Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
File: vJldFVAngKzfe25qGGXttaDn3Es.mft (raw, json)
Hash identifier: mJp9QcCFadvDo7Zbtid3hwu10RNDfcViJQZUMGYZFME=
Subject key identifier: 64:13:5A:B4:0A:03:D5:9A:28:D0:FC:09:C3:F7:09:DB:5D:8C:05:62
Authority key identifier: BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
Certificate issuer: /CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Certificate serial: 0199FC58B17300E858DE4062206910DFC6B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
Manifest number: 0497
Signing time: Sun 19 Oct 2025 12:01:35 +0000
Manifest this update: Sun 19 Oct 2025 12:01:35 +0000
Manifest next update: Mon 20 Oct 2025 12:01:35 +0000
Files and hashes: 1: vJldFVAngKzfe25qGGXttaDn3Es.crl (hash: 2KyjMCmiK4j/OVpp1/10YLO9B1B5zZKoL1O9JxRYHpc=)
2: ylPOOnSs52DARSEahPLXBl4_KnA.roa (hash: lVDEfOqJ+hS5o1tAWzlyu4ZG8E1RuFvF7CBIziXEhTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b1:73:00:e8:58:de:40:62:20:69:10:df:c6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Validity
Not Before: Oct 19 12:01:35 2025 GMT
Not After : Oct 20 12:01:35 2025 GMT
Subject: CN=64135ab40a03d59a28d0fc09c3f709db5d8c0562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a4:f3:40:1d:f7:ce:83:3d:bd:37:ce:3b:c4:
e0:ea:4b:5c:8e:8f:4d:5c:78:df:1c:21:d0:dc:dc:
d4:87:51:9f:24:cd:5e:cf:2a:39:1a:41:ec:fb:3d:
b2:69:54:45:48:ec:53:3f:be:d4:09:a3:5f:a8:ab:
83:8c:be:f9:98:0f:76:c9:9c:34:e9:a7:13:44:72:
58:34:6c:b4:5e:22:f8:7a:d2:51:cd:0d:ae:ba:bd:
43:8a:d4:8d:6c:cb:a1:2e:48:7f:b4:b5:d7:1f:a0:
db:56:78:69:b1:d2:46:09:b0:85:c8:49:80:fa:f6:
02:89:cb:5d:ef:1b:7d:29:b7:97:74:b0:ed:c6:67:
88:2a:ab:64:df:85:b0:f5:c9:7c:a3:21:d0:82:36:
9f:4f:1f:de:71:d7:02:85:5c:4d:db:11:69:4a:87:
8b:c4:f8:aa:d3:12:06:51:60:31:aa:5c:7d:13:f4:
4e:52:13:d9:18:58:16:a5:fb:fb:ac:b5:f7:28:bd:
ea:c3:8d:c3:34:26:1d:c1:24:cd:80:23:3a:1a:0d:
c8:f9:33:bc:d1:f2:e7:dd:3e:b5:b7:49:26:4a:70:
a7:9a:4a:71:8f:e0:01:ae:c1:c7:c0:49:f3:ca:a8:
30:4e:b5:36:0f:f8:39:00:b3:5f:29:f5:73:58:81:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:13:5A:B4:0A:03:D5:9A:28:D0:FC:09:C3:F7:09:DB:5D:8C:05:62
X509v3 Authority Key Identifier:
keyid:BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:df:98:19:00:5e:fb:6e:90:ae:20:77:d1:48:2b:7a:60:a7:
45:c6:fb:9c:fd:49:5c:b8:5f:55:b2:6a:c3:68:1e:df:2c:03:
1c:b7:1c:0f:a1:bc:20:26:a1:fb:94:25:4d:8f:dd:14:f0:ca:
f7:b8:8a:22:27:74:cf:9f:32:6f:46:11:68:09:c4:2e:f8:55:
0d:81:9d:b7:cb:fe:30:3d:e9:0b:d0:30:bd:d5:13:58:3d:87:
fb:93:57:01:99:98:e2:8a:ff:d8:05:0e:19:5b:f8:e9:a0:39:
07:e0:78:8c:bd:a6:a5:84:51:1c:f5:86:c7:ae:e3:13:d4:e2:
e5:d4:84:be:c2:0b:6f:13:de:f4:f3:6b:0b:b2:ef:7e:49:19:
85:a6:74:67:de:56:13:32:2c:a6:73:6f:42:ed:80:e7:11:f7:
c8:60:18:a1:b4:34:9d:ed:21:46:18:0b:b6:65:87:66:d7:9a:
97:38:a4:36:b0:ee:57:a1:2a:be:f3:53:cb:a9:d8:f9:78:08:
95:6d:09:e2:8e:24:e9:12:ed:d0:f0:0e:ee:04:95:08:44:53:
ca:c3:97:f5:89:a9:a1:26:d2:68:a6:ce:d0:da:cb:5d:e3:65:
f8:2c:2d:13:c5:1f:b1:70:4d:c2:59:7d:12:83:b2:76:97:b2:
5c:e8:0d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:15:24 2025 by rpki-client