Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
File: vR211yi9J2tMdS4SWlCP-HhK0oU.mft (raw, json)
Hash identifier: jVt49e4hwmvtOYZI1MYRh14CzqjZlGgzkRrfJLWQcqI=
Subject key identifier: 00:C3:2A:B7:EB:16:77:23:50:97:A7:23:4B:BC:F2:CC:E6:12:CB:E3
Authority key identifier: BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
Certificate issuer: /CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Certificate serial: 0199FBEC73C0C5D41C18FE8FD2BEAF057559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
Manifest number: 1288
Signing time: Sun 19 Oct 2025 10:03:21 +0000
Manifest this update: Sun 19 Oct 2025 10:03:21 +0000
Manifest next update: Mon 20 Oct 2025 10:03:21 +0000
Files and hashes: 1: 7IfWcJSratNnlfLMrnbIuQWgR8I.roa (hash: S2czlmmJLkq2AObWA1vCv3NtLmwVMJ2FnTs6ITj1XcQ=)
2: vR211yi9J2tMdS4SWlCP-HhK0oU.crl (hash: Zghh6mISWVjn/GR6UmIetzyDyQdJ0mYumlOZUQsLryQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:73:c0:c5:d4:1c:18:fe:8f:d2:be:af:05:75:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Validity
Not Before: Oct 19 10:03:21 2025 GMT
Not After : Oct 20 10:03:21 2025 GMT
Subject: CN=00c32ab7eb1677235097a7234bbcf2cce612cbe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e4:56:58:f2:1c:36:5d:d0:ab:3e:32:4b:6d:
0b:92:52:ef:1c:c4:b5:77:10:ac:df:08:7d:d7:4f:
ba:ba:95:e1:4c:e8:21:ea:b9:04:e4:93:69:45:9e:
e0:97:20:27:49:fc:9f:98:4b:4a:6b:31:4e:40:57:
60:5f:94:1f:42:0c:b6:96:9e:79:b0:cd:04:1e:4b:
45:6e:5e:9e:21:3d:c8:11:3a:04:92:d1:57:ba:82:
aa:60:2a:ff:70:ac:f8:6b:11:3c:66:2e:e5:fb:fb:
03:e5:33:02:fa:78:de:d4:78:7a:16:02:1a:95:5a:
c0:e7:2e:ac:0c:fd:f2:94:ef:15:92:f7:ee:8e:41:
5a:83:88:17:48:f2:21:b6:88:50:63:4e:69:e2:ca:
5f:54:f7:0f:80:16:d1:34:df:f2:f8:92:84:10:1a:
0b:cc:95:4b:09:88:5f:77:68:30:c9:df:6d:48:ba:
06:02:60:1f:45:90:52:df:17:c9:a7:cb:c7:40:bf:
13:e9:06:f8:f8:cb:17:be:20:71:65:a6:3e:4f:72:
ad:c4:c9:0c:ae:45:42:60:55:07:da:70:e9:b6:f9:
3f:03:f9:c2:e6:ca:d8:1e:ab:ba:1f:5d:7c:e2:37:
29:1a:99:1e:66:33:75:9b:af:4e:98:81:2d:54:4d:
44:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C3:2A:B7:EB:16:77:23:50:97:A7:23:4B:BC:F2:CC:E6:12:CB:E3
X509v3 Authority Key Identifier:
keyid:BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:3e:6f:5c:82:58:cc:9c:10:ce:fe:95:8f:e1:0b:f7:ff:c6:
4b:e2:9e:13:ec:4a:c1:5e:c2:6b:75:68:c5:bb:5d:ba:67:3f:
50:29:35:92:cc:b9:b8:4c:f6:be:4f:08:10:cb:64:3b:15:fc:
c3:4c:6c:ae:fd:82:fd:9f:0f:41:5e:58:d8:6a:9a:ad:04:12:
d1:1a:ad:1d:83:77:32:77:dc:45:41:b0:7a:d7:65:00:7f:6c:
ca:77:9a:a3:fb:51:0f:97:0e:52:4e:ca:67:4f:ce:6e:fb:45:
53:6b:76:36:75:32:5c:87:40:fd:3b:33:aa:ff:d1:3b:14:54:
b9:8c:fa:47:c8:1f:fb:8b:ec:b6:53:ea:05:72:86:7a:ff:28:
d4:d4:05:e6:dc:79:c1:91:13:c4:2f:49:5b:cf:da:0b:32:e7:
b2:70:64:30:cd:f4:fd:8b:ae:e8:41:b0:53:48:f2:95:63:0a:
06:64:5b:f6:d6:6c:9b:44:77:09:b7:33:6b:09:8e:46:e9:c1:
e6:33:51:67:20:99:a8:01:c4:72:88:37:31:cf:59:9b:37:58:
fb:21:f6:6e:bc:a2:15:14:fc:9f:33:ff:f8:95:6b:e3:41:89:
2a:90:1c:45:32:ea:e5:12:5f:12:fc:29:65:ef:1f:a5:cd:41:
f4:7d:98:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:04 2025 by rpki-client