Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
File: vP0tpUR9AHYW693Cpw_qxed8Sos.mft (raw, json)
Hash identifier: fWXL9P4tT2odbQB5xFXbqb8zsU7dK76eOPAz1XfWOQs=
Subject key identifier: 06:01:DB:F1:88:3F:EE:F7:03:CC:9F:08:A8:BB:7F:CD:09:E6:C3:56
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Certificate issuer: /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial: 019A251C6986D7004BD6DB0F1BF269209EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
Manifest number: 0F7E
Signing time: Mon 27 Oct 2025 10:00:10 +0000
Manifest this update: Mon 27 Oct 2025 10:00:10 +0000
Manifest next update: Tue 28 Oct 2025 10:00:10 +0000
Files and hashes: 1: 8qm9bEbxwfNKbG7VK6lFr1L7h68.roa (hash: 75uVkQx0ihlVy8p/hI6UBtxjUc4hu50c+jP7jjKtmh4=)
2: CwdCUQsFV7CyApTMyt6j3A_OJVA.roa (hash: SME0C7xkpjziLPa0GzpInguFdkdM75z/nCo/zXQqOyk=)
3: vP0tpUR9AHYW693Cpw_qxed8Sos.crl (hash: EYzfYh7slld6YHqeCG4sPXDu8FUR16d69cuxKUAcKVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:69:86:d7:00:4b:d6:db:0f:1b:f2:69:20:9e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Validity
Not Before: Oct 27 10:00:10 2025 GMT
Not After : Oct 28 10:00:10 2025 GMT
Subject: CN=0601dbf1883feef703cc9f08a8bb7fcd09e6c356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:42:97:74:89:64:ef:e3:48:36:d7:b4:64:
8b:75:d2:6c:2e:aa:d6:19:e2:49:cf:ce:1d:19:ac:
66:55:8b:e8:45:88:65:5c:a7:d5:bd:e7:68:ad:e9:
6b:e4:d9:6b:90:ff:0d:ef:d2:ec:b0:f4:0c:0e:30:
bc:85:cc:13:77:ca:a4:bb:8d:79:1f:c3:dc:22:7e:
41:a8:34:1d:84:38:ff:ca:b5:e1:9d:e6:36:79:fb:
70:c7:13:cf:c1:ca:2a:89:55:48:04:3d:9a:aa:b9:
38:67:ea:b8:bb:00:47:ff:b1:88:d0:f4:3d:fc:91:
48:ea:0c:f6:f0:57:07:45:b1:fd:43:fb:f7:5b:ea:
aa:46:4a:9c:72:46:0c:5c:7f:0c:d6:3c:3f:40:9f:
fd:30:92:1d:96:a2:bb:01:ff:62:ac:68:37:c2:95:
ec:0a:59:e9:64:82:a5:3a:cc:6a:5c:ac:6e:b2:c5:
c1:09:5d:e6:f5:6d:a2:9f:4c:50:8b:82:87:53:90:
c7:1b:54:ab:17:27:8d:02:54:de:cc:07:89:65:50:
1d:01:e9:aa:ab:3d:8d:8b:96:7c:0b:25:9c:6d:21:
60:7f:f4:51:91:0c:77:a8:29:03:bc:78:30:27:38:
7a:01:c9:d4:74:aa:dc:44:17:29:54:3f:bf:15:1c:
37:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:01:DB:F1:88:3F:EE:F7:03:CC:9F:08:A8:BB:7F:CD:09:E6:C3:56
X509v3 Authority Key Identifier:
keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9a:93:3f:77:f3:5e:d2:f3:e1:f3:29:6c:d9:2d:6b:c9:03:
df:07:0c:a6:a5:65:51:d9:59:23:c3:6d:b6:23:c1:98:18:f4:
72:63:ce:af:a7:11:51:48:89:11:b6:96:d8:2e:c1:12:1b:2d:
9e:74:da:1d:f4:01:81:d2:de:53:19:72:13:56:24:c1:6c:dc:
df:d2:2b:f2:5f:61:ac:e0:78:47:1b:bb:fc:0b:60:6c:29:ea:
fd:63:58:21:c7:1e:e2:eb:fa:88:5e:ec:82:7a:99:35:99:9c:
f4:9a:ca:14:ce:49:fd:cf:66:ea:b8:cd:ea:4c:e1:f5:b7:ef:
ab:74:ec:7c:49:c5:0d:3a:69:a2:bc:aa:36:76:79:e3:a4:69:
4c:4f:77:91:71:b2:3d:ac:ed:6b:fd:98:19:f7:6c:7b:fc:84:
ef:c4:3a:59:70:c5:0e:ae:c1:cb:02:39:f2:52:2c:e2:71:01:
69:af:37:d7:a8:c0:76:7a:82:20:22:75:ab:31:16:04:ff:07:
44:88:1a:ec:3b:c9:f0:fb:0e:b4:34:4c:80:0a:a4:85:72:64:
d9:70:e5:2d:42:fe:fa:d7:4a:60:bd:83:b2:1a:3c:97:7d:4f:
80:a0:45:ef:4f:7d:26:4a:0a:d9:17:64:1d:a2:1e:cf:81:0b:
8b:65:82:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:11:48 2025 by rpki-client