Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft
File: vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft (raw, json)
Hash identifier: WKO48e/SE1HF5v/bjXqmfR+eHNETluQ37fVkr4tap5s=
Subject key identifier: ED:CC:0E:00:F7:41:53:C4:CF:B5:6F:95:4D:25:ED:18:9C:26:6C:EC
Authority key identifier: BC:36:B4:CA:E0:90:D0:F4:9C:54:83:F7:B2:F9:3F:B9:2F:D0:FF:87
Certificate issuer: /CN=bc36b4cae090d0f49c5483f7b2f93fb92fd0ff87
Certificate serial: 019A51BE89E0B8EEA76104EB01841B9206F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft
Manifest number: 12DC
Signing time: Wed 05 Nov 2025 02:00:32 +0000
Manifest this update: Wed 05 Nov 2025 02:00:32 +0000
Manifest next update: Thu 06 Nov 2025 02:00:32 +0000
Files and hashes: 1: Lrevspx8pK8iAQPmN_WzVm7Uz8g.roa (hash: rJO6XBbSiJFNojO75GzhljDBEykmJAUvcojH0FS1+Mc=)
2: vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl (hash: x3CxvgBK3OKWHnNThGOomvDvqItH2e7qL87E6+JXuCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:89:e0:b8:ee:a7:61:04:eb:01:84:1b:92:06:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc36b4cae090d0f49c5483f7b2f93fb92fd0ff87
Validity
Not Before: Nov 5 02:00:32 2025 GMT
Not After : Nov 6 02:00:32 2025 GMT
Subject: CN=edcc0e00f74153c4cfb56f954d25ed189c266cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:05:33:b3:a7:22:12:f9:70:43:48:aa:2e:c7:
06:be:78:25:88:d3:e4:ad:30:bb:ee:9e:ad:a3:cc:
96:34:81:ed:e6:75:9b:16:3f:2e:7b:cb:1c:c7:ce:
7b:b8:ca:c8:0d:ce:ad:87:f8:ca:0c:46:7e:34:71:
12:b4:1d:eb:e0:7e:b9:51:6e:4e:2f:d3:3d:3f:86:
dd:1f:4b:4f:9c:69:9c:05:1a:05:45:70:65:41:fb:
b3:00:ae:e4:7f:46:53:da:a9:8a:9f:8e:26:57:97:
ad:40:95:f3:c9:f8:e1:b9:17:c8:32:71:3e:e7:2c:
38:eb:9a:cb:2e:70:ec:6e:4f:aa:91:aa:47:80:3d:
bf:f5:11:96:28:13:74:6f:8a:85:c8:11:a6:e9:fa:
77:8c:a4:71:b7:4c:45:3a:71:33:62:d8:2b:d7:26:
40:0f:0e:67:81:86:e8:39:94:62:35:d3:27:41:85:
d2:66:28:32:a5:99:22:51:40:e3:12:18:eb:be:e7:
d9:ee:bf:f4:bb:8d:be:d3:95:d2:ff:8b:fd:3c:04:
07:00:34:fd:10:11:a3:3f:f7:c3:67:91:ff:52:16:
a1:06:b0:b9:2b:99:bb:37:ab:01:9d:bf:c1:bb:62:
cf:45:6a:6d:f4:69:04:6a:99:36:b8:3c:d7:03:67:
02:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CC:0E:00:F7:41:53:C4:CF:B5:6F:95:4D:25:ED:18:9C:26:6C:EC
X509v3 Authority Key Identifier:
keyid:BC:36:B4:CA:E0:90:D0:F4:9C:54:83:F7:B2:F9:3F:B9:2F:D0:FF:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a5:43:11:38:2b:44:13:0e:37:53:b2:ac:14:23:61:39:a5:
97:4e:d0:0a:92:cf:71:b2:02:8b:08:c9:f4:15:af:7e:be:53:
5a:99:17:04:c6:5c:25:34:38:6d:03:fa:75:64:fb:ea:94:8d:
a9:4a:d9:d8:b2:9b:40:af:16:b0:e3:21:dd:46:73:18:b7:06:
0a:8c:8c:da:27:55:56:75:f7:3b:cb:47:dd:af:41:fa:2a:ea:
87:2d:b2:29:90:38:59:d3:30:03:e0:e1:13:b8:2f:45:4e:6a:
fb:1c:7e:b6:ce:7c:31:4a:86:08:e6:9d:3b:e7:c2:6f:69:06:
ef:6a:0a:87:bd:73:12:90:7b:d4:0a:6a:60:d9:d9:3f:33:2b:
39:e9:89:92:99:f3:17:4a:c7:2c:f9:7e:d5:04:fe:18:87:5c:
91:27:8f:da:c0:37:ea:b3:06:76:86:f3:25:ae:72:78:1a:4b:
25:56:27:64:9e:9f:57:13:c8:2a:ad:a8:bd:56:9c:d1:90:11:
ca:9c:79:f4:c2:bc:69:4b:18:10:b7:02:95:7d:c8:52:ff:00:
79:7c:25:f9:44:b9:47:16:2e:e7:8e:4a:1f:c7:0c:89:ed:5f:
92:7d:fa:1f:db:6f:b8:8d:5b:4f:f4:b5:bf:8c:c2:85:d7:9e:
b0:05:ac:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:25:02 2025 by rpki-client