Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
File: vJ7I21lyYHXuKfXvyQth5zwH968.mft (raw, json)
Hash identifier: hH+RwI1yI/fpxlp+uhlRdSe0Eko1nGfy5N/FPgr4qS8=
Subject key identifier: 83:11:3D:BC:38:BE:78:C2:05:7C:3F:45:71:04:E1:73:43:2B:43:B4
Authority key identifier: BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
Certificate issuer: /CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Certificate serial: 0199FDDA1025862DE19786375B2AF2370D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
Manifest number: 0C2F
Signing time: Sun 19 Oct 2025 19:02:30 +0000
Manifest this update: Sun 19 Oct 2025 19:02:30 +0000
Manifest next update: Mon 20 Oct 2025 19:02:30 +0000
Files and hashes: 1: vJ7I21lyYHXuKfXvyQth5zwH968.crl (hash: 4ZWcBv9ogelOqXHYF0Gm1huF5mFUf2zvXv/WirTm5Y4=)
2: vsYS1yNC27K4go1u55pkiDiNTso.roa (hash: VwZn+ljb2itH/kH3n3gJQ8cRZDUKa5y/b7TBam8fThU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:10:25:86:2d:e1:97:86:37:5b:2a:f2:37:0d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Validity
Not Before: Oct 19 19:02:30 2025 GMT
Not After : Oct 20 19:02:30 2025 GMT
Subject: CN=83113dbc38be78c2057c3f457104e173432b43b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:77:f4:7a:1a:0c:b9:dc:96:43:d5:10:db:0b:
0c:8a:49:fc:66:fd:40:e3:f5:e7:37:6c:26:82:3d:
58:c3:50:e2:50:0b:2f:2c:b3:2e:30:e3:81:3a:48:
90:e7:85:10:f5:d7:29:7c:ac:b2:62:f8:a2:c8:13:
c1:71:7d:73:d2:1d:f9:d9:a1:5f:d8:60:d5:3d:ca:
49:4d:a0:96:d3:b5:7e:ce:e8:42:e4:f4:d9:4c:b5:
d9:35:cc:d5:d2:70:9f:fc:5a:f2:86:59:5c:f3:bb:
73:b4:2f:d6:87:61:f8:5c:2f:b1:65:37:3a:ea:6f:
e0:6a:e4:03:16:ef:5a:28:1b:72:62:3c:e1:7e:7c:
1c:e1:f7:f2:ed:e7:fe:92:78:a5:35:4d:aa:e9:12:
43:c5:ce:bb:6b:b4:ff:c3:0d:2d:d7:be:57:ef:3b:
dc:03:3e:07:73:be:72:62:44:bc:01:f3:95:88:9c:
cd:e2:ac:8d:a0:17:8f:a7:90:b9:23:0a:99:18:0a:
d2:20:53:4a:67:85:95:d3:b1:ae:e5:ff:3d:32:6d:
41:30:ef:69:14:d9:cf:ef:dd:67:62:23:cb:74:cc:
2a:91:d3:93:af:d1:75:00:96:38:55:f9:f0:06:ec:
66:f7:25:65:8b:f6:33:f3:a4:68:40:32:3d:d9:52:
2d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:11:3D:BC:38:BE:78:C2:05:7C:3F:45:71:04:E1:73:43:2B:43:B4
X509v3 Authority Key Identifier:
keyid:BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ca:b8:e6:c3:50:08:26:94:12:50:da:86:63:f9:50:50:5a:
e3:6e:d0:c9:f2:42:65:8b:87:34:0f:ed:3b:16:4e:ea:56:f0:
6b:48:7f:08:06:b7:65:9f:f7:7e:26:f4:01:38:16:52:bc:98:
ab:f4:b5:45:f0:a4:d1:c4:79:f1:e5:3e:64:3d:41:36:7f:1f:
38:18:d5:15:f8:4a:69:9d:8e:31:69:d8:4c:ee:ab:13:a3:70:
7c:42:8f:0c:f9:bb:e4:80:77:ad:82:a9:14:dd:4f:cf:dd:08:
c6:51:0d:c5:e3:af:43:2b:ec:f3:76:9f:55:3a:17:a5:6c:12:
59:6a:60:7e:08:99:5f:62:07:d3:10:b3:e8:33:40:aa:1f:8a:
01:d6:35:f3:4b:2f:8c:c9:9d:8a:c8:72:99:ef:08:09:7f:2a:
af:0b:26:6a:06:84:52:a7:e4:4d:de:6e:ec:52:0a:03:ae:57:
c5:be:83:c4:3b:bc:c9:b5:28:ef:4e:e3:e8:43:57:94:15:2b:
13:fc:9d:ea:d6:82:9e:51:b9:6c:30:aa:49:89:df:a6:1c:a5:
64:a6:15:b9:86:f5:95:34:22:ba:1c:55:72:2a:2c:fb:1a:98:
44:7c:66:e3:c5:a6:24:2c:23:2e:ee:4f:31:1f:84:74:e1:54:
14:72:fc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:16 2025 by rpki-client