Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
File: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft (raw, json)
Hash identifier: pT9EFIV0DDTJaW/WFzGf7FQE3mAaPauoClhp+0Idrfc=
Subject key identifier: C3:BE:21:FF:D8:6C:31:B5:99:F8:96:70:59:5E:CE:0A:E6:65:79:65
Authority key identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
Certificate issuer: /CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Certificate serial: 019859EB697CA1BBBF11C973754CC8F595FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
Manifest number: 9E
Signing time: Wed 30 Jul 2025 06:00:56 +0000
Manifest this update: Wed 30 Jul 2025 06:00:56 +0000
Manifest next update: Thu 31 Jul 2025 06:00:56 +0000
Files and hashes: 1: D98Ck1_qKOXalzx0pMS_FarSGM8.roa (hash: u49BF5lQyjsLl1bn3ULD3SUQ9N/pcixaCTatnIvy4v0=)
2: tCV34_eFEm-bBTr3p-Dum9J6ZzA.roa (hash: lJs/8jun541iQ5FmJ+SShA8Wi27D6ss5N6YmTLmASl4=)
3: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl (hash: +dV2Fn8HplImDukD4KB4DsRBzjPbLb/j+62QxqB4Msw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:eb:69:7c:a1:bb:bf:11:c9:73:75:4c:c8:f5:95:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Validity
Not Before: Jul 30 06:00:56 2025 GMT
Not After : Jul 31 06:00:56 2025 GMT
Subject: CN=c3be21ffd86c31b599f89670595ece0ae6657965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:95:f2:23:c8:0f:c6:15:cc:3b:41:e0:b1:1a:
8b:b8:74:11:3a:ec:54:72:cd:48:1d:e6:18:28:fc:
5a:21:3f:70:9c:b8:f3:05:53:08:c0:59:f8:8d:e8:
bf:5a:a2:56:45:71:e6:c5:1f:0c:af:15:39:65:12:
14:f5:46:1d:7a:08:55:b9:aa:67:85:23:10:cd:99:
22:18:2e:85:9f:f2:fc:66:1a:ac:bc:a5:56:30:a7:
21:bf:ee:69:37:5a:86:7f:25:54:be:3a:5a:af:15:
3f:d9:b9:99:8e:4d:26:49:30:e6:bd:8e:59:55:cb:
0b:dc:a1:dd:99:92:8c:2a:ac:74:39:8f:90:e8:3b:
40:34:d0:2e:2c:6a:32:02:1e:6e:e9:bf:a2:3d:d3:
45:76:56:e3:4f:79:a7:d4:6f:73:bd:d1:01:3d:43:
d2:f6:79:ec:f7:d8:4e:42:7f:e6:45:4b:5a:47:72:
c1:0e:bf:47:3b:09:70:b7:1c:b9:c6:31:d0:ce:0a:
43:30:6a:dd:83:c6:4f:c8:f9:84:ed:f3:3b:74:28:
2c:d5:1f:e5:bc:fc:95:ae:98:9b:ca:ab:bd:d1:51:
8c:4a:fd:ad:1b:ed:3a:41:4f:ee:a1:a9:4a:b7:33:
e5:85:90:e1:27:89:79:bc:d2:77:c9:98:66:d8:d0:
36:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BE:21:FF:D8:6C:31:B5:99:F8:96:70:59:5E:CE:0A:E6:65:79:65
X509v3 Authority Key Identifier:
keyid:BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:93:d8:0e:42:79:51:5e:52:34:36:85:c7:20:71:0d:fd:8e:
ad:fa:e8:f2:43:23:a6:19:05:49:ce:2e:60:2e:d7:68:fd:f7:
5e:c0:b2:c3:c6:3d:3d:3f:2b:52:91:9a:57:0c:1a:30:17:b8:
bb:48:d7:b2:6f:ff:20:63:b5:e8:b2:46:d7:a4:07:7c:ec:65:
32:7b:39:79:27:15:eb:44:92:7c:d4:f4:68:9c:31:b4:d1:cc:
eb:62:59:8b:f7:55:0e:bd:dd:50:82:71:48:ae:0e:26:0d:09:
56:ad:ef:93:7f:61:8a:25:7f:b0:41:ed:cb:49:f1:0e:d0:37:
58:72:dd:dc:2f:b3:39:cd:8b:1c:c5:56:e5:0f:28:12:a2:60:
99:68:e7:30:64:db:65:24:0a:65:50:3b:5d:c4:41:b5:6a:74:
0b:d7:ef:0f:10:8c:16:b0:d9:ea:bb:78:b6:6f:1e:44:56:9b:
c1:fb:95:de:e6:36:b2:ec:04:a1:28:36:96:0c:07:2c:c2:1e:
66:63:22:1f:7f:92:6f:97:9f:f2:f5:20:43:b2:ed:c3:87:66:
d5:50:ae:a8:42:4d:5b:14:48:03:f9:40:57:41:12:ed:9f:3e:
11:30:fd:e4:50:d9:73:d6:cb:c0:c8:c8:38:75:d6:03:4b:33:
4f:26:48:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 08:07:18 2025 by rpki-client