Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
File: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft (raw, json)
Hash identifier: IaoBVKsjACpTCDxJ9OOFrh9QssgHnSD7lHV7qajOmEA=
Subject key identifier: C0:27:83:BF:52:75:A5:C3:22:A4:5B:3F:6B:78:42:0A:06:9F:0E:F2
Authority key identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
Certificate issuer: /CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Certificate serial: 0199FB0F283AD264284E0D48FA02D85E506A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
Manifest number: 0176
Signing time: Sun 19 Oct 2025 06:01:38 +0000
Manifest this update: Sun 19 Oct 2025 06:01:38 +0000
Manifest next update: Mon 20 Oct 2025 06:01:38 +0000
Files and hashes: 1: D98Ck1_qKOXalzx0pMS_FarSGM8.roa (hash: u49BF5lQyjsLl1bn3ULD3SUQ9N/pcixaCTatnIvy4v0=)
2: tCV34_eFEm-bBTr3p-Dum9J6ZzA.roa (hash: lJs/8jun541iQ5FmJ+SShA8Wi27D6ss5N6YmTLmASl4=)
3: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl (hash: 42NCJ4piRWJUN/l/knTKcbBT37zJqj5jKvwQGw1Injk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:28:3a:d2:64:28:4e:0d:48:fa:02:d8:5e:50:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Validity
Not Before: Oct 19 06:01:38 2025 GMT
Not After : Oct 20 06:01:38 2025 GMT
Subject: CN=c02783bf5275a5c322a45b3f6b78420a069f0ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:95:f6:8f:3b:7a:bb:5b:14:e6:1c:1a:f8:
83:57:05:f9:72:72:8a:23:cd:d2:ba:5e:30:e4:1e:
9a:6b:63:b4:29:f0:ec:ea:52:4d:d0:c0:c2:59:c2:
7e:a1:7a:5e:ea:b7:8f:f1:af:d7:ac:17:19:73:0b:
c9:7c:ea:33:9b:fc:85:c1:6a:81:1c:23:6c:00:b6:
b2:fd:45:1a:ff:ef:7f:8d:46:59:88:b9:9e:04:63:
19:39:53:8a:21:fa:52:61:af:06:13:d5:ce:35:c3:
1b:65:de:41:8d:f0:c5:1a:92:98:f1:e5:cb:fe:44:
7a:0b:69:f3:dd:07:49:1b:f2:1b:22:73:e8:95:69:
6f:99:b2:e8:4c:d4:dc:87:87:4c:06:8d:88:5e:3d:
ad:67:e3:7f:fa:00:64:d1:2a:a8:75:06:03:24:d9:
ae:a4:2e:0d:01:7e:c8:b6:ca:34:31:d4:b2:f9:da:
41:e3:7f:df:03:21:81:fe:76:63:fa:ec:23:cb:15:
7b:ea:aa:be:ac:27:3c:71:e8:4a:95:99:58:3d:2e:
d9:4d:99:00:74:02:91:56:09:0a:7c:1e:9e:f1:e8:
55:db:58:d7:e3:50:e4:45:c0:87:a2:1c:13:52:1f:
b1:fd:ae:ce:66:bd:1f:40:bb:50:c9:2d:8e:d4:16:
87:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:27:83:BF:52:75:A5:C3:22:A4:5B:3F:6B:78:42:0A:06:9F:0E:F2
X509v3 Authority Key Identifier:
keyid:BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:be:cf:1d:b4:54:42:8f:31:a8:fc:1a:71:bd:36:4e:23:c7:
95:3d:e9:78:43:fc:1e:fc:2f:d7:cf:52:31:2f:1a:96:db:19:
df:e3:c2:c3:dc:04:dd:5d:f8:bd:26:51:ed:4b:f2:1b:4c:65:
b9:69:07:b4:09:40:76:c0:b5:5a:dd:e3:e9:58:75:49:46:96:
de:ff:02:ae:8c:46:ca:b0:2f:4d:d7:df:fd:08:1d:ee:20:5c:
93:e0:f4:52:73:e2:4b:f0:63:b9:30:a9:df:17:39:aa:63:27:
c9:ce:4a:b6:ea:f8:ee:12:28:f9:47:ec:45:6c:ae:5b:1a:12:
f0:7b:df:60:e3:aa:6f:9a:f9:d2:fa:ab:0e:b6:da:f0:4e:34:
1a:43:a1:ca:cd:cd:84:5b:7c:65:4e:99:a5:08:67:b3:f2:1e:
c0:20:79:e8:15:f4:c2:a0:1c:10:4a:2c:e3:7e:d6:6d:45:97:
86:29:87:e9:c6:65:07:e5:4c:7b:18:e1:89:1b:82:64:f1:47:
6e:9a:bf:a4:69:24:12:0f:f9:af:30:d6:fa:f6:35:76:65:53:
f2:f5:2b:2c:d0:40:cf:f7:b4:ac:7f:20:77:70:0c:d1:ee:a3:
5b:9e:14:f7:3c:1b:48:4f:07:1a:5e:36:c9:27:18:1a:e9:00:
3d:0e:54:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:16 2025 by rpki-client