Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
File: vVwIMjrCerZVOlpppzpY-AJCPWg.mft (raw, json)
Hash identifier: qVFjJNTLZbQP9J+rNyX9gf/fafnDCJBsM6TC1wa8re0=
Subject key identifier: 81:96:95:DF:05:D0:6D:EB:E7:03:CD:D0:A3:33:8B:DD:E2:21:FB:5A
Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
Certificate issuer: /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Certificate serial: 0199FAD8435F8107241FB9A4D4F36DEEED18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
Manifest number: 05AE
Signing time: Sun 19 Oct 2025 05:01:40 +0000
Manifest this update: Sun 19 Oct 2025 05:01:40 +0000
Manifest next update: Mon 20 Oct 2025 05:01:40 +0000
Files and hashes: 1: G_IYoZfZUxFUxoKj63LyULDLjWc.roa (hash: p32xiHa5RLyOZriAfbie5PUear7BZRAYgBWelDYnr3o=)
2: pBa3ZIYcjmcqVmvAHshpeA-YNy8.roa (hash: 4EmI7PijPu9Hj8achdjNLKa6nAug9jEr6AHyyJ1Ale0=)
3: vVwIMjrCerZVOlpppzpY-AJCPWg.crl (hash: 9FxZbDdhq/oSEThOKi5lqTIDw7CVJslwCjy3stPAaK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:43:5f:81:07:24:1f:b9:a4:d4:f3:6d:ee:ed:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Validity
Not Before: Oct 19 05:01:40 2025 GMT
Not After : Oct 20 05:01:40 2025 GMT
Subject: CN=819695df05d06debe703cdd0a3338bdde221fb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:19:a1:29:b5:5e:03:3f:07:7c:04:5a:74:92:
26:bf:b0:62:29:fd:de:c6:43:b2:91:96:07:61:f2:
14:28:47:9e:95:a7:f7:ea:c3:f0:36:b3:d1:74:04:
5c:bc:28:bb:26:e1:cc:b3:9e:77:21:94:1c:cf:48:
b0:dc:ee:ca:1c:51:f6:6e:2e:e3:ba:56:0e:ca:17:
4e:70:65:15:ad:9a:ff:1b:34:eb:31:18:fb:75:07:
a0:3a:04:04:22:c7:42:da:62:62:e6:47:78:43:b8:
e4:e5:2a:a8:af:53:30:23:0f:45:85:21:6e:5d:b0:
2c:8a:7c:10:ae:b9:b4:0d:bb:69:e4:6e:d9:2f:c0:
7b:57:8a:1e:8e:9f:b6:ad:ec:93:23:2c:19:78:2e:
11:d9:0e:56:d3:a0:bc:94:74:51:ac:94:a0:64:ce:
ac:88:6b:6f:09:6b:03:26:61:92:17:3d:f0:e0:d0:
b0:bb:55:f4:24:e6:74:d8:48:5c:b2:a4:66:24:23:
93:c4:43:48:74:9e:bc:10:34:75:82:7e:db:60:ce:
68:8b:14:28:ba:e7:24:fe:a9:48:e7:54:71:75:1e:
a4:28:49:cf:ec:c8:b4:73:61:81:c1:54:95:ea:99:
a2:18:6e:f3:c0:65:fe:3f:58:6d:fa:57:f6:20:1c:
52:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:96:95:DF:05:D0:6D:EB:E7:03:CD:D0:A3:33:8B:DD:E2:21:FB:5A
X509v3 Authority Key Identifier:
keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3b:06:77:e4:c3:37:ef:d0:f3:77:12:a1:e6:6b:66:02:02:
7c:e6:93:6a:27:d9:ea:80:54:77:8a:c1:c5:84:f1:90:0f:5c:
3f:53:aa:17:75:f5:03:b0:b7:94:82:24:09:3c:8d:7f:8c:af:
f3:a4:89:3a:ca:e9:68:92:f6:7d:77:a3:07:2e:6d:c2:3e:93:
08:d8:b6:c3:59:c6:bd:25:6c:60:d2:6f:f4:d0:77:37:69:33:
94:42:78:06:cb:57:ed:b1:7d:68:30:e2:11:5b:d7:45:4a:8d:
76:18:4f:be:08:1a:ae:ee:93:1b:80:8b:00:f6:be:2d:91:32:
c3:3b:7f:2f:d8:07:4c:26:57:68:12:3a:26:a9:d4:be:27:47:
27:10:08:ed:11:a0:51:02:54:76:f0:fe:e1:82:08:ae:ab:bf:
22:a9:9a:15:f0:00:d5:2b:60:c1:e6:7a:fe:4a:a8:14:a0:b0:
ad:99:21:97:ac:b9:92:f7:03:3a:27:77:36:4a:5c:e2:eb:5d:
07:34:a7:2c:7e:a6:d1:9a:71:1d:b9:75:ae:80:71:a4:d4:e3:
9d:89:88:b0:b6:24:e5:62:ce:19:58:22:63:bd:e1:6d:54:7d:
15:2a:c5:f4:04:8e:80:37:1f:5b:a6:f3:7f:6e:01:c0:5a:eb:
01:cb:fa:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:58 2025 by rpki-client