Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
File: vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft (raw, json)
Hash identifier: mIkvSyZ0tIUd0K83OALpichWAuJHDlvrA0hzriDzFAs=
Subject key identifier: 43:61:C5:A9:F4:F4:3E:B8:3C:62:1A:AA:FE:8D:47:B1:6E:87:B2:87
Authority key identifier: BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9
Certificate issuer: /CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
Certificate serial: 01991876B263659B72CECB3F8ADC35EED5C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
Manifest number: 033A
Signing time: Fri 05 Sep 2025 06:00:56 +0000
Manifest this update: Fri 05 Sep 2025 06:00:56 +0000
Manifest next update: Sat 06 Sep 2025 06:00:56 +0000
Files and hashes: 1: AFVAjCiROQ32Z_efvRaORNpa2fQ.roa (hash: STiLszZIpw1MlrUzOI5Ii3ZfZdoAbfQenvPasDTHJCA=)
2: vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl (hash: i6f3fYr+MqCQfGnJ21hfKNAjt3DijYJgRqVNMOlNb7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:76:b2:63:65:9b:72:ce:cb:3f:8a:dc:35:ee:d5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
Validity
Not Before: Sep 5 06:00:56 2025 GMT
Not After : Sep 6 06:00:56 2025 GMT
Subject: CN=4361c5a9f4f43eb83c621aaafe8d47b16e87b287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:40:f9:b4:92:d8:f2:ee:a8:7c:72:31:10:
09:1c:6f:95:f7:56:e2:ac:75:0e:1f:2e:40:6b:eb:
f2:d7:8f:ae:25:40:5c:6c:6d:99:93:bf:7a:54:14:
b7:89:e0:3d:b6:77:34:9f:64:fd:0a:da:88:a4:07:
ac:74:e1:16:3d:bf:d1:e2:87:a9:0b:4e:87:38:5f:
86:10:5a:be:26:28:54:6d:f0:71:f3:84:0d:e0:97:
01:28:bc:e0:bd:65:09:39:ef:6c:bc:e1:93:9b:70:
5d:c5:3b:c9:84:3f:ed:3b:d0:d1:74:4b:fa:8f:ff:
8c:45:8b:a5:68:f3:88:24:08:ef:4d:06:81:2b:68:
79:89:95:1a:0e:f0:3e:c1:cc:34:8f:96:d6:36:b9:
81:56:fc:5a:fb:71:a2:9d:24:75:63:aa:1d:6e:cc:
41:b9:cf:b1:02:c3:2c:4e:05:2a:f8:3b:30:e7:2a:
fa:bd:c1:5d:66:0d:76:76:d1:23:68:67:b8:09:d3:
c3:27:f5:93:8f:46:00:36:95:73:6d:bf:31:6f:88:
22:1f:6e:2a:7a:7d:82:93:b8:c8:27:94:8b:e9:15:
8d:b8:c2:fa:6d:29:50:18:bc:50:c6:49:48:55:51:
18:61:82:6b:d2:79:bb:05:42:8c:83:c9:e1:37:a2:
6f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:61:C5:A9:F4:F4:3E:B8:3C:62:1A:AA:FE:8D:47:B1:6E:87:B2:87
X509v3 Authority Key Identifier:
keyid:BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e3:2d:01:67:70:9a:f9:15:05:df:8f:38:5d:13:5a:e6:15:
70:e0:aa:8c:92:6c:66:33:31:4d:71:b9:18:af:d3:fd:c0:3b:
38:a6:cf:0e:8f:f3:79:69:b8:30:d0:f0:e8:f6:5f:c3:95:bc:
a1:13:a9:8d:82:19:89:78:7d:b2:55:6f:f4:25:e8:70:9e:56:
f5:a0:04:a1:7a:83:5a:93:54:35:1e:82:b0:ef:2e:08:08:ec:
ae:0d:1f:37:35:61:8b:30:15:3b:ec:8a:8e:cc:25:6d:14:2d:
b0:77:c5:b4:d1:94:5c:5e:6b:be:98:23:db:41:a8:38:98:26:
ed:1a:05:13:4a:a4:0c:14:42:50:c0:f1:60:8f:e1:6b:1e:31:
79:f3:09:d3:16:b2:5b:43:b9:88:60:6f:0f:50:40:17:96:49:
89:e9:3b:35:d3:40:cb:3e:13:bd:f6:36:f1:c5:1a:25:fb:7f:
56:d3:ba:ef:43:19:a4:12:75:9a:1f:48:6f:15:9e:3f:cf:03:
fe:75:b6:49:91:58:3f:dd:4e:e8:9b:51:19:5a:bf:7a:cb:86:
6a:b0:0b:c5:b7:37:fe:4a:f0:cd:70:db:11:c4:41:f5:43:5b:
6c:64:12:96:d7:5f:0a:ca:e4:08:7e:7c:03:76:ac:f4:a0:fd:
2a:35:05:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:33:07 2025 by rpki-client