Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
File: vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft (raw, json)
Hash identifier: S0YrqAqdfiBn6FAWsQvt1hYxMRMojZ0ijEmdrayM3HI=
Subject key identifier: FB:72:C4:6E:46:65:F2:98:40:60:43:01:6E:99:83:F9:82:48:7F:43
Authority key identifier: BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9
Certificate issuer: /CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
Certificate serial: 019A0222B02E8532975B0F89F7913EC9BA0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
Manifest number: 03B3
Signing time: Mon 20 Oct 2025 15:00:19 +0000
Manifest this update: Mon 20 Oct 2025 15:00:19 +0000
Manifest next update: Tue 21 Oct 2025 15:00:19 +0000
Files and hashes: 1: AFVAjCiROQ32Z_efvRaORNpa2fQ.roa (hash: STiLszZIpw1MlrUzOI5Ii3ZfZdoAbfQenvPasDTHJCA=)
2: vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl (hash: f6gq/DE+d3jMGOf1d/qrcqFlaq/UDuOFtlHBMt3XQvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:b0:2e:85:32:97:5b:0f:89:f7:91:3e:c9:ba:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
Validity
Not Before: Oct 20 15:00:19 2025 GMT
Not After : Oct 21 15:00:19 2025 GMT
Subject: CN=fb72c46e4665f298406043016e9983f982487f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:68:53:da:31:72:d4:c1:3d:96:a2:e7:87:ae:
ca:d2:a9:07:c9:83:10:47:5b:9e:52:d5:ff:35:06:
4a:82:f8:80:b4:9f:bb:15:5d:d3:3b:fd:b8:19:fc:
38:18:c4:80:e3:fb:cf:c8:b2:41:3b:bb:69:99:d8:
21:24:35:7d:bf:5e:c7:91:dc:50:19:08:82:c3:be:
51:2e:8a:52:7b:4c:b9:dd:e6:af:f5:32:ca:94:e3:
28:a6:35:7a:de:2e:1a:a8:95:f2:b4:d7:02:87:ee:
a8:c0:61:34:45:d9:53:9d:bc:76:81:70:a0:fc:b0:
d8:47:63:b3:0e:41:e0:26:d5:d0:3b:62:b5:32:db:
a9:27:d3:85:71:52:60:c4:37:39:a6:ec:1e:62:72:
1c:81:31:f2:df:52:85:c2:7c:58:9a:b5:7b:e9:f6:
dd:95:13:c4:0e:57:44:d6:9a:df:d2:eb:c5:c4:21:
af:38:df:68:2e:df:ec:e2:40:17:e0:0a:93:79:da:
6f:17:be:c9:36:8e:0b:02:e4:f4:2e:11:5d:27:88:
58:f7:75:a7:d8:7d:b7:8e:68:49:d7:97:de:0d:ea:
48:e0:33:c0:94:e0:32:40:b1:51:d9:0c:e6:4b:64:
b5:03:31:2f:2a:59:e9:27:55:f4:ed:25:92:cf:cc:
f8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:72:C4:6E:46:65:F2:98:40:60:43:01:6E:99:83:F9:82:48:7F:43
X509v3 Authority Key Identifier:
keyid:BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7d:82:cb:67:46:4c:ab:5e:2b:e4:94:55:f2:d8:37:84:c9:
d6:8f:09:4d:d6:ff:fa:0b:8e:72:7f:99:47:f5:ce:5b:0e:4e:
26:a5:2d:19:21:41:ed:76:65:65:db:1a:28:76:ef:55:ad:d0:
ce:c4:c7:a2:89:3f:c6:41:76:36:75:7a:24:f5:19:1e:4c:39:
4f:d7:a3:bd:d8:84:9d:fa:2b:7a:76:0a:d0:66:ed:50:e7:93:
f2:d6:6b:56:26:17:88:6e:1c:47:3f:18:71:81:f6:5f:26:9a:
2e:c9:1a:54:73:1c:b4:bc:f0:88:21:ef:34:12:0e:ea:d5:7b:
c9:cc:40:e8:7e:a8:09:ed:86:69:33:44:67:0d:4f:9e:e7:b1:
1c:d7:06:11:cc:76:8b:66:10:27:c3:1e:f7:c6:b6:2e:2e:35:
1a:41:59:8b:b7:4a:56:d6:8f:84:d2:bc:26:d2:90:eb:ba:b6:
84:a1:62:20:9b:d6:17:19:89:df:78:8f:09:6c:18:62:b1:5c:
86:fd:44:d9:c3:16:5f:aa:27:f1:92:fb:c2:30:51:5a:12:5b:
95:1b:fc:63:17:e7:95:eb:d1:e4:99:d5:8a:0d:44:3b:fb:b4:
e2:e1:82:cb:63:74:3b:f4:6d:59:c5:cd:24:c0:78:23:60:88:
3d:9f:43:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:07:47 2025 by rpki-client