Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
File: v_9Blln1TfN4eStgLACSw1OYjsg.mft (raw, json)
Hash identifier: aC1q6UdkmQ1FFgds3T7T0Ow529V+JBXPaEx+dh4pER8=
Subject key identifier: 1D:CD:34:93:78:6D:15:34:E7:C8:1B:26:0E:D9:0C:7D:34:9A:98:B8
Authority key identifier: BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
Certificate issuer: /CN=bfff419659f54df378792b602c0092c353988ec8
Certificate serial: 0199FAA0D657AB757AF071E3E241EA94C1DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
Manifest number: 0B26
Signing time: Sun 19 Oct 2025 04:01:08 +0000
Manifest this update: Sun 19 Oct 2025 04:01:08 +0000
Manifest next update: Mon 20 Oct 2025 04:01:08 +0000
Files and hashes: 1: Pbu77IMqgBIggCHuoPCgPeA-JYI.roa (hash: MfbYLWDGe0vBfVw8/15weNnWm0f+1AXVR3Lu2ooMJ2Q=)
2: SJ31osOZq8GAkUzTcgDMle6L-Ko.roa (hash: OpBd6e9+J397K48R0gJPVRSyhgNBftdRPHKKbxpf8EI=)
3: TLegbcgI8kzdZX0LyaY_jBKsLjM.roa (hash: jfnT8EG89ibu6lVDZPQfuHKOWHv4n9hSUWRGapOkR0I=)
4: v_9Blln1TfN4eStgLACSw1OYjsg.crl (hash: +0FllY/dSq7DmCMPO4Cl4vu3lIBUXX+CZYPvp4GHygU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:d6:57:ab:75:7a:f0:71:e3:e2:41:ea:94:c1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfff419659f54df378792b602c0092c353988ec8
Validity
Not Before: Oct 19 04:01:08 2025 GMT
Not After : Oct 20 04:01:08 2025 GMT
Subject: CN=1dcd3493786d1534e7c81b260ed90c7d349a98b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:a5:0b:f9:ab:81:8c:71:80:39:3e:75:9c:
f6:e2:c1:97:c7:4f:92:60:65:79:ec:37:44:13:70:
47:c5:92:37:2d:76:c0:39:98:56:9c:f5:48:ec:cc:
50:8e:c7:55:41:21:56:29:b8:0a:1a:c5:0b:a5:19:
7e:03:d5:c3:93:1f:a7:ab:9a:13:fe:06:93:dd:97:
e5:25:d0:5c:4a:5b:a6:5a:dd:15:ba:67:63:e9:06:
e3:7d:16:2b:21:19:3c:fa:58:92:de:26:73:ae:2f:
fb:e3:9e:a1:f0:6b:ab:1e:64:44:e5:fc:4b:34:ba:
08:a1:5a:eb:eb:47:23:33:f4:15:e5:99:fd:73:7d:
b4:a9:70:f5:02:5c:72:38:41:c6:8c:28:a9:14:c6:
94:ca:13:2c:bf:28:33:56:eb:5a:a8:2a:d6:0f:09:
6f:a2:4f:73:07:db:cd:4f:99:ad:b8:fc:f3:94:3a:
a7:e3:3f:b0:61:b1:ae:95:8f:9b:16:21:9a:7e:9f:
1d:94:6c:97:3f:6a:f9:6c:2f:5b:11:73:8e:55:b1:
76:e7:6a:19:f4:dc:a8:df:21:b3:b7:bb:8d:64:b5:
0b:db:ed:10:0e:49:8c:98:ec:d0:07:b8:2c:9e:5e:
51:e9:d4:c1:fe:4a:71:4a:43:5f:38:25:91:a8:b5:
7e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CD:34:93:78:6D:15:34:E7:C8:1B:26:0E:D9:0C:7D:34:9A:98:B8
X509v3 Authority Key Identifier:
keyid:BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f0:e1:2f:2e:74:4e:d1:64:6d:1a:a9:fe:4f:ba:a1:7c:7f:
ba:11:84:82:ab:ca:8e:5a:42:fe:14:d9:8c:75:ad:a2:51:9c:
c6:26:71:28:e3:f5:4c:59:df:57:bd:d0:77:88:e5:72:19:ca:
85:8e:48:5b:c4:bc:c8:f3:9b:ce:77:72:d0:f6:e5:7a:ee:58:
78:bb:29:d8:f2:ba:de:a3:fb:16:71:ab:f9:54:60:a0:83:c3:
0d:0d:a8:4c:14:f2:1f:a2:39:de:80:c5:51:1c:1f:25:41:b3:
f2:1e:36:41:b1:5d:63:b8:fb:d7:12:2e:a6:af:3a:66:e7:6d:
f1:42:ae:84:08:f8:a3:b7:52:11:60:a5:b0:93:60:aa:71:fd:
a9:79:17:77:36:5e:ee:d1:9a:d8:8b:cd:49:71:9a:39:2e:40:
0a:1e:86:17:7d:99:17:48:5b:c0:78:0c:a9:12:0e:47:70:bd:
a7:57:7a:4f:66:cc:19:60:1a:be:52:44:dc:f4:05:32:6a:e5:
e9:94:06:6f:da:00:38:79:26:4a:6f:a9:b6:fe:d2:c9:2a:09:
e6:c2:0b:69:57:9b:85:f8:6e:b7:dd:b3:fc:4e:47:11:ec:d5:
07:60:b2:83:9f:1b:47:1e:6f:2a:39:81:c5:06:e9:96:70:b8:
b7:12:e0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:41 2025 by rpki-client