Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
File: vAB4on8QAyY8TFYbAlB2by9Sbn0.mft (raw, json)
Hash identifier: TMWLc8wyDP6IF7uUp4Qrs8UiCsV7ORThhnEeNsoM6ww=
Subject key identifier: 09:09:82:FD:A6:92:6E:1F:C3:01:31:5A:0F:5C:2E:0E:EA:3F:06:37
Authority key identifier: BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
Certificate issuer: /CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Certificate serial: 019A258AACA6EB42DEF949A1A74D22AEF5C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
Manifest number: 0496
Signing time: Mon 27 Oct 2025 12:00:36 +0000
Manifest this update: Mon 27 Oct 2025 12:00:36 +0000
Manifest next update: Tue 28 Oct 2025 12:00:36 +0000
Files and hashes: 1: U8RX6_Xhgd2rniYJPgiw5XhDM14.roa (hash: 2r/ZPIhIP4vgQHcp4lEFNmYb4WZmbuMJWG8eyE6HlfQ=)
2: vAB4on8QAyY8TFYbAlB2by9Sbn0.crl (hash: HEifJQEOfSJdIIvPVOjEvHo6thQQY2QULzTU+UK+ppA=)
3: vAZxSJwcgiBcI_82IoG7w0HDsHY.roa (hash: p3exCfpQFtu6+djLck5m9Ak9SIsL/faxVMijWb66KP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:ac:a6:eb:42:de:f9:49:a1:a7:4d:22:ae:f5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Validity
Not Before: Oct 27 12:00:36 2025 GMT
Not After : Oct 28 12:00:36 2025 GMT
Subject: CN=090982fda6926e1fc301315a0f5c2e0eea3f0637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:76:5c:62:5c:0d:73:c7:62:5b:f7:a8:2c:b3:
d1:03:83:2d:20:de:e7:76:a4:87:29:79:5d:3c:db:
6a:32:8b:bb:6b:e9:b4:ee:ff:cd:7f:ea:70:2a:56:
e4:67:b4:01:4b:5a:2a:a3:9c:12:25:87:f7:df:fe:
04:ea:83:a4:30:58:d5:09:a0:c9:47:20:13:3f:e7:
00:40:3d:7a:5d:4f:99:6a:ff:eb:ea:db:51:93:e9:
0c:59:7c:b9:2d:8a:17:73:22:b6:30:97:f0:1d:4c:
16:0b:76:a0:be:3f:ef:b7:12:95:3f:0f:e3:37:27:
f7:7e:41:c8:31:ec:7f:35:fe:f8:53:89:bf:4e:81:
5a:00:7a:3e:d8:16:4d:b1:b6:32:a8:8a:82:42:3c:
13:57:5d:3e:59:7f:40:f0:8a:3b:be:e0:28:52:af:
4f:39:42:5e:62:eb:a2:3b:4a:71:53:3a:3f:a2:db:
ed:3e:be:b0:61:23:43:77:f0:47:c1:97:18:c5:63:
a5:8a:25:77:10:00:8d:5a:5b:ed:df:ba:89:54:62:
52:8d:75:7e:ea:e4:43:00:c9:d9:be:df:8e:67:65:
80:de:77:88:ab:ff:43:4c:bd:3b:c7:c5:fe:71:e8:
f0:65:87:b8:97:b2:b0:bc:3e:d0:28:a2:c1:91:5c:
2d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:09:82:FD:A6:92:6E:1F:C3:01:31:5A:0F:5C:2E:0E:EA:3F:06:37
X509v3 Authority Key Identifier:
keyid:BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:08:cf:9a:65:4e:65:98:e4:8f:6c:4d:74:39:98:9f:e8:fd:
f0:32:0f:21:1a:0a:0b:79:5c:39:bb:23:01:ea:a1:9e:0a:2d:
c9:b8:63:df:c4:05:7f:96:81:6b:fc:a2:48:06:c6:f1:4b:d7:
de:4d:c2:7e:29:eb:81:fc:5d:08:ef:ff:2b:0c:27:e0:21:a3:
a4:a9:46:8d:44:5a:61:ce:37:0c:eb:22:d5:9d:74:3c:79:ef:
39:c6:fb:c3:ae:c4:3d:7a:ed:17:15:43:dd:00:93:8b:d4:b5:
0a:e9:3d:7f:58:e0:b1:ac:c4:98:ac:a5:92:4d:ee:96:98:cf:
a1:d1:d8:40:39:50:38:be:9c:3b:0a:e7:ed:5f:a2:2e:06:c0:
e0:43:89:fd:86:64:ff:5c:b8:91:bf:f3:34:d3:f7:cb:d1:18:
1c:c2:55:cd:ee:88:d9:5f:94:8e:8b:08:36:e7:28:17:49:72:
b5:03:ab:2e:6b:af:10:96:25:98:32:2a:29:e5:99:6d:d9:72:
52:82:99:6b:fb:02:ac:db:93:8a:44:38:40:32:64:b4:7d:bc:
49:23:3a:f6:90:83:6e:eb:76:a2:14:1a:03:fe:48:16:fe:04:
84:af:73:ed:43:09:27:97:a8:60:64:b2:1d:d9:88:2c:df:8c:
bb:47:a5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 21:09:55 2025 by rpki-client