Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
File: vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft (raw, json)
Hash identifier: zcvH1P9Z8iTLsAl/mUNJhK+z9UDldaFehjnd81ktdZ8=
Subject key identifier: BD:3C:90:43:C2:95:B2:DF:E5:92:0A:C4:58:E8:9A:CB:D8:A6:CF:44
Authority key identifier: BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9
Certificate issuer: /CN=bd82e60d072e5185435a900e323f463806d433c9
Certificate serial: 019A4D73A9A0DC0BE357E0B56B73351A529A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 06:00:16 +0000
Manifest this update: Tue 04 Nov 2025 06:00:16 +0000
Manifest next update: Wed 05 Nov 2025 06:00:16 +0000
Files and hashes: 1: vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl (hash: ru8CEZsHKHfJwGWyC0q/eFj19tAnP1eMGBkPYXwhIOs=)
2: zHFsSZojvy_X7uL-vPL2okM6zhI.roa (hash: n8rylT6z4CcEms6K9HKeeDe6KPQo1phvGPnzqc1vlUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:a9:a0:dc:0b:e3:57:e0:b5:6b:73:35:1a:52:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd82e60d072e5185435a900e323f463806d433c9
Validity
Not Before: Nov 4 06:00:16 2025 GMT
Not After : Nov 5 06:00:16 2025 GMT
Subject: CN=bd3c9043c295b2dfe5920ac458e89acbd8a6cf44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c1:76:c5:36:6e:1d:5b:c9:72:27:99:87:b7:
1a:ec:fa:84:76:47:62:6e:f4:6d:1f:4c:94:b0:5c:
ad:9a:95:ea:72:ff:3a:64:ef:d3:d4:ed:b7:a5:5b:
5d:1e:e2:b2:1b:e8:51:31:3a:bb:bf:44:c0:f7:e6:
97:df:0a:23:90:8b:3e:f7:4f:5d:59:89:eb:4a:c0:
de:b2:b8:79:b6:c9:76:bb:1f:1b:a8:2f:95:43:aa:
a2:84:87:2b:81:11:04:53:8a:c8:04:8e:a6:17:7a:
45:f4:42:07:33:5f:f0:d3:bc:e7:16:86:4e:51:a4:
cf:6b:4b:51:f9:82:a9:20:07:c7:75:db:a9:54:21:
19:d6:55:3c:19:f6:95:60:6a:66:bf:75:0b:37:fd:
a2:52:33:cc:af:67:41:23:3b:d6:67:cd:d3:2c:c3:
2f:e3:fc:17:77:d4:c9:a7:ce:ec:c8:9f:2e:1a:2a:
2c:26:82:7e:5f:13:2d:32:96:11:1d:92:45:c0:60:
8d:dc:05:51:32:7c:b7:d0:96:a7:cf:11:dc:d3:e8:
8e:b1:df:08:92:6d:86:d2:52:f7:3e:4a:cb:d7:79:
6a:18:18:76:8c:59:f6:52:da:5e:fc:30:b9:56:e1:
d9:c7:30:31:95:1c:c3:40:11:38:f0:d8:86:b0:52:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3C:90:43:C2:95:B2:DF:E5:92:0A:C4:58:E8:9A:CB:D8:A6:CF:44
X509v3 Authority Key Identifier:
keyid:BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b7:be:ea:08:ac:a0:f7:07:8b:e7:e2:1a:8c:c6:39:78:3d:
8c:c8:4a:97:87:63:2d:2f:91:77:54:33:00:69:09:41:b8:51:
08:13:78:2e:56:28:64:cb:2c:e9:e6:e7:03:58:58:88:2e:e7:
c5:26:4f:93:aa:cb:c0:22:cc:74:76:cb:a4:52:3a:6d:52:3a:
98:d3:93:b2:95:b9:f1:84:54:b2:7d:3a:d5:e2:c7:1f:87:b1:
ce:3d:6b:4d:62:0e:9d:7d:0b:32:af:77:e3:2f:a8:01:a0:8f:
aa:ed:93:c4:72:73:b0:ed:2c:1c:4b:54:7b:b6:81:cd:15:13:
1b:75:cd:7b:da:dd:95:90:45:bf:3c:04:89:37:c8:2f:58:eb:
1f:8f:f9:38:f1:9b:5a:5e:4b:e2:40:2b:a4:c8:55:a9:59:4e:
21:f0:d5:4b:85:19:26:b4:e4:c2:6b:e1:8f:1f:b9:d7:96:2a:
2a:54:09:59:0d:9b:1a:9c:c1:33:90:47:6c:8e:88:60:eb:b6:
aa:07:97:78:52:fd:9a:1c:3a:50:46:7c:a8:86:e0:6a:b0:37:
07:2a:10:ce:e7:dd:2b:ad:b2:08:a3:b3:d1:bb:20:f5:6a:0e:
f0:42:71:d0:1e:b6:a2:35:ba:42:45:9c:31:27:28:32:13:9b:
e4:a0:84:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:17 2025 by rpki-client