Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
File: v3rjZp-Ef6J6abFLuH-Me_15nuA.mft (raw, json)
Hash identifier: D9BcL/ofQwXl39cMITIBuRnMW0t+Euhr+KK0ARSGAWE=
Subject key identifier: 9C:04:A8:29:A3:77:B0:A7:3B:58:FC:EE:8E:D8:14:55:08:89:39:B7
Authority key identifier: BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
Certificate issuer: /CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Certificate serial: 0199FE10110B03F55784F0B92C34C576FA19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
Manifest number: 0E58
Signing time: Sun 19 Oct 2025 20:01:29 +0000
Manifest this update: Sun 19 Oct 2025 20:01:29 +0000
Manifest next update: Mon 20 Oct 2025 20:01:29 +0000
Files and hashes: 1: Z6k4PVUyfZNvtBW6nB5nR2R0amg.roa (hash: gFgurKpY3RWD/+pqzWGTie0De0tX7ossY01q+RXg6WE=)
2: v3rjZp-Ef6J6abFLuH-Me_15nuA.crl (hash: pShMOwNdb9OduwWhuA7x7bRSQz/ahvb3PqLizu43UQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:11:0b:03:f5:57:84:f0:b9:2c:34:c5:76:fa:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Validity
Not Before: Oct 19 20:01:29 2025 GMT
Not After : Oct 20 20:01:29 2025 GMT
Subject: CN=9c04a829a377b0a73b58fcee8ed81455088939b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c3:db:70:7f:8b:6f:37:06:58:a1:d6:ea:81:
ce:6e:17:22:a8:62:e2:cc:42:5e:3d:17:43:ca:d9:
2b:95:59:7f:31:63:0b:9b:24:5b:2c:b4:f2:78:17:
01:e3:49:56:7f:97:82:b1:22:d5:9b:49:22:68:a6:
1c:03:c2:a1:5a:ef:93:63:05:ca:43:cb:12:6e:d3:
57:16:d0:f5:c7:1a:f7:85:a6:e0:8c:21:2b:d2:ef:
1a:49:fe:46:69:9a:2d:28:77:4b:b8:5d:77:6d:28:
37:00:f1:fc:e0:3a:97:51:04:10:02:d6:de:4e:a4:
97:f2:dc:08:82:0f:8e:8a:28:4f:7b:96:66:80:e9:
75:32:84:dc:84:82:f2:b4:ad:89:eb:3d:69:71:63:
31:8c:59:61:eb:ae:f5:f6:bc:d3:41:66:6c:70:47:
de:bc:d3:14:d0:dd:08:14:9b:ba:f0:e8:81:f8:cb:
56:8a:ec:37:29:d1:c6:c6:cf:8d:b5:e9:bf:bd:73:
c0:b5:a1:21:74:8d:35:de:6e:e3:e6:e0:76:46:c1:
73:ad:7c:a8:c7:30:8b:12:c6:60:cf:70:f0:90:30:
b1:11:90:5a:0a:24:48:fb:70:39:ec:12:63:25:b1:
bb:20:52:69:2a:bb:09:3a:1b:9e:fb:16:f8:7d:72:
7e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:04:A8:29:A3:77:B0:A7:3B:58:FC:EE:8E:D8:14:55:08:89:39:B7
X509v3 Authority Key Identifier:
keyid:BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:15:78:3f:77:a7:43:9a:68:10:c8:9c:52:f1:a8:5d:e5:4a:
43:bf:0d:bd:96:bb:b8:75:7e:74:02:3c:e2:26:d6:61:0e:48:
22:b4:50:29:d9:c9:b4:db:45:b5:07:77:c6:b4:75:42:79:40:
71:fa:e9:34:67:89:cb:35:a2:5f:3c:8e:1d:07:49:1f:22:b1:
fc:9d:b8:4e:4f:23:01:12:9f:74:04:88:bd:31:e1:74:50:7e:
24:df:4e:7a:c1:ac:03:96:af:a8:3a:07:64:49:13:1d:57:9a:
2f:ea:e4:be:31:22:58:ed:59:62:51:22:a8:cb:e6:b1:67:7c:
35:ea:4d:36:da:24:16:2f:d9:a0:d7:d1:72:4d:86:1f:79:ab:
f6:08:3c:d5:ca:fa:74:f5:37:9d:08:94:5a:53:99:c7:7d:8a:
ab:7f:fd:e9:7f:a2:86:4e:be:f6:c6:01:b0:9c:79:5a:06:8e:
8a:f3:71:b3:42:0c:c4:94:59:96:8b:aa:14:fb:25:1c:78:20:
cb:4a:28:bf:9d:ad:64:d6:e4:3e:a5:4d:c0:db:41:cb:0d:ed:
7b:98:02:d7:34:b0:c7:93:3b:f3:f6:99:57:1d:a2:27:c9:0e:
64:30:e8:b0:55:da:6f:5a:b7:dc:5b:55:67:df:9a:19:1c:8d:
8b:44:de:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:27:34 2025 by rpki-client