Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
File: vFbbeW3vDb20x48kRavswVcKb9k.mft (raw, json)
Hash identifier: 6h6XuXL7MdrFhSjSohcqUtYWXdeAKSrWT6sAwRHH/2E=
Subject key identifier: D4:F7:BA:B9:D9:88:AA:FB:0E:A8:B9:86:0D:F9:39:1F:9D:3E:7B:E7
Authority key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
Certificate issuer: /CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Certificate serial: 019A51879B3D4B8B4FED0E4EAA327D6E01FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 01:00:32 +0000
Manifest this update: Wed 05 Nov 2025 01:00:32 +0000
Manifest next update: Thu 06 Nov 2025 01:00:32 +0000
Files and hashes: 1: In0Jw5JnZ3csEpEbMyZKw9CZJLc.roa (hash: BQTqQKqx4zlJm4JxcLJcv6hnVItXcaWcLAa74Tq6oYo=)
2: NapDO-qA7UAI5E6E7u_3VLwwM-s.roa (hash: iMhIICohdfOIKJztiTyPfcGxnS6EMr6CVn/3WJubO/g=)
3: ogHgQyaDJwRla-L-NRcofE85Dtc.roa (hash: Am1SCJNRHKVY/nX1SY991hSY0JScSD8ppmyuS/bIXqY=)
4: vFbbeW3vDb20x48kRavswVcKb9k.crl (hash: uvaNf09iXWNjRzRuW3Sl45e6rWLq8RXU30OvGx6WJmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:9b:3d:4b:8b:4f:ed:0e:4e:aa:32:7d:6e:01:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Validity
Not Before: Nov 5 01:00:32 2025 GMT
Not After : Nov 6 01:00:32 2025 GMT
Subject: CN=d4f7bab9d988aafb0ea8b9860df9391f9d3e7be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3c:ea:0a:03:12:ec:56:28:08:3f:8f:05:37:
14:26:9b:2b:84:0c:20:ef:6b:4d:6b:36:bf:e7:ed:
cc:27:f9:07:44:a3:e8:c9:39:99:4c:fb:e7:4f:f7:
7c:4e:05:cc:13:67:be:ad:a6:eb:46:c7:ea:7e:ed:
f4:76:b2:e7:e1:e6:b3:3f:f6:6b:29:c6:f8:66:a9:
d0:32:26:e6:19:60:47:82:06:21:37:ea:0e:bd:4a:
50:80:d4:22:9c:81:a1:2b:79:cd:d3:3f:64:d6:83:
e6:51:79:65:9b:bc:4b:ec:01:fa:2d:0b:33:2c:e1:
bc:78:22:5c:7d:ed:14:b0:25:8a:df:38:de:f8:50:
4a:d8:33:e6:4c:02:61:b6:99:94:c1:77:cf:bf:99:
bb:67:2e:91:28:d5:f4:77:69:16:c9:a9:72:f1:57:
b7:45:92:f6:b0:2d:6b:d6:5f:af:4e:67:f7:4c:d3:
c0:bf:17:54:04:e1:4a:1b:09:a4:92:9c:44:9a:44:
e3:85:9a:0b:19:88:b1:64:e7:de:23:81:ba:6a:bf:
d1:3b:cc:7d:35:19:9e:db:1a:07:b3:9b:b3:1a:6e:
e0:23:0d:e8:76:09:47:cf:bd:16:40:58:4c:bd:07:
da:dc:0e:a0:22:03:01:ff:10:83:cf:80:20:49:39:
be:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F7:BA:B9:D9:88:AA:FB:0E:A8:B9:86:0D:F9:39:1F:9D:3E:7B:E7
X509v3 Authority Key Identifier:
keyid:BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d4:96:a6:ab:1d:c0:df:0c:cc:7e:a8:b4:ae:0c:50:0f:4e:
c7:7c:22:1c:50:3a:0f:2e:e0:05:9e:9a:e1:4a:68:73:05:3a:
cb:dd:b3:88:5d:6b:79:15:98:e4:a6:f4:d6:4e:ec:79:b0:37:
c8:b6:13:f4:9a:c8:e9:25:a6:62:f8:a8:4b:05:af:c9:60:72:
ca:87:48:4d:18:c0:a8:ea:d9:2b:59:5c:1a:40:ab:b0:04:f1:
8e:f1:85:6a:44:2e:0d:5b:00:3e:05:f0:42:f9:0b:0c:b8:d5:
e7:23:60:66:4d:77:f0:89:99:71:f7:58:17:9e:9e:32:16:6c:
14:9a:c3:50:9d:ec:d7:e5:5a:ea:61:01:82:6e:d0:c4:4b:54:
27:0f:28:c2:4b:11:70:76:0f:44:be:c2:1c:31:c3:57:06:97:
bf:78:9e:9f:cc:4c:8e:fc:a3:92:c7:f6:33:fd:3b:47:bf:50:
ba:a1:25:1d:32:8a:d7:f2:e0:42:f9:f0:5e:75:0d:64:55:c4:
92:aa:e8:3f:ce:0c:c7:c5:b3:24:0c:aa:58:b6:85:94:38:b4:
d4:40:1e:a4:34:ac:fc:23:08:f1:bd:1f:54:cc:c1:90:4a:c0:
88:db:b8:ca:5c:89:8f:d5:7d:72:1e:5b:a4:09:5e:75:8e:02:
3f:fe:06:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:47:28 2025 by rpki-client