Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
File: vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft (raw, json)
Hash identifier: PBcC3/ryAfGwN4c8QynS5dmTLfQAi4ZndE/JUmteVq0=
Subject key identifier: 48:B9:B7:68:00:79:E4:9C:76:A5:C6:02:0C:83:1E:4B:E9:42:B4:C4
Authority key identifier: BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
Certificate issuer: /CN=bd02616554632356450bc4bb4b6dacfc79df3025
Certificate serial: 0199FBB372EA30C3AA2A098BC20B6A3383F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
Manifest number: 0CA9
Signing time: Sun 19 Oct 2025 09:01:05 +0000
Manifest this update: Sun 19 Oct 2025 09:01:05 +0000
Manifest next update: Mon 20 Oct 2025 09:01:05 +0000
Files and hashes: 1: vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl (hash: l95fZYF21Dyklem1jhfnk79DUaf9Le1V5+DY/f/r7c0=)
2: zW8H9236KdsFPYHIiVwdIlsjLeA.roa (hash: A3BKCbMqcBICoyGdtSjfGVXeNlYAC0vfSMBZfdSiSAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:72:ea:30:c3:aa:2a:09:8b:c2:0b:6a:33:83:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd02616554632356450bc4bb4b6dacfc79df3025
Validity
Not Before: Oct 19 09:01:05 2025 GMT
Not After : Oct 20 09:01:05 2025 GMT
Subject: CN=48b9b7680079e49c76a5c6020c831e4be942b4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c8:2d:bb:e7:56:de:ad:6a:fd:80:3e:a5:7d:
ca:b6:ac:c6:84:e5:58:33:02:f8:8a:7b:fb:a4:71:
43:8c:47:18:81:e6:70:74:b4:5b:47:cc:ba:ee:0c:
33:5f:cd:ab:0c:e2:9b:76:c7:7c:c9:84:c6:d0:63:
0c:5a:b8:4a:ad:4b:92:16:29:74:6d:a2:f9:e2:44:
f7:80:9a:32:91:e4:10:4d:50:42:a9:d6:b5:1e:a4:
70:9c:71:59:2e:47:06:49:24:4f:f0:4c:ec:36:08:
2d:f0:73:06:41:a2:a0:da:01:0c:f7:82:7d:7e:20:
44:c4:3e:60:90:34:d0:3d:4e:5d:40:bc:3c:33:64:
04:ed:92:c4:44:03:01:c2:66:c2:ff:ac:76:d9:47:
00:31:ec:64:79:36:ff:d2:d5:59:9b:0f:94:bf:01:
f7:43:c7:fc:95:58:69:e4:f9:d4:59:42:bc:1c:83:
7a:b8:c6:3a:cf:6a:10:f4:4d:66:9d:49:20:95:11:
8b:5e:ed:7a:d0:68:44:8e:f1:9c:6e:51:45:a1:fb:
c9:76:e7:b6:c3:45:d0:9e:f9:b9:a9:50:f9:f4:9e:
20:a3:00:a5:c9:5e:f0:9c:00:d9:fc:7d:3f:90:44:
f0:18:da:1a:e8:b5:fe:21:64:97:2d:d4:bf:36:24:
72:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B9:B7:68:00:79:E4:9C:76:A5:C6:02:0C:83:1E:4B:E9:42:B4:C4
X509v3 Authority Key Identifier:
keyid:BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d0:42:85:73:a7:42:de:cc:09:ca:81:32:08:aa:49:b4:80:
81:62:3f:a1:ff:01:f3:bd:38:cd:b1:1d:d5:99:8b:49:95:98:
b9:2e:ae:98:64:30:b8:b1:4e:17:7f:83:7d:84:60:31:10:c0:
eb:e6:1e:74:49:82:42:ed:a4:aa:96:ed:81:3d:64:5c:ad:fd:
80:c1:38:72:e4:7d:51:5c:cf:fa:d9:ea:37:f7:53:77:f1:53:
ed:ec:c5:45:1c:06:40:07:95:fd:6c:9f:9c:40:c6:39:25:46:
8b:4b:c4:9b:5b:93:75:cc:55:38:c7:e8:84:5d:f1:08:87:a2:
db:35:a0:af:8e:1d:30:15:59:b9:99:9a:83:f9:4c:02:88:8e:
4b:e1:83:35:d9:d7:19:42:9f:5b:67:fd:51:3d:bb:60:fd:3a:
b7:2e:dc:04:42:f4:be:6a:24:20:e8:98:99:0b:27:64:a3:9d:
91:ba:b0:4a:92:2d:31:25:f4:a8:48:a5:2e:5c:71:36:5e:5c:
91:4d:a1:f5:64:50:fd:ad:f1:e1:2a:e3:cb:75:64:4a:c5:2f:
47:80:c7:cd:cf:28:ef:a5:9b:cf:a9:de:40:2b:85:c7:eb:c7:
7f:6b:a8:b7:8b:ef:17:d9:07:bc:d1:6c:44:32:07:da:1e:11:
ca:4f:76:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:35 2025 by rpki-client