Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
File: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft (raw, json)
Hash identifier: ra4GpqJ8F53t1Qkpelx6gAmTsxbVZ8eZwXnl4sBFQFg=
Subject key identifier: 38:79:57:DB:4E:5F:A8:B1:4F:9A:05:32:78:8D:F8:E0:0D:60:3E:65
Authority key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Certificate issuer: /CN=bc127864cd43048550ed1699c584b5c14d80e098
Certificate serial: 0199FC2145B90CAB4817FD3290457E88F672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
Manifest number: 075D
Signing time: Sun 19 Oct 2025 11:01:02 +0000
Manifest this update: Sun 19 Oct 2025 11:01:02 +0000
Manifest next update: Mon 20 Oct 2025 11:01:02 +0000
Files and hashes: 1: DmspTgBWfwCRXv4YidxL9MxMuLs.roa (hash: 1HDwuoapwdXHm8uFL7aQ8AiJfzmdU8tLWRG1TVtsgIw=)
2: P4H-USxdX8paqqc5vUCjCPteQ10.roa (hash: RUKC58n+H3u6CbZuKe7grfw3EeWvKz+vXEAG57qC5LQ=)
3: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl (hash: 3SC2/9SC/5wmguNyTXpIy7VaK4uwzlxb+mlV50Haq50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:45:b9:0c:ab:48:17:fd:32:90:45:7e:88:f6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc127864cd43048550ed1699c584b5c14d80e098
Validity
Not Before: Oct 19 11:01:02 2025 GMT
Not After : Oct 20 11:01:02 2025 GMT
Subject: CN=387957db4e5fa8b14f9a0532788df8e00d603e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:28:56:91:07:32:95:e5:96:47:df:f2:04:59:
3d:1f:8a:b0:e7:81:72:38:39:61:73:48:b9:b0:17:
eb:63:05:00:40:88:f2:d1:26:ef:9e:08:d4:42:72:
31:2f:06:7b:83:fb:0c:93:1b:d2:f2:39:1e:0f:84:
5d:83:b2:78:a7:37:49:75:5d:cb:7f:4b:84:e3:01:
d6:a1:d1:ab:7d:a6:77:79:d4:7c:34:9b:3c:8b:95:
95:3f:dc:2b:2f:61:90:0f:4e:1b:fd:2b:67:c9:78:
bd:f5:1a:93:ec:ff:a2:3f:5a:04:d6:4d:00:3d:1f:
83:af:d0:a4:22:2c:33:6e:69:8f:ce:bd:63:a8:93:
57:75:d5:30:d2:5a:17:85:22:87:ef:e2:1f:ff:48:
52:3a:41:04:5d:80:1d:21:db:ee:a3:f3:e3:65:c2:
a1:f5:05:83:e3:e2:3c:4f:1d:3f:ac:31:1e:21:5f:
af:e5:ff:1f:8c:86:95:a6:6b:8e:02:db:ee:82:5f:
e9:80:76:50:48:25:39:d5:a2:66:aa:8d:b4:8f:ed:
4e:0b:b7:99:65:df:4d:d0:b5:3b:00:7a:eb:bc:00:
b6:4f:cb:ba:bf:c9:c5:14:5c:ac:14:f0:44:9a:5f:
1a:ba:c4:46:bf:60:37:a1:bf:f7:0c:d2:77:70:3f:
df:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:79:57:DB:4E:5F:A8:B1:4F:9A:05:32:78:8D:F8:E0:0D:60:3E:65
X509v3 Authority Key Identifier:
keyid:BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:1a:42:3a:16:e9:f1:69:28:fa:51:a1:a9:64:35:5e:90:7e:
2c:2b:95:7b:fe:27:ed:88:a0:d8:f1:b6:d8:05:42:45:83:73:
03:d7:69:34:1a:63:c2:5f:ae:36:e5:12:b2:ce:f4:2b:11:58:
2e:14:15:89:21:27:3f:0e:44:4f:bb:7a:4e:ae:80:b5:62:9e:
60:45:7d:d2:3e:e8:e5:68:c3:04:87:8b:f6:c5:18:9c:77:3e:
4e:45:6f:28:0c:ce:b3:7b:ac:1e:12:52:ac:25:7c:e1:de:3c:
20:1f:22:fb:aa:06:39:dd:75:23:12:fb:80:6f:f2:02:18:e5:
0b:a2:2d:5e:ca:9b:94:f4:01:73:b0:b0:fe:6a:eb:c6:21:21:
82:55:e6:14:fb:45:d8:2f:7f:21:0e:d5:54:06:46:57:6c:11:
0d:c7:40:be:b7:55:74:45:ac:15:0e:d5:c9:4a:e4:d1:4c:36:
20:86:11:db:7c:79:95:c9:1f:2f:74:2c:9f:a0:d7:1c:4f:f8:
b1:7c:a9:cf:57:80:69:d6:a4:0f:3f:c6:47:81:3a:3c:e8:f1:
5d:36:fb:d3:0c:82:55:10:ea:13:c3:04:89:5b:f5:2f:ab:cd:
12:8f:39:04:bb:33:2a:62:15:bb:44:49:54:9d:71:d3:8a:ff:
b2:9b:62:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:10 2025 by rpki-client