Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
File: vAB4on8QAyY8TFYbAlB2by9Sbn0.mft (raw, json)
Hash identifier: LuD5WD0bdm5EFY6P6acbkicGB4fEYkDbSOtaZjCM64M=
Subject key identifier: 22:30:E7:6A:8C:5F:2F:A8:B0:BA:7A:46:7C:FC:13:FC:0A:8E:D8:50
Authority key identifier: BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
Certificate issuer: /CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Certificate serial: 0199FEEC00DEEBE8B19CC8061A698A31F39A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
Manifest number: 0482
Signing time: Mon 20 Oct 2025 00:01:43 +0000
Manifest this update: Mon 20 Oct 2025 00:01:43 +0000
Manifest next update: Tue 21 Oct 2025 00:01:43 +0000
Files and hashes: 1: U8RX6_Xhgd2rniYJPgiw5XhDM14.roa (hash: 2r/ZPIhIP4vgQHcp4lEFNmYb4WZmbuMJWG8eyE6HlfQ=)
2: vAB4on8QAyY8TFYbAlB2by9Sbn0.crl (hash: bCKvt5IuIPSmkD/3ZLz8IBjTW/mzN7/rlrbE1CJE5xM=)
3: vAZxSJwcgiBcI_82IoG7w0HDsHY.roa (hash: p3exCfpQFtu6+djLck5m9Ak9SIsL/faxVMijWb66KP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:00:de:eb:e8:b1:9c:c8:06:1a:69:8a:31:f3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Validity
Not Before: Oct 20 00:01:43 2025 GMT
Not After : Oct 21 00:01:43 2025 GMT
Subject: CN=2230e76a8c5f2fa8b0ba7a467cfc13fc0a8ed850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:dc:59:69:0f:5e:1e:4e:1d:d5:7d:50:13:0b:
5d:d1:4f:a1:4f:9e:4b:87:25:0f:d7:97:fe:e0:4e:
d0:6f:25:b7:6c:4e:af:65:bf:c2:63:b1:1c:0b:cb:
2a:87:de:c8:2f:69:28:e6:65:5a:1b:f2:04:3a:ef:
c5:12:aa:b3:90:ca:c7:12:80:0c:6b:7d:20:d5:c1:
c9:64:f7:0c:f3:36:63:b0:73:64:f6:cc:70:3e:97:
da:ee:64:e7:5f:72:b9:a8:be:85:ce:cb:5b:3d:0e:
00:a7:89:bc:de:a2:61:c5:05:e9:c8:a0:48:a6:3f:
47:c7:1e:82:fd:80:40:10:f5:a2:8a:6f:eb:14:73:
f7:0c:cc:18:3e:ce:2a:bd:a2:9a:e0:f4:a7:c3:b2:
14:fa:1f:61:9c:16:02:74:13:5b:69:e6:90:91:11:
06:16:36:12:b4:af:6e:9d:a5:7a:df:34:65:76:43:
c4:21:ac:34:a7:3a:7d:6b:5b:a9:c1:91:91:dc:6f:
ca:3b:c5:4f:2a:d7:71:3f:c6:6d:09:ab:63:4f:cf:
3f:8f:bf:d5:0f:88:9e:a1:3a:39:ba:72:a0:f5:dd:
f0:18:c1:22:aa:f1:46:7a:a8:d0:53:70:60:aa:d8:
70:04:73:63:cb:2a:dc:6e:3d:fa:19:85:bd:c9:22:
ed:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:30:E7:6A:8C:5F:2F:A8:B0:BA:7A:46:7C:FC:13:FC:0A:8E:D8:50
X509v3 Authority Key Identifier:
keyid:BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b0:bb:1a:72:9e:1f:a1:72:9e:56:6e:67:53:44:5c:da:ec:
e8:17:cb:81:29:9d:9b:44:b1:95:d3:2b:8f:c5:89:6d:b4:9b:
d6:d2:bb:ab:42:9a:75:1c:7d:7b:67:73:62:c1:92:04:c4:ea:
27:43:9f:cd:92:9c:d0:aa:84:69:a6:80:77:3d:a5:c5:bf:da:
7c:bf:a4:44:f1:1b:f3:64:5b:c1:c2:6c:34:56:3b:93:26:94:
ca:d3:cb:4b:b6:b8:2c:54:f4:fd:44:dd:ca:92:71:10:fd:01:
f8:40:ca:35:8b:c6:f8:ee:e9:2f:72:1c:b9:b5:88:9c:a2:de:
a1:fb:75:32:89:0b:0b:1e:f2:94:58:e4:cd:ce:92:d4:1c:bf:
69:b9:ef:84:23:de:5b:68:eb:db:34:ef:58:25:92:08:5f:b5:
97:43:e1:0e:96:31:66:0e:e7:af:bf:7c:bf:60:fe:88:8f:20:
1f:8d:1a:57:fc:32:06:d1:15:04:90:cb:01:70:f3:7e:01:da:
f1:1b:48:dd:2d:47:09:be:2e:37:af:67:e9:36:a4:e5:41:5e:
61:de:c9:cd:8c:22:1c:87:d4:86:73:3a:62:26:1e:10:01:31:
4e:f1:aa:19:59:cc:c7:8a:58:51:47:5f:f7:54:39:b5:6d:44:
c4:da:da:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:45 2025 by rpki-client