
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
File: vRkRNDImIp0gPqMmqdadT8NGxXU.mft (raw, json)
Hash identifier: h4D7mD8J2rYRMblYKTh6Zc3Ort30TtW8h1BkyH4PoIA=
Subject key identifier: B4:E5:CC:E9:83:83:43:AB:F7:E0:97:8E:C4:96:8E:75:2B:09:F0:77
Authority key identifier: BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75
Certificate issuer: /CN=bd1911343226229d203ea326a9d69d4fc346c575
Certificate serial: 0199FD3491BB033CAFE32A33F593DF5E431E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
Manifest number: 0B1C
Signing time: Sun 19 Oct 2025 16:01:44 +0000
Manifest this update: Sun 19 Oct 2025 16:01:44 +0000
Manifest next update: Mon 20 Oct 2025 16:01:44 +0000
Files and hashes: 1: 8vm_891vteHi79TbQnGkI8cOQqI.roa (hash: JfWucuJfmWPdMg2hC2g4IUg1QZRP4I3zcWXq8eNKv+E=)
2: vRkRNDImIp0gPqMmqdadT8NGxXU.crl (hash: jGeYHmXrAWD+kUZDzCd1Vn7HevrvosguSt0OwIuftkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:91:bb:03:3c:af:e3:2a:33:f5:93:df:5e:43:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd1911343226229d203ea326a9d69d4fc346c575
Validity
Not Before: Oct 19 16:01:44 2025 GMT
Not After : Oct 20 16:01:44 2025 GMT
Subject: CN=b4e5cce9838343abf7e0978ec4968e752b09f077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5a:f9:87:50:09:c7:8e:60:96:2c:c2:67:3a:
bc:0c:f6:07:af:9c:fd:ee:2f:69:5c:d2:c2:ac:c0:
0a:d8:00:fe:b8:7f:a8:a6:0a:39:da:4c:d2:8c:aa:
ef:da:96:f7:33:53:28:f6:e4:3b:3a:a9:96:7d:a2:
87:bc:eb:fb:c9:2a:79:8b:f5:84:56:65:18:f7:fe:
ff:1b:1f:62:f1:ff:87:09:f2:88:f5:d1:4d:55:07:
e1:82:91:0a:0b:b2:21:14:5f:03:d4:e9:f5:fd:67:
3e:bc:2f:c0:46:a4:41:61:10:ab:57:2a:69:cd:e1:
5d:50:13:1a:ca:51:58:e4:0e:4c:b7:dd:c0:18:62:
7c:5d:01:c5:03:e3:4a:c8:e0:d5:ce:65:60:d6:b4:
8a:b5:52:ee:1f:88:36:78:d3:63:ea:e0:6f:21:68:
56:2b:72:a0:90:45:2a:d2:46:5b:e7:49:d2:b0:c8:
49:b9:c0:3e:56:6b:8e:49:46:cb:54:f3:55:9c:cc:
82:c6:96:9f:e7:84:58:5b:d0:79:06:6b:d6:51:3b:
82:3c:66:98:28:6c:02:f1:39:09:d6:76:dd:1b:98:
68:59:99:a4:bd:be:bd:61:5b:c7:be:68:9e:e0:0d:
ae:6c:a7:da:06:04:7a:1f:ba:f5:c9:0a:11:a9:33:
79:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E5:CC:E9:83:83:43:AB:F7:E0:97:8E:C4:96:8E:75:2B:09:F0:77
X509v3 Authority Key Identifier:
keyid:BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5c:2f:b5:0b:ba:0a:26:de:8c:0c:4f:79:07:37:c5:1b:42:
f7:06:eb:7c:38:7c:f4:a7:1a:d2:3a:60:89:ed:72:26:ae:77:
95:a4:88:68:c8:a2:61:89:7a:12:7d:0a:4d:ae:bb:2a:14:cd:
fe:c9:4e:3a:04:fa:81:07:cc:22:6a:d8:f6:4d:06:8d:e4:d6:
63:eb:a5:15:12:5b:3a:1a:85:25:10:cc:b7:95:6b:e0:57:13:
67:d8:16:b9:98:dc:4c:0e:39:bc:c4:99:8c:0e:4c:04:13:83:
29:8c:d9:33:58:c1:f2:78:8f:a7:3f:e3:64:fa:92:ef:33:49:
b0:9a:33:8f:d1:51:d9:92:d5:57:7c:43:58:47:0a:24:20:06:
2e:c9:bb:48:96:83:05:7c:68:25:58:fa:63:61:f2:1e:83:cf:
6d:79:53:9d:c8:41:7b:4a:f2:78:76:ed:1f:8a:ff:df:82:b1:
f7:24:13:88:3f:6f:77:db:45:b3:2f:1c:4d:41:95:38:87:f4:
2d:c2:ff:94:b6:f6:76:a2:ed:04:f8:0b:f1:05:20:64:21:bf:
c6:c1:b2:6f:de:b8:20:86:ba:f9:ba:d9:f7:e4:b5:56:57:34:
5b:f5:d8:60:40:78:c4:44:21:f4:18:83:24:4e:c0:99:f3:a8:
7d:4f:01:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:25 2025 by rpki-client