Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
File: vQY9lEu4H8McuhFJndAG607OliQ.mft (raw, json)
Hash identifier: pgETLovF/oZWL+/WhEC66oS1YU02qfvZ+pV7Yivbqac=
Subject key identifier: B7:69:73:FB:F0:AC:C7:F6:7D:C1:5C:0A:6F:BE:81:DB:F0:B2:53:22
Authority key identifier: BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
Certificate issuer: /CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Certificate serial: 0199FC216BB71A6BE221DAE31198F2021B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
Manifest number: 0518
Signing time: Sun 19 Oct 2025 11:01:12 +0000
Manifest this update: Sun 19 Oct 2025 11:01:12 +0000
Manifest next update: Mon 20 Oct 2025 11:01:12 +0000
Files and hashes: 1: Nq1isTWXGFgDMfQsWjLkSFAz9YU.roa (hash: cOanxi0n0S0i8MlV6jtoZzMtSVudeCiiZSom6UuFfg0=)
2: vQY9lEu4H8McuhFJndAG607OliQ.crl (hash: gsz6rGHiih8DcDaGdVerJ76l9sX/B3J784FdIRk8nv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6b:b7:1a:6b:e2:21:da:e3:11:98:f2:02:1b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Validity
Not Before: Oct 19 11:01:12 2025 GMT
Not After : Oct 20 11:01:12 2025 GMT
Subject: CN=b76973fbf0acc7f67dc15c0a6fbe81dbf0b25322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d8:94:b1:e3:96:19:30:11:a4:4f:32:e3:82:
c8:87:b3:f6:fd:c3:e4:91:0b:8e:ae:72:f2:3a:91:
4b:b4:44:2c:9c:a9:ad:4d:9e:a8:8b:05:f7:03:49:
87:68:91:44:de:ab:04:f8:18:9c:cb:b9:60:b5:4c:
43:2b:2d:e1:4f:e0:2d:72:b1:6b:7c:5c:2a:96:94:
28:54:bf:44:82:9c:d9:12:c9:79:e1:20:22:bf:45:
29:50:f1:c4:74:4c:9a:2c:b0:cf:02:21:4f:c8:ee:
10:44:00:99:ee:6e:07:53:88:12:a0:ee:73:50:c1:
5b:1e:70:34:52:8d:37:21:f0:61:db:b4:29:03:97:
f8:b5:4c:b0:62:95:60:38:da:80:ee:da:94:0b:04:
ca:58:ca:71:d3:50:25:e4:fa:a5:da:2b:84:fd:f8:
5f:96:11:12:5d:37:7e:de:5e:ed:fb:48:c1:bc:05:
8f:1f:eb:3c:f6:f4:3d:fd:08:2c:2b:b4:2d:35:39:
09:9e:c3:af:5f:11:3b:b9:f5:53:5d:1e:fa:87:fe:
36:53:5f:63:fc:df:24:a9:f9:a7:90:1c:83:6f:1a:
5e:d1:27:10:11:a0:2c:e8:6d:97:79:f7:95:c7:4f:
7c:28:b3:cd:5a:a6:ae:03:8a:14:d3:9e:b2:ab:c2:
06:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:69:73:FB:F0:AC:C7:F6:7D:C1:5C:0A:6F:BE:81:DB:F0:B2:53:22
X509v3 Authority Key Identifier:
keyid:BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f0:8d:c0:4c:80:50:e2:66:f6:7b:40:36:29:f4:48:f1:82:
bd:30:2d:f3:80:bc:bb:58:59:30:36:c2:ed:38:8e:eb:a6:45:
e3:e1:ac:c6:ac:2a:0c:64:bb:a3:c0:e7:e8:af:9e:87:bb:15:
b2:f4:d5:56:4f:2a:fe:b9:b0:c9:90:b2:54:27:ef:39:c1:a6:
8e:46:6c:d7:1d:ac:40:17:4b:5e:2b:13:1f:7a:54:48:27:36:
34:15:e3:23:88:79:b6:7b:65:be:8d:fa:d4:95:fc:f6:74:88:
b3:55:ca:1a:9b:29:e7:34:58:c8:22:11:09:db:c4:ee:7e:02:
f4:d4:5c:ae:86:09:c8:63:70:78:7a:d4:6a:ce:fd:a7:96:6d:
e3:aa:a9:42:e5:54:43:6f:11:ae:d3:cd:07:d6:40:01:94:4c:
43:bf:7d:f5:67:d5:1f:74:36:92:6b:0b:2d:72:5a:de:e9:f6:
48:37:61:5a:39:79:7c:ed:24:a4:52:9e:39:e2:f8:7a:38:3e:
c0:c3:54:bd:09:a7:bf:43:a5:17:57:61:67:ab:92:38:27:13:
1c:84:c2:1d:bf:b8:81:33:58:1a:e0:52:6f:dc:06:0d:b4:8d:
c5:19:78:20:47:cd:a2:c2:56:e0:08:a4:0b:dd:0a:f1:8e:b1:
1a:6c:53:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:40 2025 by rpki-client