Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
File: vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft (raw, json)
Hash identifier: ak87sv+b+h/g94AtWDWzRIwLxtEyVG20gz9m/jr9srU=
Subject key identifier: 42:01:68:1D:E2:09:C2:65:D5:19:65:4E:A7:29:5C:73:07:B4:58:C0
Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Certificate serial: 019A4D745475E88F06E64BD7E77B83A3A6D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 06:01:00 +0000
Manifest this update: Tue 04 Nov 2025 06:01:00 +0000
Manifest next update: Wed 05 Nov 2025 06:01:00 +0000
Files and hashes: 1: 2_V6lJnSbHp-dXL7YMoo09f6snw.roa (hash: OhjwpaD5BnWeaMwPzsn2/JlXIUwI6tpxdz7vTY63lGM=)
2: vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl (hash: CT7/fmehfC05+WjqCUaU4PLUwaG/tsptiZjFS+HeoMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:54:75:e8:8f:06:e6:4b:d7:e7:7b:83:a3:a6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Validity
Not Before: Nov 4 06:01:00 2025 GMT
Not After : Nov 5 06:01:00 2025 GMT
Subject: CN=4201681de209c265d519654ea7295c7307b458c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:fe:da:3a:90:6e:66:3b:81:10:18:a0:90:
6a:62:4d:3a:29:09:5a:92:ca:23:07:5c:eb:19:0e:
37:9c:a7:d5:93:d6:b6:75:7a:c6:2f:35:f8:06:9c:
af:14:7b:e1:b8:7a:64:ee:34:30:6a:0f:17:d8:89:
ca:d0:f6:14:23:38:23:11:24:3a:6f:ab:6a:a8:ee:
9e:af:9c:15:06:ea:4c:75:58:d8:ed:45:93:ab:99:
bc:a7:ce:09:3b:97:82:e8:47:b9:95:d8:a1:7c:96:
0e:56:b4:cd:31:c2:0d:b8:e7:12:7b:e4:33:af:1a:
b7:4e:d2:f7:5f:3a:9a:7b:a5:fd:20:9e:e9:d6:d4:
98:30:86:3e:72:6d:8e:96:68:6b:e2:3d:f2:7b:07:
c0:32:7f:02:5f:b4:0d:b9:80:03:99:ea:49:fa:f1:
42:be:d6:c8:dd:2f:16:8e:b0:15:17:b6:72:28:a3:
1b:f3:0d:ca:b9:53:98:26:28:f3:5a:ab:18:76:63:
87:00:ff:78:b3:67:63:78:5c:0d:8e:63:7a:de:fe:
d0:43:2c:c6:5f:e4:4d:0b:2b:1c:69:6c:ca:47:a3:
37:b1:e9:9d:54:b5:eb:e1:6c:83:72:aa:65:6e:57:
50:c5:e7:c2:e9:cf:b0:f7:77:dc:40:d3:c0:02:a6:
bf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:01:68:1D:E2:09:C2:65:D5:19:65:4E:A7:29:5C:73:07:B4:58:C0
X509v3 Authority Key Identifier:
keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:51:81:dd:b7:6e:74:bf:31:ab:24:58:b9:57:00:c5:71:1a:
d2:bd:8d:da:d2:69:3b:5b:af:f2:b9:7f:1d:6b:e6:58:e7:9b:
8e:63:ea:42:ef:7b:3e:27:f9:94:b0:a9:ab:ef:e6:db:00:da:
4a:40:7c:4f:96:a4:92:4b:48:ea:6b:c3:6e:37:b6:ff:cf:de:
e9:b6:7c:2d:5c:22:f0:92:b8:07:ed:0c:db:53:bf:09:f6:da:
1c:9a:2a:4e:db:12:ab:83:7f:76:fb:c6:fe:67:da:5f:24:70:
85:dd:9a:c1:0b:25:ed:52:ba:c0:6c:47:19:cc:ee:e8:08:4d:
0a:26:c2:da:f0:b1:3b:40:e0:cc:27:b3:6d:da:ff:88:53:86:
85:76:6d:03:d2:b1:3d:8b:fe:3c:fc:d6:e0:97:db:dd:3f:db:
9a:f3:26:62:62:08:a9:dc:cc:a6:13:cf:be:32:18:82:a4:33:
62:4f:5d:dc:ab:83:55:a3:b2:93:57:22:5e:97:33:63:11:14:
c7:10:26:7f:8d:8b:9c:a9:1e:5f:55:2c:1b:f2:ee:b5:37:ab:
8d:3e:9c:32:3e:c7:dd:4b:64:ae:af:7f:44:40:3b:35:72:47:
24:b9:c6:4b:c8:c9:79:50:d6:3c:86:d3:0c:bf:a9:d0:03:29:
a6:63:f3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:09 2025 by rpki-client