Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
File: vR211yi9J2tMdS4SWlCP-HhK0oU.mft (raw, json)
Hash identifier: hrDiYoG+QMUyeGWNbrAfEyBaIM4DIT6ON1yelWTuOwU=
Subject key identifier: 59:9D:32:AB:C4:23:9A:4C:7A:AB:EA:4C:56:CD:A8:7D:AB:95:EE:93
Authority key identifier: BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
Certificate issuer: /CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Certificate serial: 019A71B8C3AAE11FE69FE3D77EE2E752E219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
Manifest number: 12C5
Signing time: Tue 11 Nov 2025 07:02:05 +0000
Manifest this update: Tue 11 Nov 2025 07:02:05 +0000
Manifest next update: Wed 12 Nov 2025 07:02:05 +0000
Files and hashes: 1: 7IfWcJSratNnlfLMrnbIuQWgR8I.roa (hash: S2czlmmJLkq2AObWA1vCv3NtLmwVMJ2FnTs6ITj1XcQ=)
2: vR211yi9J2tMdS4SWlCP-HhK0oU.crl (hash: L9ImkduiKFpxneK+rKbKxrkGeNCqtC0mdQx4Lnc5UOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c3:aa:e1:1f:e6:9f:e3:d7:7e:e2:e7:52:e2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Validity
Not Before: Nov 11 07:02:05 2025 GMT
Not After : Nov 12 07:02:05 2025 GMT
Subject: CN=599d32abc4239a4c7aabea4c56cda87dab95ee93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:8f:81:d2:fc:2e:1e:51:63:08:bb:97:4a:
a6:67:6d:dd:23:73:45:1c:f2:b1:a3:e9:86:de:5d:
b2:64:02:a3:43:b1:56:89:87:90:56:01:b3:e8:79:
0a:a6:99:1a:27:a3:a0:e9:70:55:50:98:21:ff:34:
75:5c:a1:ba:5f:2c:ee:82:d1:46:15:af:00:f8:33:
9b:39:72:be:b0:5b:b3:53:af:8b:c1:d5:c8:9b:51:
ab:11:5b:32:f3:83:94:a6:02:8e:b3:75:a3:6d:41:
29:9a:bb:00:96:a9:41:5d:41:aa:fe:ac:2f:bc:31:
f3:e7:60:c6:97:34:53:b1:1d:36:f6:de:aa:31:3d:
c3:83:bc:35:9f:41:43:12:53:de:6d:04:f5:6e:f3:
63:55:a0:7b:e6:b3:d0:85:05:1b:9a:ee:a9:d8:c4:
82:fe:9e:3c:29:10:b8:42:bb:6a:9c:57:16:29:ba:
83:0c:c9:83:39:4b:9a:10:05:7a:a4:03:2b:9f:f7:
10:72:fb:35:33:71:bc:14:d4:53:10:ea:be:22:c6:
88:14:ae:b6:83:be:f1:7c:8d:64:49:f0:a5:26:50:
d7:bd:e1:d2:e0:f4:e9:72:5c:2b:7b:c6:fa:29:5a:
39:9e:c5:e6:f9:4d:ce:d4:c6:59:ce:2f:f2:11:78:
41:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9D:32:AB:C4:23:9A:4C:7A:AB:EA:4C:56:CD:A8:7D:AB:95:EE:93
X509v3 Authority Key Identifier:
keyid:BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:21:d4:14:36:52:b9:f9:60:75:71:3b:bd:fa:fa:98:b4:0e:
56:54:06:a8:71:d8:66:34:8d:de:0c:92:1e:57:45:b1:75:56:
76:ba:1d:56:8d:81:fa:07:02:2d:63:43:cf:ee:ef:17:80:b5:
33:a9:1a:13:1f:1c:b7:83:10:f2:38:88:4c:d0:a1:59:56:a5:
12:a0:42:3b:c2:2d:6d:14:64:fd:dd:9d:19:d0:0e:0e:92:7f:
99:c9:31:1f:91:f9:72:a1:11:e9:10:27:e3:29:ee:cc:e8:ac:
d7:7f:49:74:12:61:1e:50:cc:99:b8:83:cc:9f:8d:05:06:a5:
9c:c7:47:60:87:1c:e7:0c:55:1b:ca:a4:d8:89:1e:22:73:9d:
c3:c0:eb:4b:09:33:cb:23:b9:e1:c1:32:a1:74:ed:fb:33:42:
57:d2:a5:85:55:bf:8d:d3:3d:41:2c:8f:27:c1:c2:b1:1b:78:
ad:d9:83:88:c2:a3:65:84:60:d1:12:e6:f3:5f:65:8d:e3:26:
4d:8d:27:92:1e:41:7a:6d:9a:db:c6:2c:b8:6d:43:89:95:0d:
f7:df:b3:06:1e:08:d3:eb:ba:a4:29:58:bd:d5:c0:4c:c1:96:
b9:b7:c2:1d:07:49:ed:77:69:e6:b9:4d:b5:fe:cb:4e:24:bc:
5c:26:e3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:32 2025 by rpki-client