Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
File: vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft (raw, json)
Hash identifier: VtQzV9wDkXCEyohomtd+dIEmF2AUhn/f/r3CSRxqvHA=
Subject key identifier: 97:00:D5:2B:8A:A3:D4:9C:5C:AA:53:C2:13:A7:5D:D2:81:49:FA:6F
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 0199FDD9B06247F032086C9BE8DD555D2C9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
Manifest number: 173E
Signing time: Sun 19 Oct 2025 19:02:05 +0000
Manifest this update: Sun 19 Oct 2025 19:02:05 +0000
Manifest next update: Mon 20 Oct 2025 19:02:05 +0000
Files and hashes: 1: aNeNti1OnoEazjIvuWe2cw4fSiE.roa (hash: eMyBgjTIu3x6QZFdYc0ThJiGgUZM0+emfvXfZvql+cQ=)
2: m4ru5TcymZwyZ3cxRDnq3gnEaOw.roa (hash: dTsqnxjibxvmK4QjJP+2GB4FrGtrYTrsCusxLqvYBKE=)
3: vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl (hash: YrGlbX7buq/FrgS/2uqVEPK/iTG/LTpOmPJp975CN0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:b0:62:47:f0:32:08:6c:9b:e8:dd:55:5d:2c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Oct 19 19:02:05 2025 GMT
Not After : Oct 20 19:02:05 2025 GMT
Subject: CN=9700d52b8aa3d49c5caa53c213a75dd28149fa6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a2:b2:f1:be:c1:b3:1e:f8:c9:d4:af:6e:c0:
b8:d2:8d:3a:62:a5:e4:56:41:f4:49:9d:e1:bb:5a:
3b:c0:e8:bc:14:24:a2:fa:73:c6:14:7a:d5:b7:42:
3a:0f:01:2e:66:64:b4:3c:c0:d3:c3:5b:6b:48:b1:
ef:f6:52:6f:69:46:2d:7a:3e:60:1a:a4:db:03:e3:
ce:b4:88:b9:e5:8f:65:b8:0b:a1:51:a6:d1:23:01:
53:17:f5:27:e7:c0:74:67:d7:67:e1:ac:c8:0e:6c:
1b:43:3e:d9:2d:c9:3b:57:d8:0d:3a:de:07:d2:f2:
4e:59:df:ee:63:23:84:c1:89:3c:52:3a:1a:9a:08:
78:6e:49:b5:4e:fe:57:ec:e9:97:36:6a:f8:6f:e2:
fa:48:bd:87:fb:18:f1:8d:31:24:9c:7d:aa:d4:4a:
10:d5:70:6c:d5:cb:f4:78:3d:55:3d:37:96:64:53:
89:9c:3c:be:86:fa:c8:4e:70:6f:f0:73:a5:7a:e7:
65:ea:84:c9:16:60:58:07:f1:79:07:87:95:13:66:
54:8f:1e:90:5b:58:40:22:f1:d6:78:cd:0a:27:9e:
77:8e:a6:f7:cb:e5:77:0b:44:cd:a9:03:97:5f:b2:
19:7d:2a:d8:6c:ef:90:60:4a:bf:0c:c1:91:d3:84:
74:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:00:D5:2B:8A:A3:D4:9C:5C:AA:53:C2:13:A7:5D:D2:81:49:FA:6F
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b8:b5:9a:60:70:26:ea:a8:ad:02:89:96:14:ac:ad:12:a2:
54:7e:d3:79:52:33:29:15:5a:ca:7e:9a:d8:3e:c9:bc:05:a0:
d7:d4:6a:60:3e:49:60:62:28:9a:aa:b4:9d:94:57:2b:af:6f:
c4:96:dd:21:2f:d4:51:ef:04:87:7d:27:41:69:45:97:2f:f3:
bf:73:53:a7:e4:04:e7:35:71:c6:3a:38:a4:1e:24:b0:db:ac:
e8:96:43:95:1b:0b:5b:7e:9d:b2:0d:7b:9d:f7:e6:94:ab:86:
56:a9:14:35:09:cd:64:32:81:01:b2:f7:44:6a:32:e1:c1:a2:
7d:2b:98:36:c5:48:ac:7d:35:1a:f4:69:c0:f1:8e:61:f3:8b:
d2:8b:45:26:b7:27:1c:86:47:73:ef:36:1c:32:3f:7c:02:59:
cd:65:23:d7:ef:9d:c5:56:70:e6:0d:42:a6:08:53:55:b9:94:
aa:88:3c:c6:25:18:3a:ab:00:51:50:b8:16:48:31:f2:7b:4b:
36:ec:bf:b0:40:28:9b:33:49:63:2c:31:7b:38:24:71:22:2e:
e7:60:b0:e8:a4:48:70:05:39:9a:66:08:19:68:24:a8:fe:b9:
43:94:92:2d:1e:d9:eb:59:3a:45:ad:8c:ae:c2:8b:f0:0a:d4:
f5:70:14:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:07 2025 by rpki-client