Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
File: vMzI9LN9iSKM0CPSUh0plo3guSU.mft (raw, json)
Hash identifier: 9eOV8IeR5W5KxUJgMg/k3Dgf1/nBCDbwSEQBEFItr/g=
Subject key identifier: 60:CB:EE:BD:71:6D:FA:D9:5B:50:CF:07:8C:8D:70:67:AC:B9:20:BD
Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Certificate serial: 019A112897F51005A119BD0F86BDAA7C6476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
Manifest number: 1110
Signing time: Thu 23 Oct 2025 13:01:04 +0000
Manifest this update: Thu 23 Oct 2025 13:01:04 +0000
Manifest next update: Fri 24 Oct 2025 13:01:04 +0000
Files and hashes: 1: c9UMX3iq8tErq5TMlo_-MEWj5uw.roa (hash: 1c2+eOFvPteNDBjZlr3CfkaamwjtVyHeqkTL5YVw+fo=)
2: vMzI9LN9iSKM0CPSUh0plo3guSU.crl (hash: 6JUIu/B7jJ+ngOsVPBDNsQKTEO+wlZqL0zeDt2nfYto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:28:97:f5:10:05:a1:19:bd:0f:86:bd:aa:7c:64:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Validity
Not Before: Oct 23 13:01:04 2025 GMT
Not After : Oct 24 13:01:04 2025 GMT
Subject: CN=60cbeebd716dfad95b50cf078c8d7067acb920bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:1b:a2:10:08:81:61:fb:6b:bf:24:5a:6d:
af:6b:b8:30:c4:64:67:6d:e4:97:de:e8:d5:cf:0c:
35:c5:d4:20:d1:90:87:f1:68:5c:02:d8:20:2c:f6:
7d:0c:a5:46:40:1e:42:b7:ac:65:20:12:4e:74:da:
31:b1:59:50:38:b3:cb:74:2d:93:2d:69:84:93:0b:
35:95:4b:8a:ac:d2:9b:ae:8c:00:3b:8f:01:bc:c7:
cf:c8:c3:cb:b6:65:96:b8:19:3c:b0:26:d3:a2:7c:
9e:d7:bb:95:db:4b:b2:90:88:39:9a:e6:ab:b0:a0:
b9:e7:f4:c5:79:62:de:18:0c:a1:b0:8f:22:74:58:
d3:a0:db:ef:fc:df:db:4f:e3:7a:74:47:32:be:4f:
68:9e:8d:2a:01:be:fe:27:d6:3b:18:62:3b:8f:34:
ed:8d:b5:cc:4f:36:86:02:ce:d4:00:af:38:0f:d1:
c1:93:35:bd:72:1a:d2:80:ab:64:5d:87:13:fc:de:
f3:cc:66:33:0f:54:a5:2a:5b:88:fc:f4:88:1c:15:
77:a1:25:a0:64:b1:c1:c6:d7:ba:8f:62:8f:93:e2:
c1:b8:7e:97:9f:9f:bc:09:43:b7:b7:67:29:5a:c5:
2e:e7:56:3f:1d:9e:e0:24:a5:e6:61:40:ca:e1:f7:
1f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CB:EE:BD:71:6D:FA:D9:5B:50:CF:07:8C:8D:70:67:AC:B9:20:BD
X509v3 Authority Key Identifier:
keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4d:f4:eb:f8:a7:4f:85:24:5c:32:c9:03:1d:5c:9e:fb:f4:
aa:9d:c8:fd:14:8f:fd:9b:bc:35:78:a4:9e:1d:c1:74:22:81:
bf:35:c7:ad:e7:44:ce:7f:82:84:de:a9:74:dd:f1:f2:f5:d9:
9d:d9:d7:47:20:38:f1:62:c9:e7:62:27:48:dd:2e:63:6b:7f:
fe:48:5c:89:09:20:c5:54:02:a5:13:73:ce:d1:23:f2:0e:6e:
4b:29:e9:a8:f6:f1:b0:69:04:0e:33:8a:cb:ed:52:f2:d2:ca:
a7:e6:b4:c9:38:66:2d:bb:12:ac:53:cb:1d:97:41:96:ba:bd:
b4:a0:5f:bd:8e:e3:6f:80:0f:e0:df:1d:25:a3:85:48:ea:07:
23:19:2a:56:21:ba:99:c9:2e:43:b1:e1:ef:86:e1:d2:fe:f8:
b5:99:80:99:1e:09:e4:83:53:e4:40:7a:f0:b3:ef:96:1f:d0:
97:e6:1e:a2:cb:cd:e2:66:36:e0:f7:57:74:c1:4d:77:6c:6a:
63:e5:8b:d7:82:be:db:c1:3b:e8:0b:7b:c0:fa:f5:ec:42:d6:
b6:d5:04:6f:46:21:5a:49:42:57:5e:aa:30:ae:70:c7:5e:a5:
42:ab:d5:62:4d:c0:9b:a5:93:98:28:23:3c:07:3a:71:71:67:
52:f8:3a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 23:53:02 2025 by rpki-client