Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
File: vRkRNDImIp0gPqMmqdadT8NGxXU.mft (raw, json)
Hash identifier: BStxZtdgC/P07zDe3+qiHX39pFR+Iv6101oplbCR5N8=
Subject key identifier: 5B:F0:DA:66:C2:B0:70:76:73:0D:62:10:D5:18:1C:23:55:B1:5F:89
Authority key identifier: BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75
Certificate issuer: /CN=bd1911343226229d203ea326a9d69d4fc346c575
Certificate serial: 019A7301839B527A0A948156A72B69D4716C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
Manifest number: 0B59
Signing time: Tue 11 Nov 2025 13:01:10 +0000
Manifest this update: Tue 11 Nov 2025 13:01:10 +0000
Manifest next update: Wed 12 Nov 2025 13:01:10 +0000
Files and hashes: 1: 8vm_891vteHi79TbQnGkI8cOQqI.roa (hash: JfWucuJfmWPdMg2hC2g4IUg1QZRP4I3zcWXq8eNKv+E=)
2: vRkRNDImIp0gPqMmqdadT8NGxXU.crl (hash: RMqOGcU4CHC1M0Cektaw15wjK8Znt3iPC70zJbv6k0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:83:9b:52:7a:0a:94:81:56:a7:2b:69:d4:71:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd1911343226229d203ea326a9d69d4fc346c575
Validity
Not Before: Nov 11 13:01:10 2025 GMT
Not After : Nov 12 13:01:10 2025 GMT
Subject: CN=5bf0da66c2b07076730d6210d5181c2355b15f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:52:c2:fc:7e:5c:74:59:77:20:0c:94:f9:a1:
12:0c:13:a2:0d:6d:49:82:af:16:dd:c8:11:36:13:
7d:35:eb:63:7f:1d:d2:49:50:8c:a8:4f:46:b2:a9:
3f:26:9b:97:c9:f1:67:0c:30:7e:4f:5b:27:09:54:
0c:21:f2:33:a5:ff:3b:17:cc:8e:c8:d3:b9:8c:da:
36:ab:c4:b9:d4:72:ec:35:30:cb:1c:ea:46:7a:61:
ff:dd:8d:44:20:bb:02:ff:e5:ea:b9:97:d4:43:4a:
8c:36:e2:3c:39:f6:43:06:14:fa:59:53:ad:21:aa:
7d:ca:ce:8b:81:ba:7e:27:c9:e1:64:40:d1:18:f5:
34:41:7b:ca:9e:41:48:33:f6:f0:94:c7:42:1f:d8:
b1:79:69:f6:e5:ed:c9:b7:d2:a1:85:3a:23:1b:5f:
7e:3c:7f:bc:a8:d0:55:5b:2f:e5:ab:66:68:2e:49:
4c:4f:06:b4:49:7a:44:ed:3f:71:51:89:f0:b9:6c:
ff:04:29:b3:e6:12:93:ee:0f:1d:cb:63:de:57:15:
3b:1c:b4:38:ea:3e:99:25:80:5c:4d:1c:7c:16:59:
93:ec:8d:f2:48:19:bb:8e:ae:8b:d6:c5:87:08:7e:
9b:3b:fd:5b:e6:8b:1c:62:cc:89:7b:2e:cb:9c:7f:
aa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F0:DA:66:C2:B0:70:76:73:0D:62:10:D5:18:1C:23:55:B1:5F:89
X509v3 Authority Key Identifier:
keyid:BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0a:f2:b6:db:bf:3e:0c:7b:71:b5:40:f1:4b:62:c3:02:07:
2d:99:ca:7d:79:d7:8d:6c:33:c6:d8:c8:98:0c:30:7d:7a:87:
96:01:8a:9c:ce:e8:8c:c6:30:c9:1b:50:29:c0:44:8c:02:62:
da:bd:23:07:bf:62:99:20:1b:12:27:3d:31:d3:2c:97:79:e3:
ec:25:20:1e:2a:92:21:43:9b:39:6c:76:14:6c:1b:7c:f1:06:
95:56:07:84:90:e6:01:df:18:eb:42:93:2e:7f:0e:b1:ca:0a:
65:f3:60:44:e9:4d:2d:49:b0:81:60:b8:78:3e:96:09:e5:93:
da:95:0f:f4:db:49:25:ce:62:db:13:21:ce:1f:7c:35:7d:28:
f6:34:0f:27:fa:53:81:ab:a2:f5:93:5c:ef:c9:af:19:8c:3c:
44:cc:e6:b4:13:d3:46:29:1a:37:90:87:a2:10:f6:17:78:bb:
f2:e5:44:05:77:be:31:5b:68:5d:17:7b:9f:64:c6:a4:e1:7e:
99:de:0c:f4:0e:e8:ba:4b:50:c6:d4:f8:f6:7b:70:b3:54:8a:
0c:df:16:f0:e3:ac:22:d3:4b:c4:d1:75:58:bc:39:98:56:e0:
ad:39:d1:6f:65:6d:dd:a5:b7:62:23:24:c8:bb:82:a5:09:7b:
6b:79:15:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:26 2025 by rpki-client