Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
File: VHbDyngMxXdErb6QoPOU8dHNcvM.mft (raw, json)
Hash identifier: KgC4pe1D8GHbAD/KzyDz2ht1Bp1DcEeMO1IYTqedwyE=
Subject key identifier: 2E:9E:B4:CF:8F:9B:5C:34:7E:4A:49:E5:75:C3:D3:3D:1D:B8:9A:5D
Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
Certificate issuer: /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Certificate serial: 019A4DE1CDF94A431D397DDAA7B2093F8C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
Manifest number: 0375
Signing time: Tue 04 Nov 2025 08:00:35 +0000
Manifest this update: Tue 04 Nov 2025 08:00:35 +0000
Manifest next update: Wed 05 Nov 2025 08:00:35 +0000
Files and hashes: 1: J1F-UaHfYAClgmD-n-h_bemva1g.roa (hash: LkkLFeCVLkb+GZvSdm+hQS9Yt//NS73l5BEh3ajjGOM=)
2: Mzf3T5ZCYDRP9VJBsVQOjUFWDdY.roa (hash: fMfmlTHaxDxkKj4QIO7HlLPP5wMEtHiZKgYxRA6zmJA=)
3: VHbDyngMxXdErb6QoPOU8dHNcvM.crl (hash: utolxFyQeoce1s+j6Awzs5xeHD+6nhEP8NWQcskKIXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:cd:f9:4a:43:1d:39:7d:da:a7:b2:09:3f:8c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Validity
Not Before: Nov 4 08:00:35 2025 GMT
Not After : Nov 5 08:00:35 2025 GMT
Subject: CN=2e9eb4cf8f9b5c347e4a49e575c3d33d1db89a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b8:39:c8:ba:e0:d4:57:ea:3a:ae:0c:83:8e:
f0:36:4b:9f:d6:82:0e:27:22:0b:69:f4:40:a0:c0:
ec:aa:b4:b9:ba:47:57:47:2a:a3:94:b6:6c:f4:8d:
39:22:64:f8:ec:b7:c6:b7:a1:df:79:90:41:ab:4d:
98:8d:3f:c3:7f:de:79:1d:c1:7e:13:ca:df:85:a8:
35:b2:d2:43:71:3d:b1:1b:7b:66:6a:f2:6e:b1:f4:
0b:2f:c8:65:2f:b8:60:1e:25:0e:97:a6:29:b5:8a:
d9:ef:10:f0:c5:ef:7a:a9:8c:cd:98:dd:d7:cc:35:
21:b0:1a:cb:8a:27:8c:ad:b9:19:07:a3:78:b8:a4:
fa:dd:94:26:f3:96:ad:ef:3d:7f:8a:5b:0f:1c:84:
d8:56:81:e9:65:ba:31:0e:5b:0d:73:6d:9e:b7:21:
fb:64:ca:92:25:a0:61:9d:ec:9d:9f:93:6c:d6:7a:
e3:76:d8:95:aa:c2:dd:87:12:62:37:e8:c7:9c:a1:
87:c1:ab:64:bc:69:2e:37:ac:5a:c7:2d:99:9a:92:
4a:e7:78:41:44:af:65:63:73:f0:d0:5c:11:bb:d3:
e2:13:0c:39:bd:75:ff:da:c7:89:7d:58:6f:fd:39:
dc:6c:8a:6d:20:bf:9c:c0:ef:f0:78:31:99:09:69:
1b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9E:B4:CF:8F:9B:5C:34:7E:4A:49:E5:75:C3:D3:3D:1D:B8:9A:5D
X509v3 Authority Key Identifier:
keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:01:1f:20:f1:33:d6:4a:69:15:24:3f:9c:e1:1d:cb:7e:0e:
90:47:1a:2f:a9:57:7d:2c:9e:47:fc:10:0c:72:c4:e9:98:9b:
3f:1c:7c:36:3c:6b:4e:53:3d:1b:a5:68:dd:0c:7e:c1:1b:4a:
1d:b9:24:dc:56:09:1f:0e:e5:9b:6f:60:5d:82:1c:7d:e2:6e:
8b:91:c8:83:57:a7:92:03:3a:52:53:33:49:6e:b4:6b:e0:54:
7b:e9:3e:9e:29:cb:67:3f:ce:7b:03:86:80:be:e1:1c:65:8a:
aa:bf:8d:78:71:fb:0d:1e:75:45:f4:bd:9c:74:2a:5b:9b:43:
55:a4:26:4d:69:5a:ed:d4:03:ae:c8:a8:c5:e4:4f:a0:df:aa:
90:73:58:e7:0e:75:1f:ba:5b:35:39:16:68:e7:fd:d6:f3:a3:
07:66:63:89:cf:1d:d3:e7:6a:33:4e:c3:61:3e:53:cc:e9:c4:
07:5d:f9:f1:5e:99:8a:be:41:fe:8f:35:f4:df:bc:9d:96:9a:
a9:e2:9d:4e:3f:c0:22:3c:cd:cb:b8:e5:3f:e7:ad:a3:25:2a:
79:34:f7:38:bc:1c:83:e6:ef:99:8d:30:64:2f:12:f1:62:b9:
cb:b3:44:58:f3:f0:4f:14:e7:28:7b:ca:56:24:01:e5:20:62:
13:b6:07:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:54 2025 by rpki-client