Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
File: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft (raw, json)
Hash identifier: C5AQp8tBFfRrnYu4YwXYhAPs7Pf1TOdqqQl3rhkkBZc=
Subject key identifier: 8C:B6:7A:CF:AF:DF:B2:A5:0E:86:7F:52:A3:6B:19:0C:87:92:57:9C
Authority key identifier: BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
Certificate issuer: /CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Certificate serial: 019A4E86E01BA4CBA3E410403D7E155E42D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 11:00:53 +0000
Manifest this update: Tue 04 Nov 2025 11:00:53 +0000
Manifest next update: Wed 05 Nov 2025 11:00:53 +0000
Files and hashes: 1: qBn6ockm6JSiEH-8udw_bpsms9g.roa (hash: nCADL7lFGk+Q6O3ajQCgcYhE2O5JRszPFiBp0Ov4f98=)
2: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl (hash: NHlNxM52AVmKUyEnpE1TAD5Fw96HLAxP5hBv8V+BEDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:e0:1b:a4:cb:a3:e4:10:40:3d:7e:15:5e:42:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Validity
Not Before: Nov 4 11:00:53 2025 GMT
Not After : Nov 5 11:00:53 2025 GMT
Subject: CN=8cb67acfafdfb2a50e867f52a36b190c8792579c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:36:6d:76:78:68:23:32:89:4f:e8:a9:83:a5:
99:a6:41:e0:86:95:01:6f:ba:6f:5c:44:a5:e3:9f:
45:60:41:54:2c:f0:13:ca:4d:5e:0a:e4:1f:ad:c4:
64:22:b1:29:2a:19:a5:65:ee:f9:f0:72:f4:46:39:
63:0c:fc:80:72:b7:6b:e3:63:5a:39:7d:5a:98:08:
3e:d9:ca:da:38:22:2e:69:91:0a:9c:43:a2:a6:e1:
37:0d:b6:28:e2:76:a7:6c:41:6e:8a:c8:f8:a8:e7:
8e:94:fa:cc:30:67:80:cf:36:15:b2:5e:cc:88:3d:
d7:cc:49:24:80:46:90:98:66:6f:6d:89:71:95:f0:
89:d3:e4:57:9a:a5:b3:de:a2:44:26:66:17:fc:00:
6a:27:90:5d:52:2f:1c:db:0d:f1:fc:57:e3:b5:1b:
37:97:6a:b7:15:29:34:de:c0:8f:79:cc:f2:2f:d1:
ca:51:a3:8c:31:f1:e4:87:58:98:55:86:8a:49:7a:
d4:fc:7c:f8:29:31:6a:0c:92:56:77:54:1e:34:bf:
9d:68:00:a8:95:e8:45:ba:6a:a0:a4:a4:66:c1:76:
ff:6a:95:db:e5:5b:c6:a8:12:1a:74:2f:79:6a:44:
18:15:e1:c3:ae:66:49:07:c6:7e:6d:63:fc:cb:54:
c0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B6:7A:CF:AF:DF:B2:A5:0E:86:7F:52:A3:6B:19:0C:87:92:57:9C
X509v3 Authority Key Identifier:
keyid:BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e7:c6:17:88:dc:fb:b7:72:ef:62:3a:f1:64:fd:af:66:3e:
f7:63:48:5b:77:a4:05:d8:06:28:c0:b8:3c:f7:20:3a:3c:e7:
2e:b5:d1:98:6e:2f:c2:05:cd:1f:1b:a5:67:31:1d:d1:5f:89:
97:a5:da:c9:e1:52:be:9f:68:c3:c7:25:9e:ef:ba:28:c7:ba:
a6:8a:ea:1d:cd:f9:56:f4:72:f9:bb:30:09:7b:47:9a:60:33:
93:7c:47:53:9e:05:4b:77:a2:b4:00:20:00:6c:53:ea:e7:97:
3d:12:88:15:31:ba:92:7a:39:9d:d5:83:cb:ef:53:c4:c7:fb:
0a:3b:09:f3:c8:ef:e6:09:9a:54:e6:d0:48:b8:df:e4:be:19:
b4:45:64:d7:e6:3d:0a:05:5c:d2:7b:f8:2d:83:39:0d:be:07:
fa:fb:27:5b:78:58:63:75:37:cc:b7:f0:33:f7:a5:6e:c0:a6:
39:6e:b0:ee:d8:6d:06:e0:b9:d2:8d:c1:99:13:ff:fc:27:5d:
45:db:b0:97:e4:87:20:24:b5:d1:da:5a:c7:90:a3:33:e7:fd:
b7:f2:85:23:ee:c7:ac:53:52:68:ed:50:c2:a1:cc:c9:f2:2f:
0a:d3:06:b0:32:e9:31:ee:e0:92:10:2b:c7:d7:fe:4f:6b:d5:
35:d2:aa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:33 2025 by rpki-client