Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
File: vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft (raw, json)
Hash identifier: lbS8k4fomVoO9O5NMQ+ccasC7Y3tV9/vCQR+5CXeYq8=
Subject key identifier: DD:6E:D5:6E:62:E7:76:A2:2B:41:25:C7:80:04:D6:62:88:52:59:C6
Authority key identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
Certificate issuer: /CN=bee0a94997672a920a290ccbfd049126f7075c99
Certificate serial: 019A4E86800DC5E5C7BA9E304D8AF090AC73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 11:00:28 +0000
Manifest this update: Tue 04 Nov 2025 11:00:28 +0000
Manifest next update: Wed 05 Nov 2025 11:00:28 +0000
Files and hashes: 1: N_iXT6yoM0IiJyQUNbfBu971Pc8.roa (hash: N5hBaTrYl3FRJAHCB5WOt0nXtIURvZkeHKhzHTcrevA=)
2: TDfXhLaJicDqER43mZJ9Gt5o4NM.roa (hash: xPlhAH8Cus6o3YMGrcO3bp4+1D+Angi7zwsI6/D/vLM=)
3: vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl (hash: a53f5garoPS8yz50NyemsJlCxMBxFhZqaICy6nvm9Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:80:0d:c5:e5:c7:ba:9e:30:4d:8a:f0:90:ac:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bee0a94997672a920a290ccbfd049126f7075c99
Validity
Not Before: Nov 4 11:00:28 2025 GMT
Not After : Nov 5 11:00:28 2025 GMT
Subject: CN=dd6ed56e62e776a22b4125c78004d662885259c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:d8:17:c4:12:c7:04:4d:3b:fb:5e:1b:ea:
a6:81:1d:52:18:5a:ca:f2:29:02:fc:de:19:66:39:
1b:95:65:a6:26:69:09:68:77:6d:21:dd:c7:a9:c1:
8d:44:99:f0:41:36:c2:f2:9a:bb:2c:d2:f0:8d:a3:
17:4e:bf:8a:de:11:44:69:54:42:24:bd:35:7e:57:
27:82:d9:09:33:3c:36:27:4d:c0:95:35:4f:32:72:
63:a3:a9:d1:3b:7e:61:c0:1e:e0:13:4e:93:95:74:
71:48:c6:9b:f2:e3:08:1a:67:4f:1e:d6:e3:fb:61:
64:3d:71:10:5b:f6:e8:0b:5b:2c:12:5a:52:6c:1c:
41:20:94:fb:69:4f:a0:af:86:a3:34:c6:48:c0:5b:
4c:ac:98:af:1b:97:30:c8:64:9f:23:c1:e6:8b:d9:
a8:76:c6:66:d8:da:fc:ce:72:1f:6d:af:c0:75:cd:
95:90:5d:06:d2:54:9a:61:69:39:f2:a0:cc:8a:78:
ef:d6:24:b3:de:f9:9d:f5:eb:e1:9c:32:71:d7:a8:
d1:5b:7f:db:15:0e:94:53:db:14:d8:3f:2a:d9:27:
fa:30:3d:33:73:ec:9a:67:d8:8f:31:f5:e4:b4:33:
c6:9b:09:ec:09:65:6d:e7:a8:a0:3b:39:9d:bb:2d:
f7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6E:D5:6E:62:E7:76:A2:2B:41:25:C7:80:04:D6:62:88:52:59:C6
X509v3 Authority Key Identifier:
keyid:BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3c:2e:27:fb:55:e5:07:b9:9a:52:03:fa:03:f9:30:07:a5:
00:94:3b:5d:da:fa:ef:a0:30:5f:bb:4a:2c:37:60:37:78:9e:
73:58:55:61:d8:d4:33:91:58:2c:a1:32:f9:4f:fe:a7:8e:22:
7f:74:c2:ee:25:76:69:ae:d9:7f:d2:54:90:92:e7:d7:3c:89:
22:b8:f2:21:28:f4:9f:83:6d:cd:d1:d7:6e:f0:cf:c0:41:04:
fd:84:50:42:63:5d:50:91:62:42:d1:f6:a4:e2:26:f0:46:d4:
70:df:7a:b0:66:15:d0:6c:90:bc:77:46:db:1c:60:5b:04:74:
bc:0e:2f:fa:a6:78:e4:3d:f7:39:28:41:b8:87:5c:fc:45:5d:
86:1c:ef:05:38:13:3c:ea:de:74:30:4f:b5:c1:d8:5b:b7:7d:
1c:46:9b:33:9e:7e:41:b2:45:aa:b1:ba:be:41:4d:99:ea:a3:
ed:b6:43:5f:f6:bf:a4:2f:1c:9b:b9:dd:d5:b0:7a:d5:ff:7c:
80:1f:be:0b:a4:ae:39:e8:9d:17:aa:6c:0d:16:12:af:32:e7:
e9:91:30:9e:61:55:f7:9d:c1:79:94:3f:eb:f5:3a:06:7f:95:
5a:1b:ad:1a:b1:7f:94:60:9e:4e:62:42:e9:35:c4:2f:b1:81:
63:bd:5e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:45 2025 by rpki-client