:b1:aa:98:17:e7:46:1e:ad:40:37:a6:a1:e2:
ac:7f:50:94:e7:50:38:d1:3b:2d:a4:93:56:75:e7:aa:39:d9:
7a:df:89:12:86:a3:9f:ec:f9:c6:74:07:c8:f7:20:d0:35:cc:
a9:cf:35:46:6a:f2:ca:15:6a:d4:90:86:ad:db:b0:5a:f4:a9:
06:63:9b:65:f1:20:97:3d:ff:fa:93:f9:1c:4e:25:30:af:83:
04:f0:be:96:59:3f:b0:fa:18:64:0f:09:f0:95:97:2e:ab:fa:
23:54:39:fa:23:c5:14:0e:15:6f:2e:db:66:30:38:1d:25:1b:
a6:ef:6b:05:69:a2:57:9b:ab:a0:22:46:a5:b8:b0:0b:48:2d:
8c:19:15:b1:61:cb:75:54:46:53:a4:7e:81:7a:08:8e:c4:d6:
35:08:e4:88:f9:e6:08:50:4c:23:07:e2:dd:9b:5e:21:7f:d1:
04:d7:f3:fd:b7:ea:17:32:c2:4d:c6:4c:4c:ac:ad:75:c3:73:
1a:ef:dd:5c:96:18:6f:fd:ba:ce:3f:19:e4:e5:c8:70:f9:5c:
91:d1:6c:ba:4f:89:6a:6e:0c:30:4b:1e:e2:20:68:9e:f6:16:
81:86:a0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:18 2025 by rpki-client