Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
File: vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft (raw, json)
Hash identifier: g+b20doz9M0NPV6jnP1yYLDc5tFbbv0giSbGcaB6VUg=
Subject key identifier: 7B:A6:29:22:9B:AA:EA:65:AE:51:89:7A:26:D5:E7:3D:DB:03:4C:CF
Authority key identifier: BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
Certificate issuer: /CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Certificate serial: 019A7225B339C6C999D7AE2F116F575AF6E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 09:01:04 +0000
Manifest this update: Tue 11 Nov 2025 09:01:04 +0000
Manifest next update: Wed 12 Nov 2025 09:01:04 +0000
Files and hashes: 1: PtAXY24lYtkFRHade4pTjXormLM.roa (hash: 1elZ7b8fLDvNPO81SeVzVwIAYPfLoIwWb4acP64QkQU=)
2: vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl (hash: 9N/sAaluVsv9krt6qBY0kozr6MZXWosOtiZNcyezKXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b3:39:c6:c9:99:d7:ae:2f:11:6f:57:5a:f6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Validity
Not Before: Nov 11 09:01:04 2025 GMT
Not After : Nov 12 09:01:04 2025 GMT
Subject: CN=7ba629229baaea65ae51897a26d5e73ddb034ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:44:99:67:b5:46:e0:e3:c9:a4:38:40:37:7f:
50:13:84:a1:1b:6e:17:80:22:b2:06:84:5e:5d:bf:
af:70:2e:45:1d:55:ee:b0:f0:fa:15:bb:29:f3:15:
e0:f0:0f:ed:9f:36:73:01:5a:2b:80:62:90:17:b9:
3a:7d:64:0f:4c:07:85:11:55:31:53:11:52:d6:72:
41:15:4e:ce:67:90:d4:85:07:d5:8b:13:41:95:87:
4a:18:ce:56:1d:87:b7:18:cf:40:2b:13:72:52:b8:
7b:bc:39:7d:d2:1c:32:40:84:24:4f:1b:4c:da:16:
46:21:52:eb:36:72:67:87:4c:3b:78:00:a4:21:8e:
08:97:65:91:ba:1b:2e:9b:b0:ff:07:5c:50:d1:9c:
6e:f1:2c:49:ef:2b:60:f9:8b:74:a7:df:6a:c5:1f:
04:c4:49:a4:c3:09:76:b4:ee:af:e9:c5:b6:9d:4f:
f8:51:6c:1c:18:e4:d6:f1:3a:bf:40:e7:0a:6d:5b:
25:2c:a4:ff:55:91:1d:2b:47:f5:6e:e2:95:b3:8d:
72:4a:b9:3c:8f:5c:23:1f:93:28:b3:fc:49:bc:3f:
a4:36:13:a7:31:fb:c8:a2:78:3f:7f:29:11:d1:64:
9a:42:56:ed:ea:ae:cf:a0:8f:59:5e:e0:bb:87:45:
71:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A6:29:22:9B:AA:EA:65:AE:51:89:7A:26:D5:E7:3D:DB:03:4C:CF
X509v3 Authority Key Identifier:
keyid:BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:72:7f:87:33:83:30:57:4e:35:6b:c4:09:8c:dd:d1:8c:0d:
ff:e5:3a:80:ed:bb:16:db:18:99:d3:e5:0f:2e:3c:62:6a:8c:
e8:02:39:ff:f5:9b:21:f9:79:17:35:0a:00:5d:84:1e:26:28:
b9:7f:96:4f:46:34:8c:39:c2:9d:21:3f:50:56:ab:f1:f4:18:
33:07:0e:5d:be:69:d7:af:69:0c:22:3a:a1:b4:eb:72:cd:ca:
66:41:e6:23:dd:60:d8:17:28:37:ad:7c:19:29:0b:bb:10:b9:
35:b3:c6:a7:4a:47:b6:f8:75:b2:7f:ed:ef:16:2f:53:c0:2d:
c9:e1:3f:e1:55:d1:aa:ca:a5:ba:ae:23:0f:62:59:eb:fb:82:
9f:b3:cc:50:1d:34:b9:de:9e:02:a4:02:71:de:eb:47:f8:4a:
f4:ad:49:67:ab:69:3e:70:fe:41:11:b2:fc:1d:17:5b:7d:e7:
7e:25:91:0a:03:dc:84:66:fc:03:d8:03:57:49:00:1a:f3:e0:
e9:36:43:88:2d:90:23:79:c0:f0:6c:67:b5:bb:bc:c5:49:85:
3b:89:30:38:1f:51:b1:d2:2e:b6:fc:7b:65:d7:10:9c:d8:32:
9e:ca:fd:fb:77:1e:5e:3d:c0:65:a7:e2:3f:fa:5e:ac:a3:39:
da:03:90:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:06 2025 by rpki-client