Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
File: vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft (raw, json)
Hash identifier: gq+zZC7OKFvftH5Yuz+hzNqKQJCD8KASQkI7VhFcj5k=
Subject key identifier: E9:B2:E5:33:C5:81:41:6A:1E:AA:1F:6E:59:6B:3D:B6:55:33:48:59
Authority key identifier: BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9
Certificate issuer: /CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
Certificate serial: 019A7225CAAFE2DD1900BCBCEC868C9348F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
Manifest number: 03ED
Signing time: Tue 11 Nov 2025 09:01:10 +0000
Manifest this update: Tue 11 Nov 2025 09:01:10 +0000
Manifest next update: Wed 12 Nov 2025 09:01:10 +0000
Files and hashes: 1: AFVAjCiROQ32Z_efvRaORNpa2fQ.roa (hash: STiLszZIpw1MlrUzOI5Ii3ZfZdoAbfQenvPasDTHJCA=)
2: vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl (hash: quEJQqjKZAtBnznao7JT/OZVMuC01nvlJR9jmcHHyak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ca:af:e2:dd:19:00:bc:bc:ec:86:8c:93:48:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
Validity
Not Before: Nov 11 09:01:10 2025 GMT
Not After : Nov 12 09:01:10 2025 GMT
Subject: CN=e9b2e533c581416a1eaa1f6e596b3db655334859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:e8:b9:f8:34:79:09:a4:de:15:c5:49:de:
37:c6:7f:70:34:19:6a:a8:bd:c7:17:c4:6b:b1:2d:
07:4b:41:77:a9:63:d1:87:0e:8c:9d:da:66:85:1c:
60:0b:bf:82:d4:67:c5:b0:fb:02:7a:15:22:4b:62:
33:a7:5d:26:d2:1a:ba:13:3a:8c:5b:d0:04:40:14:
2f:ce:7e:3e:50:5c:57:c9:62:09:80:54:f2:9c:7e:
ff:42:49:d5:ee:40:3d:f1:7f:8b:b5:e0:4e:79:da:
ed:ea:b2:9d:76:40:c3:0e:d0:b0:1e:6d:40:a3:09:
b8:2a:da:32:ec:0f:eb:07:57:98:3f:34:74:e2:36:
05:e7:8e:6b:cb:14:9d:92:69:27:fc:96:40:98:7e:
66:4d:6a:eb:05:7b:66:05:d7:e8:8e:a7:de:c7:37:
af:5a:ef:8e:df:a7:37:5f:29:45:a8:43:28:af:70:
e7:4f:18:0b:8f:05:dc:35:46:bf:8b:0a:c6:72:b7:
ca:40:53:d6:8a:61:11:34:d2:cd:ed:6e:a6:e3:2a:
7a:1f:ea:24:6c:b3:08:bb:ed:81:dd:7b:d6:fa:7a:
37:d2:fb:d6:d3:14:e1:8c:b0:b3:e7:a8:6f:84:36:
ae:37:31:0f:80:71:7a:f8:c9:6a:f6:4a:af:bd:bf:
ba:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B2:E5:33:C5:81:41:6A:1E:AA:1F:6E:59:6B:3D:B6:55:33:48:59
X509v3 Authority Key Identifier:
keyid:BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:00:54:6c:77:d1:9d:2d:75:8f:b2:8b:45:2f:08:a9:87:4d:
f1:cd:2e:0d:1e:29:ed:eb:1e:a7:f8:16:e0:c7:18:85:31:59:
d8:73:c9:38:69:73:2d:11:08:c5:19:84:11:81:60:d0:d9:c4:
a3:1d:19:eb:70:1d:fa:11:71:20:f0:63:d7:b5:62:22:54:79:
9c:79:0d:b2:cd:d6:dc:e2:48:11:3e:7c:cb:5f:86:b8:d7:fc:
2b:74:28:79:e4:40:0e:49:a9:1a:7c:bb:36:f1:b3:85:ac:78:
78:8b:6a:7f:67:7a:8c:3d:e1:44:7c:78:b8:83:d1:3b:19:24:
f9:20:cb:d9:1f:d8:ee:98:1f:ca:7d:69:25:ae:4f:4e:ba:34:
a5:8b:ba:6d:a2:f2:7a:d5:73:06:3d:d4:80:65:fa:9d:9a:26:
fa:ee:0a:91:3f:c2:86:8f:8b:62:3c:57:29:26:86:12:a1:58:
96:f5:75:a5:e5:7a:73:d2:e7:b5:6c:f7:d8:21:c9:c4:88:64:
61:62:2b:61:85:c4:d6:0b:43:bb:79:80:8a:38:a6:e1:5b:45:
a4:dc:79:35:e4:fd:f4:79:58:3b:92:48:2d:e2:87:78:a6:6b:
76:3d:6c:52:fd:96:2d:20:62:66:64:7f:06:dc:17:5c:a1:7a:
bd:2f:67:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:46 2025 by rpki-client