Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
File: vJxAXxQuU-tnscSZI6t5XoQyjJs.mft (raw, json)
Hash identifier: AVAucvK3b+Sa3M9jtg34Kbbz4aP2PBDwg5fjtXh/i+s=
Subject key identifier: FB:96:F7:D1:D8:07:E6:5D:A1:18:A9:B3:40:E9:FA:21:D1:F1:A4:15
Authority key identifier: BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
Certificate issuer: /CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Certificate serial: 019A45835E308BB7A7B4BE795CB49F5D83B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
Manifest number: 1707
Signing time: Sun 02 Nov 2025 17:00:28 +0000
Manifest this update: Sun 02 Nov 2025 17:00:28 +0000
Manifest next update: Mon 03 Nov 2025 17:00:28 +0000
Files and hashes: 1: irXjb7CbWugP3w5JDOFWDswYhlc.roa (hash: xfc5cfeM1faq3Raf49DNOnepZD3IOLsHNfYtcKklaZE=)
2: vJxAXxQuU-tnscSZI6t5XoQyjJs.crl (hash: bY/pFsC6o62yBF9gBOzLEJIlKRAfMQ3DPD+vZHHiE08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:45:83:5e:30:8b:b7:a7:b4:be:79:5c:b4:9f:5d:83:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Validity
Not Before: Nov 2 17:00:28 2025 GMT
Not After : Nov 3 17:00:28 2025 GMT
Subject: CN=fb96f7d1d807e65da118a9b340e9fa21d1f1a415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ad:ad:1d:20:a3:5c:47:3d:92:68:13:6b:98:
29:6f:da:47:eb:c9:41:1a:06:2a:26:03:5f:2c:fc:
40:d3:2a:9a:e9:88:f8:f4:07:ca:4f:fc:af:8a:e5:
1b:2a:39:75:a3:66:fb:4a:e0:3d:2f:de:10:b4:5f:
e4:1c:3f:4f:bb:4b:5d:fd:5d:af:d0:d4:81:0d:c0:
16:fe:80:46:07:5b:75:11:bd:48:6d:4d:d3:07:4f:
3e:9d:93:69:ae:bf:1e:69:ca:9c:e0:8c:5d:6b:15:
85:04:6d:61:5b:e1:07:80:cb:37:b0:c3:2d:e9:31:
e8:33:5e:39:3b:82:81:f7:8a:ee:ea:df:a4:10:d2:
09:2a:ec:a0:3d:3a:c5:d6:87:6e:c9:01:76:bc:bf:
ee:88:5e:df:a5:24:0a:c0:2d:10:51:39:67:a5:ad:
3b:1a:90:53:3e:15:10:72:7b:d9:f8:88:88:be:54:
04:44:d4:48:84:df:e1:86:61:19:87:8e:f6:c1:5d:
c6:1c:cb:d6:4e:a0:73:ff:da:3a:a1:aa:74:0b:92:
f3:bf:0a:3c:97:0c:2a:74:e2:b8:e8:9e:7a:ba:c2:
db:4f:69:31:66:64:59:86:71:80:a9:cf:c1:99:e1:
09:32:99:fe:70:d4:f4:f2:56:97:8c:96:a2:a2:ad:
1b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:96:F7:D1:D8:07:E6:5D:A1:18:A9:B3:40:E9:FA:21:D1:F1:A4:15
X509v3 Authority Key Identifier:
keyid:BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c9:eb:a4:43:a2:d3:38:e8:39:54:05:d2:3d:5d:49:a4:de:
0a:76:2e:0c:70:bc:1a:fb:a3:67:a6:d5:0c:87:ce:2c:d1:37:
c2:f5:51:1d:25:16:5b:cd:e2:d3:48:78:ce:44:b6:44:99:12:
08:91:47:6c:a8:4e:e5:49:28:a1:30:43:09:91:82:33:d4:94:
b0:17:9d:12:3f:69:23:f2:36:1c:eb:0a:06:7d:de:8a:2e:f3:
77:e7:14:a0:00:b1:94:5d:4b:17:db:44:bc:60:b7:8b:86:19:
94:a4:f5:ba:e8:4b:aa:86:02:7d:99:de:27:02:88:51:e1:35:
aa:16:96:7b:ef:12:c3:54:9d:63:7d:02:9c:7b:1c:21:90:4f:
80:61:05:ba:53:6c:00:99:b1:d6:f2:4b:b3:8a:de:39:db:52:
a4:24:2e:c1:a0:a0:a7:9d:12:ed:4f:f8:c0:0b:56:f5:2e:05:
0d:49:25:8f:14:09:f7:2d:f0:22:b6:39:f1:fb:65:1b:a1:5d:
a2:8a:c0:80:72:f1:62:5b:e8:df:81:5c:64:3c:58:3c:64:eb:
a8:86:41:21:64:1e:c6:73:28:11:e5:f4:bc:f8:5d:f1:b5:53:
56:6d:2e:8d:de:4a:70:99:ca:e2:c1:b9:02:48:2b:6c:69:d6:
9f:ff:f3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 01:23:00 2025 by rpki-client