Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
File: vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft (raw, json)
Hash identifier: 1whj4jGilcBUmgadmprXtYbPk+tdPT7cXu2oRyXvnXQ=
Subject key identifier: 08:A5:69:2C:9A:7C:73:C1:11:47:BA:FF:67:F0:11:A6:60:26:2F:CB
Authority key identifier: BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
Certificate issuer: /CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
Certificate serial: 0199FB45935982B575D420085A0091CAB13B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
Manifest number: 1672
Signing time: Sun 19 Oct 2025 07:01:04 +0000
Manifest this update: Sun 19 Oct 2025 07:01:04 +0000
Manifest next update: Mon 20 Oct 2025 07:01:04 +0000
Files and hashes: 1: T6mhvGgjsjqSjSFXAxAChHn88ic.roa (hash: FPbExUKvK5N7b1i2EWlflqO6OJIjL5/osRySrLfPqFk=)
2: vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl (hash: /r4vzk2Lzi0Uz1jMvdsFmRN+drN+6ZyyXXL1vshmpCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:93:59:82:b5:75:d4:20:08:5a:00:91:ca:b1:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
Validity
Not Before: Oct 19 07:01:04 2025 GMT
Not After : Oct 20 07:01:04 2025 GMT
Subject: CN=08a5692c9a7c73c11147baff67f011a660262fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fd:c1:19:83:ff:fc:4f:18:90:fe:83:04:03:
c0:a6:6c:d1:05:cf:ff:91:fc:5a:b9:8c:d5:b6:dd:
eb:d7:c1:d8:ca:eb:7b:cd:7b:cb:81:8a:58:7d:3d:
ed:35:4d:4e:a4:5f:ae:af:50:c7:00:5c:29:0e:45:
b0:e2:09:f4:07:90:37:7f:39:08:86:b7:5a:73:d4:
b4:f2:87:8c:45:49:82:fe:cb:fa:6d:53:13:27:17:
d5:08:ba:bd:13:4a:24:7d:a6:de:a0:db:9b:ee:4b:
3c:79:2d:15:c6:df:c7:b4:db:73:b4:b6:e8:2b:52:
bb:e6:25:35:24:12:39:e0:24:ae:21:56:05:b3:fc:
45:01:2f:14:fc:c4:ca:92:4f:03:fa:37:97:bd:88:
1e:7c:c2:14:dd:bb:3a:00:2a:6a:43:8d:b5:87:cf:
06:5b:8f:85:f7:49:e4:95:0d:1f:df:2f:37:b3:16:
fe:94:d6:3c:86:89:51:6e:39:93:9b:a0:b1:02:4f:
4e:af:2e:2b:c0:70:b7:68:d7:62:2a:ab:c9:69:2f:
06:3b:85:45:63:49:a9:8a:e6:76:51:88:fa:66:f0:
22:69:a5:a1:b5:14:82:21:de:23:58:ac:bd:55:4b:
c2:d9:10:81:e7:db:a4:fb:9d:ca:c2:76:b8:00:86:
d1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A5:69:2C:9A:7C:73:C1:11:47:BA:FF:67:F0:11:A6:60:26:2F:CB
X509v3 Authority Key Identifier:
keyid:BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0e:6c:a7:f1:84:9c:7a:44:2b:25:e0:55:16:c7:9d:a9:bc:
12:b3:d1:97:1a:1e:da:d3:15:06:61:9e:47:2e:78:03:c9:a7:
f3:a0:21:a8:04:ed:37:f0:b2:ee:2f:1a:58:85:11:83:8f:68:
a8:0a:05:b6:1e:0a:e4:a9:13:40:32:48:fa:6d:7e:da:7c:6f:
46:62:13:b9:a5:76:73:59:a2:c4:64:88:c8:21:df:8c:0a:0f:
f7:16:3c:bc:df:1a:28:82:61:ce:bc:53:c8:df:9a:ca:1a:b0:
e0:e3:2b:e3:b2:26:ee:fa:a2:e8:0e:23:09:bc:a0:ff:a9:8d:
4b:dd:fe:7d:98:00:17:68:43:87:92:25:4e:56:aa:bb:16:fb:
68:c0:fd:da:11:41:ae:ca:ce:5f:49:09:97:d1:af:32:f0:a4:
26:76:c9:81:81:bd:66:f2:91:87:f0:fa:04:1d:c4:d2:01:4d:
84:a3:5b:a4:13:e9:d0:e4:c7:d6:9b:0f:85:c8:55:46:3a:ce:
fe:9a:b1:fa:f5:5b:ef:78:2c:92:ac:e2:0b:bf:fb:82:9c:55:
b2:e4:41:6f:c3:e4:f0:b1:0a:a3:b1:d1:0d:cb:5d:c0:16:a4:
58:32:0e:1b:ce:54:bb:d2:bf:11:81:df:9e:92:5c:4d:08:9f:
a9:78:81:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:25 2025 by rpki-client