Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
File: vj908rbk4o6f9so8yjpdeMosrWo.mft (raw, json)
Hash identifier: OQPcYEeFSZo/LT2h3lNGWW7u3khuJvpkGS8QeZbG+PI=
Subject key identifier: 9B:DC:77:B6:15:4B:0E:F3:9A:E8:B9:08:D9:AF:2C:70:0B:88:30:E2
Authority key identifier: BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
Certificate issuer: /CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Certificate serial: 019A72265631A2B456812F68E0C626282062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
Manifest number: 0A8C
Signing time: Tue 11 Nov 2025 09:01:46 +0000
Manifest this update: Tue 11 Nov 2025 09:01:46 +0000
Manifest next update: Wed 12 Nov 2025 09:01:46 +0000
Files and hashes: 1: XeXaIv0GnCQWCewZa3XGZvVcOuU.roa (hash: IlSm1MC8XpLI7JpFnpnOEj3N8KdmO1O/PRbAlZC1Yqs=)
2: keiUHgNWXQG1tCnd_1r6jW3ByFc.roa (hash: UWHI9ulMx4qU9scGVCWFH3JBiygO7K8ZUkSeDS3PRRY=)
3: vj908rbk4o6f9so8yjpdeMosrWo.crl (hash: v6hbX4pxOWQ/E48E6tMk5b8A8i9wlnMKZ/7qHopVyQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:56:31:a2:b4:56:81:2f:68:e0:c6:26:28:20:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Validity
Not Before: Nov 11 09:01:46 2025 GMT
Not After : Nov 12 09:01:46 2025 GMT
Subject: CN=9bdc77b6154b0ef39ae8b908d9af2c700b8830e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f0:5b:0a:eb:44:14:32:af:97:80:52:31:e0:
c8:fc:cc:6c:db:c5:59:87:15:99:42:a5:c4:56:c5:
4a:cb:8d:ca:b8:df:65:a4:92:42:b9:c5:de:1e:c7:
af:50:d5:ff:6d:2e:60:8c:88:09:2a:20:9a:b5:9a:
33:1a:db:bd:b9:73:92:cb:02:c3:83:16:e3:95:b6:
72:25:5b:5a:a6:94:18:8d:ae:86:bf:ad:4e:5e:d7:
6b:51:ea:26:6c:fc:77:9d:b6:64:53:86:88:60:5d:
0a:4c:ba:78:0a:ba:37:1c:06:cf:b1:fd:93:20:db:
47:ac:02:64:a9:49:ee:d6:29:20:05:07:78:d4:83:
46:24:4e:e9:5e:bb:25:19:bf:d9:99:74:a0:5a:c2:
73:5a:30:79:a0:54:7a:23:a6:f5:aa:fb:f6:8a:65:
b0:98:40:db:20:14:bd:af:b6:3f:12:8a:87:8d:06:
99:3f:31:8f:9a:3c:d8:b4:70:93:58:29:28:a3:0c:
10:53:a7:f7:40:96:82:1d:8f:b6:26:3b:4c:41:9e:
3b:8e:19:2b:09:e6:a1:fd:0d:e8:dd:60:56:45:34:
92:02:82:9a:1d:d3:a1:53:cc:0d:da:f0:23:96:3f:
b2:83:11:fd:28:16:0b:3d:c8:65:4c:48:e2:69:3c:
ec:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DC:77:B6:15:4B:0E:F3:9A:E8:B9:08:D9:AF:2C:70:0B:88:30:E2
X509v3 Authority Key Identifier:
keyid:BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:de:dc:f5:ef:a4:78:a1:cb:79:7e:a6:7a:8b:e9:87:93:ab:
51:39:a1:54:7b:22:87:33:c6:49:ae:1e:8e:c7:82:b3:0e:b0:
84:b6:4b:2e:99:97:34:12:c9:ac:a3:d6:ec:96:a1:7a:2a:47:
e2:52:1c:db:23:4e:70:6f:a6:de:b7:f8:f2:bd:9c:b1:b2:34:
07:32:84:e0:fb:4a:37:28:2d:80:14:6a:9c:e7:71:3b:ad:8e:
cc:03:64:cc:a4:dc:ed:3c:85:71:54:0b:58:c9:c6:2c:07:22:
8a:ac:01:f2:38:82:d8:1d:40:6d:8b:6a:72:f5:89:db:bb:b2:
6d:db:8e:78:5c:75:c6:a7:26:fd:1f:5f:3e:9d:89:a6:ea:fa:
94:b2:55:40:a0:ce:59:13:db:a0:5c:dd:19:9c:b2:35:8d:14:
20:f9:5f:7d:c1:24:5c:3d:64:10:d3:86:df:49:9d:96:e4:2d:
92:1e:b1:d8:55:6c:1f:b7:77:7b:3d:99:5e:cc:66:81:5c:e1:
47:15:88:97:52:3b:44:e9:a0:93:6c:57:54:3c:86:95:08:77:
37:4b:64:71:92:72:bb:e4:ca:a6:8f:05:ea:a8:e0:96:fb:98:
2d:ac:0c:18:4c:c2:b7:46:41:ce:55:40:4f:5c:5e:c1:3a:2b:
05:17:25:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:08 2025 by rpki-client