Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
File: vJ7I21lyYHXuKfXvyQth5zwH968.mft (raw, json)
Hash identifier: ENoAySALSFMcjdDdPuHcYmoUwm804GrrwV+09+SUxwg=
Subject key identifier: CE:02:07:D4:3F:E4:AC:A1:6A:55:12:54:D4:7B:3E:3E:D3:CE:EF:0F
Authority key identifier: BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
Certificate issuer: /CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Certificate serial: 019A71B8E2F438FDBA7BA8539F41F1C78B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
Manifest number: 0C6B
Signing time: Tue 11 Nov 2025 07:02:13 +0000
Manifest this update: Tue 11 Nov 2025 07:02:13 +0000
Manifest next update: Wed 12 Nov 2025 07:02:13 +0000
Files and hashes: 1: vJ7I21lyYHXuKfXvyQth5zwH968.crl (hash: XMfEjZCS5ZRBlKx6pHdM2ptIukjpgCqGLsuonQn6qCM=)
2: vsYS1yNC27K4go1u55pkiDiNTso.roa (hash: VwZn+ljb2itH/kH3n3gJQ8cRZDUKa5y/b7TBam8fThU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e2:f4:38:fd:ba:7b:a8:53:9f:41:f1:c7:8b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Validity
Not Before: Nov 11 07:02:13 2025 GMT
Not After : Nov 12 07:02:13 2025 GMT
Subject: CN=ce0207d43fe4aca16a551254d47b3e3ed3ceef0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fb:ef:42:0d:fb:f9:3f:09:a0:fe:c4:a6:b4:
08:a2:2a:8d:ee:34:af:02:52:73:81:f1:2f:69:63:
73:89:b9:3e:76:c1:d5:2e:a8:50:82:a7:bd:53:8c:
71:55:bd:97:48:52:7b:0c:39:d3:ad:e4:85:42:63:
cb:70:d0:35:ff:20:48:97:bd:39:2e:f3:73:01:ae:
d9:66:6e:1d:b2:6b:cf:92:97:57:d6:e5:3e:2e:ab:
a8:3f:37:d3:85:33:51:f1:de:61:d3:d9:43:75:54:
8a:27:a6:8d:21:78:d7:1e:2a:89:90:86:c4:f1:d7:
5b:48:99:83:25:22:02:df:30:52:a5:08:1b:d1:db:
08:39:3b:5f:3b:ea:da:18:e1:75:63:c7:32:c2:9d:
b3:05:5f:63:de:4f:d2:f7:ba:41:b0:3b:8b:e9:db:
58:46:d8:83:4d:76:9a:89:5a:93:73:79:10:df:fd:
d7:87:b9:62:72:2d:5d:5f:b9:8c:27:e2:41:29:8b:
66:37:16:c7:b5:dd:bd:13:65:26:40:ce:bb:84:e1:
98:d9:20:f1:7f:0d:06:3f:78:19:15:a0:dd:c3:0f:
7b:06:12:97:d3:38:e2:85:43:81:77:b4:c1:81:fc:
ea:ba:e7:f5:e0:16:74:f0:b8:e5:2a:f0:e3:30:b3:
37:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:02:07:D4:3F:E4:AC:A1:6A:55:12:54:D4:7B:3E:3E:D3:CE:EF:0F
X509v3 Authority Key Identifier:
keyid:BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:16:fa:05:78:6c:f0:99:6b:d9:87:7d:2c:76:57:d6:00:24:
33:d6:89:18:20:48:50:52:88:43:fc:12:34:35:45:c0:68:0e:
be:8e:af:66:03:8e:a1:c2:a7:90:3f:f1:ed:63:fb:db:a7:ee:
1c:c0:5e:92:6b:c8:d3:32:27:41:40:a9:a2:18:33:2c:87:75:
22:33:ae:33:ce:c3:0f:94:8d:da:d1:0b:92:4b:78:ed:94:45:
31:e7:5f:b4:a1:29:ee:9a:af:d9:ef:9b:60:a2:99:b0:72:f4:
da:fa:1f:e2:2f:25:cd:3f:5a:67:6c:e9:fc:5b:ee:2b:3b:ed:
b2:eb:17:e5:20:6f:91:9d:2d:6f:08:58:d2:aa:c3:4e:cf:20:
5e:8b:8c:e0:f9:00:5b:a0:ba:f0:ea:a8:5a:ef:cd:30:dc:5a:
31:84:c4:88:35:bf:a3:07:14:1a:d5:f6:b8:e3:77:ef:2c:a6:
b5:f4:37:fd:19:0f:ca:8e:c1:82:79:b1:a6:f4:d4:7d:0f:28:
f0:0a:56:58:5e:8f:df:c9:d5:c3:6a:95:be:0b:90:a8:6f:91:
83:36:4f:6a:75:86:a0:ca:c9:bb:c3:67:22:ec:0e:7c:98:c4:
df:b7:c7:cb:df:b7:58:60:97:f9:8b:c2:1b:c3:67:89:97:65:
15:94:1e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:45 2025 by rpki-client