Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
File: vDjusmw53w8ZTlDXZBmNkOHztck.mft (raw, json)
Hash identifier: 4MSs4UoloBgrHGyyJDvptQx6bCxVy8ePETvOQOXILGE=
Subject key identifier: BD:28:7C:41:45:BE:AB:4E:48:15:E5:19:78:28:B4:BB:47:A4:6F:13
Authority key identifier: BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9
Certificate issuer: /CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9
Certificate serial: 0199FC591246616E93368E647D8F931C4DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
Manifest number: 094C
Signing time: Sun 19 Oct 2025 12:01:59 +0000
Manifest this update: Sun 19 Oct 2025 12:01:59 +0000
Manifest next update: Mon 20 Oct 2025 12:01:59 +0000
Files and hashes: 1: FSb-Rvye6YoA1Ii-rCKundZ-HD8.roa (hash: wEXQWTLVPy1UwtI4vOgrpyaszSEDzsytRnOaOtWiUUo=)
2: vDjusmw53w8ZTlDXZBmNkOHztck.crl (hash: qMK8BDFh8z2ojn4z2TrbsNTyzY7J0eIFo/J2e7e9L9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:12:46:61:6e:93:36:8e:64:7d:8f:93:1c:4d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9
Validity
Not Before: Oct 19 12:01:59 2025 GMT
Not After : Oct 20 12:01:59 2025 GMT
Subject: CN=bd287c4145beab4e4815e5197828b4bb47a46f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3a:80:9a:b9:c9:d0:37:3f:65:42:ce:58:b3:
a3:57:60:89:ab:19:80:18:ad:8b:60:5c:0f:07:26:
19:50:f4:41:17:0f:7c:1b:c6:9c:6d:20:c1:9d:85:
3d:33:8a:f6:6f:1b:80:02:cd:f9:a6:ba:6f:78:b9:
c6:05:ce:a1:f9:49:d0:e6:db:47:5f:47:1c:cb:9c:
be:77:92:33:bc:f8:46:80:ee:d0:ec:17:e6:0d:2a:
93:3d:79:2b:00:4a:72:a0:2e:e2:ce:97:8d:4d:cc:
2d:9e:4e:d2:61:3f:37:fe:40:a4:0f:0d:61:67:c7:
bc:79:27:dc:de:16:e2:70:d6:e4:73:b5:7f:ec:38:
03:b7:5a:c6:34:e3:1f:41:49:e2:41:d7:3e:54:f2:
d8:e3:2d:8c:22:5e:73:99:43:76:92:39:9e:8a:89:
72:46:bb:96:0d:3e:67:7b:81:83:95:d4:a2:93:6a:
88:40:24:31:44:85:cb:87:b3:98:c4:7a:37:7f:cf:
ca:b9:6c:27:aa:85:09:1f:4b:77:f6:ad:39:d2:cd:
be:43:3b:6f:f0:4c:9a:8a:24:e2:b7:2b:89:bf:0e:
09:1a:0f:4c:5f:dd:87:d4:fb:0a:49:ff:f3:f9:92:
80:9a:c8:af:59:d5:64:a9:c5:76:55:55:49:32:d4:
df:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:28:7C:41:45:BE:AB:4E:48:15:E5:19:78:28:B4:BB:47:A4:6F:13
X509v3 Authority Key Identifier:
keyid:BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7e:29:9b:f9:75:f3:39:f6:92:80:6c:bc:8e:66:55:35:43:
b1:4b:77:f1:42:b0:ac:3d:18:8a:d0:c1:6f:9f:60:87:94:56:
36:37:4e:d4:bf:b0:9b:77:9d:22:38:3e:1e:e2:0d:e9:26:73:
1c:2b:f6:83:26:55:1d:33:ec:99:2d:49:b3:33:21:3c:65:4c:
5b:46:3b:be:92:f5:59:98:e0:47:0e:0b:2d:88:a6:41:96:a0:
b0:dd:e8:18:2f:dc:5d:b3:8e:ce:41:ac:74:8c:13:7e:1e:d5:
15:2b:4d:4b:6b:cf:c9:93:1e:db:88:4f:ac:70:d6:92:26:3d:
61:3d:f5:6b:a7:36:f9:a5:21:26:1e:23:c6:3f:b1:38:cf:1b:
ed:71:dc:19:6e:1f:1c:45:b8:d9:84:bd:cf:88:e6:6e:ed:a5:
23:5b:49:f8:9d:69:67:77:30:a8:eb:2e:ef:50:78:13:9d:93:
ad:ca:a1:0c:17:6e:6c:8e:50:ed:5b:72:74:2f:65:10:88:3a:
f8:19:32:4e:95:7d:32:1e:d2:29:d8:35:6e:f9:19:10:6a:57:
9c:e5:87:02:f8:bf:16:e8:d8:c3:14:a0:19:ba:07:8b:d9:f4:
c2:29:7d:a1:e7:09:cc:d4:64:38:ec:b4:cd:05:66:5a:9e:3b:
5a:a1:af:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:23 2025 by rpki-client