Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
File: vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft (raw, json)
Hash identifier: t1v2ykONh90Dsjglx0u7v6NqlfTFMmcZ4SD0azwujHs=
Subject key identifier: 8B:61:CC:8E:17:46:81:38:15:F2:89:CE:4E:09:2E:F6:30:D3:62:62
Authority key identifier: BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
Certificate issuer: /CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Certificate serial: 019A277893DEDFE7426735FFDAF0B3543CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
Manifest number: 1506
Signing time: Mon 27 Oct 2025 21:00:04 +0000
Manifest this update: Mon 27 Oct 2025 21:00:04 +0000
Manifest next update: Tue 28 Oct 2025 21:00:04 +0000
Files and hashes: 1: Sf4JDKtmxmTCB0tTVfdGGPNzKJE.roa (hash: TM/ueYP3efRi0gGmWlRzw9T+QccRhYDTBK2qLm6mLxw=)
2: j55rwmP0M5U3k7x3VXFxJgSVySg.roa (hash: 5VX+pyc2hFJtXaEa0bGAy71RA09akkBJFD4zo26BAY8=)
3: vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl (hash: S2e1MYeqaydGW/bKvc7WP+McgjbdEQhxIyGvDyDS700=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:78:93:de:df:e7:42:67:35:ff:da:f0:b3:54:3c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Validity
Not Before: Oct 27 21:00:04 2025 GMT
Not After : Oct 28 21:00:04 2025 GMT
Subject: CN=8b61cc8e1746813815f289ce4e092ef630d36262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:a2:4c:18:9d:be:c5:3f:2b:65:3d:c0:bb:
2e:33:0d:33:b6:18:b6:c4:0f:1a:3c:b2:a8:b4:25:
cc:75:69:4c:06:6a:88:40:f8:5d:59:e1:19:b4:20:
f0:f9:e6:8d:61:65:2f:18:3c:04:f2:bc:05:8f:73:
67:70:69:26:5d:3f:93:e5:cc:2d:a4:90:4e:d1:54:
a4:b6:a2:17:0b:91:5b:a1:11:8e:3e:9f:a6:53:8b:
9d:d0:c6:bf:f1:f0:e4:38:ba:15:9d:dc:a2:87:76:
0a:e1:69:a4:b6:cb:0d:fb:d2:32:09:e4:93:b1:82:
79:fe:2c:9c:1d:71:59:8b:b7:f1:7b:0b:fc:d6:1d:
d6:c1:ca:be:e0:36:31:55:d4:f8:b3:2e:79:f2:54:
a5:01:af:55:da:35:61:21:57:50:ea:4f:79:96:f8:
f2:4e:39:4b:a4:ec:ec:93:35:82:da:0d:ed:fc:02:
66:35:48:b7:34:2a:3b:c8:de:66:bd:c6:77:39:f2:
78:5f:60:3d:52:ec:85:3f:27:f9:b0:58:f1:42:b8:
f0:eb:4b:ab:af:04:53:3a:04:cd:37:24:e9:86:80:
7d:ec:6d:23:05:61:1c:21:c5:66:4d:df:3c:f0:fb:
d1:14:ad:95:13:fe:d9:9f:a2:e2:93:b6:6a:92:8f:
75:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:61:CC:8E:17:46:81:38:15:F2:89:CE:4E:09:2E:F6:30:D3:62:62
X509v3 Authority Key Identifier:
keyid:BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:82:80:f1:3a:c2:37:b7:18:fe:3c:83:7c:08:8c:47:ed:28:
4c:1b:e5:9f:3f:15:68:aa:2f:51:3d:00:ec:17:8c:24:12:d7:
24:85:95:1d:0f:4d:5d:c1:32:44:4f:2b:9b:31:f4:e0:4f:cc:
33:a6:e0:6f:0d:18:47:07:cc:44:b1:08:1f:f0:bd:cc:5d:44:
ed:42:3f:2f:dc:24:48:42:1c:78:db:b3:7f:b7:87:2d:af:52:
08:5d:8c:19:00:34:18:a3:c9:b7:86:e8:b7:77:9f:85:bf:6a:
c8:6c:50:a5:db:3a:82:23:d5:f4:27:78:e7:9b:36:79:f1:98:
24:35:fd:cd:83:d5:fc:00:c3:ef:9b:d5:de:5b:53:b1:54:1a:
3f:41:d8:8b:1e:b9:ab:75:c9:ea:5e:1c:26:6c:98:92:9d:2f:
f7:9f:09:e4:cf:15:13:fb:0e:5e:2f:1b:16:0f:66:29:15:3e:
5f:0c:22:ef:56:47:9e:44:ae:84:cb:c7:b7:91:b9:16:11:23:
ec:ae:c9:3d:ee:b5:8d:3a:21:a7:32:cb:70:e4:8e:da:fc:41:
7f:0d:e5:cc:da:95:67:c7:71:2c:0e:ce:98:b7:55:ee:e8:e5:
7f:81:83:76:55:98:1f:9f:1d:40:13:1a:1c:22:c1:f9:ae:5c:
2e:64:64:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:29:18 2025 by rpki-client