Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
File: dv4wVehykAAOMof3q1iDgCpapto.mft (raw, json)
Hash identifier: YSDhPYxHy01m/WE+8dEO1pgSVkh29sAFuFB0gWnvgYQ=
Subject key identifier: F8:13:08:A9:42:75:B6:FD:36:89:4D:51:8D:BA:54:57:3D:D2:CF:EE
Authority key identifier: 76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
Certificate issuer: /CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Certificate serial: 0199FBEB4E1BC0E5CEC729A5C01347BA5D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
Manifest number: 0A09
Signing time: Sun 19 Oct 2025 10:02:06 +0000
Manifest this update: Sun 19 Oct 2025 10:02:06 +0000
Manifest next update: Mon 20 Oct 2025 10:02:06 +0000
Files and hashes: 1: 8nt8dsbMeiqtSt6KoDNGgs5pyTM.roa (hash: RvFtibhd8tSawl3iSjZ76rX4z9HhG8SM7MwleTD5nY0=)
2: dv4wVehykAAOMof3q1iDgCpapto.crl (hash: oLSrsSdMSN7W9MwK0yxA6IyeJZdKZdFTEws0yfA4Lrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:4e:1b:c0:e5:ce:c7:29:a5:c0:13:47:ba:5d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Validity
Not Before: Oct 19 10:02:06 2025 GMT
Not After : Oct 20 10:02:06 2025 GMT
Subject: CN=f81308a94275b6fd36894d518dba54573dd2cfee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c0:41:0c:3e:67:ff:4f:7b:03:67:cf:62:ae:
cd:76:55:34:a1:28:86:7f:1f:ce:8f:96:65:b3:c1:
e2:b9:4b:8d:30:05:d5:74:e6:bf:15:29:ab:3f:f5:
63:9b:5c:04:b2:28:95:4a:3c:e1:5a:61:b1:61:a7:
91:11:38:50:bf:f7:79:c1:7c:18:31:03:64:65:6d:
1b:96:3f:e8:65:cc:3f:a0:2d:b8:4e:d0:8e:5f:e7:
84:f5:3b:db:d7:d5:d9:b7:9e:5b:72:4d:23:14:30:
01:a0:34:b1:75:51:99:ae:90:cd:8b:31:62:84:a5:
99:3c:88:a3:ad:fa:2d:c7:0b:7f:ae:49:23:bc:9e:
b9:df:8f:77:7c:2e:d0:33:c0:8c:2c:2d:83:ba:b9:
38:7d:5c:1c:b2:4e:5e:56:5e:48:61:cf:6a:75:6b:
30:c9:32:f2:36:73:1b:0a:55:22:4d:71:0b:c4:12:
07:ab:21:99:a7:f8:bb:ae:9e:87:35:26:a8:2f:8b:
4e:17:73:be:5d:32:de:6f:54:a9:e9:ce:c2:8a:70:
a5:a2:7d:11:50:66:7e:06:dd:7e:27:75:1c:66:d7:
8f:89:ca:92:ad:a4:5f:0e:49:44:33:05:04:33:45:
94:12:74:fa:c9:49:fa:6f:16:53:e8:47:a8:cd:6e:
d1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:13:08:A9:42:75:B6:FD:36:89:4D:51:8D:BA:54:57:3D:D2:CF:EE
X509v3 Authority Key Identifier:
keyid:76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:39:72:28:ba:7b:a2:08:23:1a:a5:be:6f:7b:de:cd:31:33:
e8:b4:21:3e:76:4c:5f:95:ff:b0:93:48:e2:37:1e:f4:8a:af:
ba:1a:1d:9b:1e:95:d0:bc:89:dd:85:7f:a8:21:7c:fc:c0:f0:
45:8b:be:6e:d6:1a:d3:01:5e:99:a9:67:8f:d6:5f:b6:66:0f:
b8:d5:42:6e:62:44:ff:71:62:aa:0e:3d:2e:b8:f6:7b:5c:56:
72:66:53:0f:59:19:0c:11:8f:f6:a0:d8:63:c2:3b:0e:7e:34:
6a:38:59:a8:ee:d0:0b:ce:3a:51:8d:95:5e:fc:6d:9e:26:17:
c2:c5:6c:b0:38:11:9c:b3:d1:e1:15:89:71:00:6d:8a:ae:a8:
3a:94:ad:b9:71:6e:b9:9f:6c:79:69:ea:8c:de:a5:e5:5d:8f:
fb:46:7a:1b:6a:ba:93:16:c0:c8:05:15:99:46:4b:a8:c3:49:
25:ca:f8:77:34:81:ad:6f:01:70:75:7d:92:a9:fc:2d:d1:c5:
6b:45:4a:c1:70:25:79:de:23:fe:e0:bc:e4:55:6e:a4:44:03:
25:b6:07:22:80:9b:0f:a3:e8:7a:89:2e:f9:b7:7a:40:e5:c9:
ce:9d:9e:b7:31:85:f7:ee:b2:f4:0f:4b:59:d5:36:69:75:f9:
ff:e8:4a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:51 2025 by rpki-client