Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
File: vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft (raw, json)
Hash identifier: TJN8KQqph8UM0gQb8QUiq8Y4Mj+Iq8k9dgayh1jPXKE=
Subject key identifier: BE:57:B1:DA:53:53:26:0C:71:2C:D9:60:53:3C:C7:6A:0F:9F:E6:31
Authority key identifier: BD:A1:E5:5F:74:4E:14:12:BD:75:3F:D2:77:B7:74:08:DC:DF:8C:B4
Certificate issuer: /CN=bda1e55f744e1412bd753fd277b77408dcdf8cb4
Certificate serial: 0199FEB4ED2AAE1150567833C455CC1593E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
Manifest number: 10CE
Signing time: Sun 19 Oct 2025 23:01:33 +0000
Manifest this update: Sun 19 Oct 2025 23:01:33 +0000
Manifest next update: Mon 20 Oct 2025 23:01:33 +0000
Files and hashes: 1: A6rb1dzlDcV8JbvloxjZ9srng9Y.roa (hash: p6jxR8xYwMN0t2VYMZkdONNHxcFxVga3IwawawK72KQ=)
2: vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl (hash: SZTIa0DyNR3qfexNGlMhE4lqHcbfnat9eTaDrnjqTKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:ed:2a:ae:11:50:56:78:33:c4:55:cc:15:93:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda1e55f744e1412bd753fd277b77408dcdf8cb4
Validity
Not Before: Oct 19 23:01:33 2025 GMT
Not After : Oct 20 23:01:33 2025 GMT
Subject: CN=be57b1da5353260c712cd960533cc76a0f9fe631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:59:b5:e6:0f:94:b6:83:44:d1:fa:71:62:
7e:3e:7e:16:64:17:cd:ad:21:01:0a:0b:9e:03:61:
ed:98:b6:76:47:a5:ff:07:3a:c8:fd:78:7b:80:72:
6b:9c:9d:2b:56:83:02:1b:e8:d9:a1:d4:3d:a3:cb:
3c:30:ee:00:b8:34:93:6f:0a:da:2a:6a:1d:85:bd:
8a:e6:3a:1c:0f:3f:94:0b:e6:35:a7:44:1b:08:63:
ee:ad:2a:b2:e7:96:a0:c6:2e:3f:45:00:b5:44:dd:
51:91:27:6d:ec:a6:db:b1:9e:71:f4:09:71:37:ba:
cd:35:3b:15:30:4c:46:7f:1b:96:22:0c:45:96:24:
52:79:89:9d:fc:74:1a:04:f1:49:94:0f:3d:51:5e:
62:c9:8d:26:d3:bf:ce:55:e7:a6:aa:52:09:20:f4:
e7:2e:83:c2:2f:b4:45:00:db:19:d2:93:94:dd:91:
38:f0:a6:9f:f7:5c:98:78:cc:fb:d9:f8:1b:65:19:
10:fc:0a:ee:19:3e:c5:26:cd:31:49:50:dd:3c:ab:
e3:cc:36:0a:6b:ab:32:08:c4:1d:e6:e4:19:9a:69:
00:40:0b:30:5f:bd:aa:ee:a1:6d:cf:e7:08:61:c5:
97:12:75:a3:9b:f9:b6:41:92:67:33:c0:18:70:61:
4a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:57:B1:DA:53:53:26:0C:71:2C:D9:60:53:3C:C7:6A:0F:9F:E6:31
X509v3 Authority Key Identifier:
keyid:BD:A1:E5:5F:74:4E:14:12:BD:75:3F:D2:77:B7:74:08:DC:DF:8C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4b:f2:fa:14:90:27:a9:d1:2c:6f:7a:97:5f:6d:40:23:62:
58:f7:4f:f8:f1:11:04:dc:28:0f:df:2b:cc:76:52:cc:f0:ec:
16:96:88:c1:ba:3e:be:d6:b8:7d:cd:c2:7d:24:b7:a9:3d:c3:
a4:3e:db:2d:14:26:2a:6a:79:cd:6c:9f:fe:f0:b1:37:28:aa:
1f:e2:ed:2f:98:ef:49:14:fa:ac:5e:86:8d:8b:1b:1a:ff:6c:
c4:31:dc:ec:c8:79:4c:4e:6c:dc:27:1b:80:68:77:e2:e3:35:
f7:07:9d:da:c6:88:ab:d2:dc:69:d3:24:5a:8e:28:ec:3e:c5:
b2:4a:7c:73:44:f6:72:cf:ed:d6:15:06:dd:e6:6f:c8:df:d1:
03:ac:90:69:00:bd:96:09:6d:c3:34:72:1e:98:14:51:de:2c:
85:a7:d5:63:2f:08:a8:44:23:5e:b1:bd:ce:c6:e5:f4:b3:e4:
5a:dc:d8:8d:de:fb:d0:6f:c7:cd:86:db:e1:b8:58:44:f6:e2:
f2:e9:1b:44:4d:16:73:42:ff:44:7d:52:ac:7c:02:18:c4:c1:
fb:36:33:08:f9:e4:f5:8b:86:69:aa:55:9b:a3:77:fe:16:38:
c5:a5:d2:de:5a:16:15:c4:ad:88:b2:7e:42:27:40:15:d6:1d:
09:d6:7d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:11:50 2025 by rpki-client