Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
File: vJxAOtAH4qJCprCQYaPBo2CmTVo.mft (raw, json)
Hash identifier: 8+gSCdSnzQyCbEADmCdUOoPtDFP0R29ytNRuF8sZNFo=
Subject key identifier: EA:EB:AE:70:CB:45:79:5E:22:83:7B:45:C0:0F:C7:A8:D4:97:2A:6D
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 0199FBB35BC9C80C11EE4384F2135E70D41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
Manifest number: 092A
Signing time: Sun 19 Oct 2025 09:00:59 +0000
Manifest this update: Sun 19 Oct 2025 09:00:59 +0000
Manifest next update: Mon 20 Oct 2025 09:00:59 +0000
Files and hashes: 1: DI4aL2VDjSmaj-T6WF7qWyVxEy8.roa (hash: irLOs0EfjvwV0yEqJPJZBOPh+tRGrPv6PzJ4eB+9FwU=)
2: c4jk7gKONHNQDGzC6dsv2q8s7vI.roa (hash: a6L74Wo+bnsgWub76o3PYF/fgomhfzvN3TtRHLCaboU=)
3: tPkC9g1rh0B-WDtzyBxNorqbjqo.roa (hash: 3UTyjNkmps78kxWwCRVUmx8qZWeL7ho0lCKlGDqKCwQ=)
4: vJxAOtAH4qJCprCQYaPBo2CmTVo.crl (hash: +MD4b0uZeML2Mx36+VVIqzJId9a8ErszoaG358L8eeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:5b:c9:c8:0c:11:ee:43:84:f2:13:5e:70:d4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Oct 19 09:00:59 2025 GMT
Not After : Oct 20 09:00:59 2025 GMT
Subject: CN=eaebae70cb45795e22837b45c00fc7a8d4972a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:db:8a:9a:37:d0:7e:aa:e4:9d:2f:27:e3:
f5:95:50:5a:8d:c8:d0:43:4b:c0:c6:51:2b:fd:cc:
0b:c7:f2:5b:81:7e:1d:b6:f4:42:93:7a:1d:7b:89:
23:be:cf:41:a2:ef:22:03:60:36:0f:bb:3c:91:f9:
ce:0d:02:14:ed:97:e7:39:a0:6b:28:86:f5:29:d3:
30:da:d9:c0:dd:20:17:6f:85:07:4f:2a:f2:a8:dc:
30:a3:d4:26:90:80:b6:cc:f8:d6:59:3a:50:fe:12:
5d:2a:a6:08:04:1e:7d:ca:cf:a4:2b:a2:04:91:cf:
44:98:b8:3e:70:97:00:bb:38:69:7f:94:e1:c6:51:
df:a3:46:83:98:13:5b:0a:14:82:31:4a:f0:a9:81:
70:a4:11:cc:84:06:4c:58:8b:c2:55:f1:81:48:c1:
8d:40:20:91:11:17:85:71:90:90:0c:23:67:24:ad:
a9:c0:75:0b:55:8e:a4:07:15:33:aa:41:eb:94:ef:
df:6a:a3:94:1a:f2:af:75:85:6d:a8:38:92:7a:0c:
9f:d3:2e:82:dd:72:63:ee:3a:3f:e6:ca:bc:6e:98:
ac:a7:a6:d7:d2:88:5f:8c:9d:31:54:0a:1b:6e:3d:
aa:0c:88:46:fd:05:9a:f1:61:b7:0d:38:d6:d7:49:
05:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EB:AE:70:CB:45:79:5E:22:83:7B:45:C0:0F:C7:A8:D4:97:2A:6D
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:83:34:5e:e6:46:57:66:7e:f0:c7:e9:6c:b1:4a:fe:e6:9b:
90:5d:ad:1f:53:51:e5:f7:9c:7c:68:88:f3:00:19:3d:5a:e7:
f7:1a:ff:99:df:3e:a2:1a:b1:7a:d1:14:66:b9:04:65:c4:09:
28:67:e8:d8:c0:1d:c7:42:4d:aa:1e:8b:b4:ec:76:d1:dc:43:
44:00:10:55:5a:90:02:69:1b:ac:75:0f:f1:e9:64:2e:46:3e:
b7:32:ab:4a:f7:4d:92:39:47:8f:ac:9e:a7:1e:5a:ff:29:99:
f8:2a:38:15:5c:50:84:48:ae:c2:40:e1:54:a6:7b:34:76:f2:
d5:e7:86:eb:1d:99:28:f1:ff:a4:6d:3d:f4:b0:dd:c1:06:37:
ed:d5:c0:c2:0a:e1:8c:67:ce:68:fd:65:d4:ff:d1:5b:98:71:
02:e8:63:d3:55:88:8f:22:80:f5:74:be:5b:f3:ed:4c:04:b7:
02:9d:75:54:63:08:5e:8f:aa:13:ca:ad:50:47:b0:65:4a:a7:
fd:f1:a5:b6:af:e7:81:a2:44:c8:c5:8b:98:10:17:02:e0:66:
5f:9a:21:e8:b8:be:f8:9c:9a:dd:44:26:63:64:bc:05:8e:67:
32:1a:b9:e5:57:df:58:dc:06:cb:fc:38:d1:23:ef:22:69:b1:
f6:7a:3e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:43 2025 by rpki-client