Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
File: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json)
Hash identifier: TsJldIWIy7LHj300hMl3QZo7awilDVNPCX1Jnn55PeU=
Subject key identifier: 89:43:EE:B8:8D:84:36:D4:04:57:B9:5A:52:6C:3A:24:F3:A9:37:B3
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 019A00DA74A2A1EAEA2AE6DAB13E72B99903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
Manifest number: 0AF1
Signing time: Mon 20 Oct 2025 09:01:47 +0000
Manifest this update: Mon 20 Oct 2025 09:01:47 +0000
Manifest next update: Tue 21 Oct 2025 09:01:47 +0000
Files and hashes: 1: 4zZX5zJWUsfZ5zmG6bPbMr0lvbs.roa (hash: Qk/9tkVuHYR7bI8BB1K5v6WoVgCSt0kT7wqGusdLxvQ=)
2: eokrGDKKk0G74B46cfTWojQ52Jk.roa (hash: 3LPYckY4Mq2pqzQbZ2q+2fT9RSskgmzOaPcUGiyhlMY=)
3: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: 2G0PKqCjDpO8bVP4bmcpZn4WqYR7W1VOuJGndILARIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:74:a2:a1:ea:ea:2a:e6:da:b1:3e:72:b9:99:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Oct 20 09:01:47 2025 GMT
Not After : Oct 21 09:01:47 2025 GMT
Subject: CN=8943eeb88d8436d40457b95a526c3a24f3a937b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:6c:e1:ea:df:92:49:0f:19:99:08:3b:cc:
67:45:17:b1:d5:6b:f7:ba:04:9e:df:38:8a:46:f5:
fb:8a:fa:3a:6a:09:b1:73:94:5b:4b:b0:75:44:c5:
6e:7b:6c:16:0f:5c:39:47:3a:dc:ec:7f:f4:d5:69:
60:e8:3a:bb:34:9b:a4:02:e6:fb:ca:51:9b:30:0d:
0e:4d:d5:c2:6d:0d:2d:26:29:c9:f7:09:0a:3e:65:
34:58:08:db:22:ce:46:c3:a4:aa:1b:0c:53:96:90:
bc:da:fd:81:72:ec:da:4e:bb:29:bb:e7:39:0a:97:
b3:52:09:08:2c:11:25:dd:d6:95:94:35:af:13:69:
3b:0f:bb:e3:5d:73:a2:1e:1b:9a:20:2c:3c:88:3c:
dc:6b:b8:c8:d8:ed:f1:ff:81:86:b6:d8:b6:13:c7:
22:11:ae:4d:13:6b:03:22:c1:7b:7a:94:29:55:96:
ac:aa:42:0e:2d:18:c0:52:39:f0:63:33:b3:93:4e:
74:fe:83:5c:d3:af:af:07:a1:ed:71:ae:e9:7b:29:
dc:d9:54:f3:7c:7a:b0:18:a6:6b:dc:9c:b8:5c:e1:
b9:05:62:11:da:ec:97:ff:3c:04:98:3c:c6:75:76:
ae:53:f9:e8:4d:ca:a0:a3:b7:b4:1e:6a:0e:c3:d9:
96:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:43:EE:B8:8D:84:36:D4:04:57:B9:5A:52:6C:3A:24:F3:A9:37:B3
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ad:b8:52:fd:ef:dd:8a:e7:3c:27:a3:41:db:e3:b6:ee:ce:
6e:c1:b7:58:30:94:38:7e:88:85:e1:d5:8d:86:17:3c:a8:f4:
11:78:c6:83:49:34:46:62:15:67:97:6b:f7:79:00:be:ca:7f:
cc:c1:bb:3b:a8:39:24:5f:34:34:d4:6b:b4:55:b6:37:9b:6c:
04:66:96:ad:59:31:5d:00:0e:be:37:80:93:55:5a:8e:a6:b3:
e3:85:05:6e:c2:6a:1d:1f:88:12:ed:eb:3e:10:69:cb:cf:77:
04:96:95:72:06:5f:3a:fe:dd:11:89:89:1a:5a:51:0f:ff:00:
f0:62:d4:99:39:a3:51:14:b7:d0:f8:c1:0a:95:48:b9:42:e0:
dc:40:d5:52:f2:76:e8:12:f7:53:52:7e:a9:75:4d:64:a1:d5:
ee:73:18:b7:85:7c:6e:63:3c:e7:2d:45:68:1b:00:55:b4:af:
db:be:a6:71:d1:0f:90:28:20:d8:10:f5:68:9e:0a:fe:bd:0d:
f9:08:7b:87:43:70:fc:e9:40:f7:38:64:a5:73:b3:12:3b:95:
c7:44:13:56:b7:a8:6c:97:a0:91:52:6a:f1:f8:ef:a3:a6:ba:
d2:23:60:ee:06:27:63:fb:53:80:2e:a3:01:80:fb:9f:9b:cd:
f0:12:3b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:06:39 2025 by rpki-client