Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
File: vX2BeM7FzTdlSKkEkRf0acCnQxw.mft (raw, json)
Hash identifier: 24s6SVFaBUSuL4c2W2TQmVhlIaLxjpF42zzolZfDXeo=
Subject key identifier: 2E:03:80:34:39:E9:F4:68:4E:41:1B:10:82:25:C4:0D:1C:E3:A5:6D
Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Certificate serial: 01993ACB582B0D18311BF1D49CA04DAC98B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
Manifest number: 168D
Signing time: Thu 11 Sep 2025 22:00:28 +0000
Manifest this update: Thu 11 Sep 2025 22:00:28 +0000
Manifest next update: Fri 12 Sep 2025 22:00:28 +0000
Files and hashes: 1: Ndw7HVDtjP0mKBQVp0z9A-CbAvY.roa (hash: Gvsu5qwW/HZfnE/HXNRfeWRnDFzMBicoBm7giJXuEbI=)
2: fHkoAZxOrb4jS9uptQ9di3MomH4.roa (hash: OuL9G7DUjjtpe04g3KNS/iW0YgxTMwqsjJxCgrATRoE=)
3: oIkgSArRD9BLeVqu4qZR409U7LE.roa (hash: zD/jOdZf9Aicccl6tAIlMNbflON8Kndy+8p4Z3ebRkM=)
4: vX2BeM7FzTdlSKkEkRf0acCnQxw.crl (hash: nhvHZbRXLYEDk/WbV+LaUTTKWr0NPy5OKyqi5uIbFvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 21:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3a:cb:58:2b:0d:18:31:1b:f1:d4:9c:a0:4d:ac:98:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Validity
Not Before: Sep 11 22:00:28 2025 GMT
Not After : Sep 12 22:00:28 2025 GMT
Subject: CN=2e03803439e9f4684e411b108225c40d1ce3a56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bf:25:d8:d5:d5:e1:21:4b:b3:72:89:5c:16:
9a:48:3c:a7:76:37:67:32:13:fb:a0:3a:1c:e4:2f:
94:e5:34:07:a0:7b:57:90:b5:46:f9:60:f0:c6:e7:
34:43:58:e3:24:cd:6d:a9:29:88:cb:b9:ff:1f:65:
d5:35:63:7d:33:ec:71:51:42:52:80:65:f2:e6:98:
91:52:14:9e:2a:94:31:4a:00:23:b3:83:0f:46:7b:
dc:7b:c2:99:54:ab:52:c8:75:0a:c0:94:76:2b:30:
82:22:7c:ed:0d:6d:e4:10:86:24:e0:45:d6:5c:98:
c4:fa:d2:7c:b3:ce:27:bf:10:91:ce:49:fd:05:bb:
bc:a9:42:9a:14:1a:b9:89:68:c5:7e:b9:0c:91:72:
71:70:c6:11:5d:b0:13:dc:39:42:2e:0c:de:3f:61:
2c:f9:fa:70:39:bf:40:53:e0:fa:20:ff:45:5e:78:
0e:84:f2:12:2b:45:17:9d:e8:50:9b:d5:a8:63:df:
a7:33:ee:92:45:f6:c5:bf:2d:84:c7:a8:c5:c2:e3:
25:86:f2:69:57:6c:f5:18:a9:7a:18:65:89:f0:86:
dc:78:c5:22:47:6a:da:27:45:b8:9b:0a:c1:7b:3f:
80:69:51:b3:4e:f1:2e:10:b3:e5:2c:ff:e6:eb:ea:
25:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:03:80:34:39:E9:F4:68:4E:41:1B:10:82:25:C4:0D:1C:E3:A5:6D
X509v3 Authority Key Identifier:
keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9b:37:c6:8f:c4:4c:18:c0:2a:3f:85:cd:0b:b4:a6:60:eb:
5e:c2:37:5b:8a:29:1e:b6:1e:a7:98:fe:c2:19:a7:cf:7a:09:
ec:17:4d:0d:84:40:fb:47:0d:4c:c5:4c:99:5e:51:24:18:17:
24:8b:35:34:5b:68:42:4b:10:dc:ca:d8:0a:7d:91:3d:7f:de:
97:c1:9e:d8:7e:06:88:a1:7e:a5:d1:47:4b:fe:29:4a:c5:c0:
cc:f9:da:ff:8a:d0:89:82:ad:7c:12:a3:4a:e8:d6:8a:f8:ea:
ff:a2:94:8e:a0:85:d5:77:17:33:63:bb:f2:a9:4b:45:4d:e8:
a0:f7:b2:82:47:fa:48:25:a7:e1:b8:00:ff:c8:03:de:92:63:
bb:52:ea:aa:31:ab:f3:e0:7a:da:2c:0a:79:53:37:61:a1:ed:
e1:2a:7d:6e:6c:4d:40:4d:ee:cd:ab:be:94:8c:fd:55:3d:37:
fb:d8:0c:82:fa:51:92:d5:4e:21:2d:e0:6c:9d:34:79:00:43:
77:f6:c6:bf:1b:f8:38:cc:c6:c9:2e:55:36:92:02:f3:94:b5:
df:97:8a:71:bc:71:fd:99:22:a8:0d:6b:55:a3:5a:b6:83:04:
55:f5:f0:a8:73:fe:b1:33:7e:f9:76:4e:e9:c4:5a:32:9e:e6:
d1:37:18:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 06:17:43 2025 by rpki-client