Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
File: vAB4on8QAyY8TFYbAlB2by9Sbn0.mft (raw, json)
Hash identifier: y1HZvp/fkD+fwqb1XOkl2LrvmUrKa1JpVdGV1f+nLz0=
Subject key identifier: A1:51:32:E9:2B:02:56:01:0A:80:5A:AA:4D:D1:68:4E:41:E0:19:34
Authority key identifier: BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
Certificate issuer: /CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Certificate serial: 01993802CB6F167A686E29EE41F97E31AA1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
Manifest number: 041B
Signing time: Thu 11 Sep 2025 09:02:11 +0000
Manifest this update: Thu 11 Sep 2025 09:02:11 +0000
Manifest next update: Fri 12 Sep 2025 09:02:11 +0000
Files and hashes: 1: U8RX6_Xhgd2rniYJPgiw5XhDM14.roa (hash: 2r/ZPIhIP4vgQHcp4lEFNmYb4WZmbuMJWG8eyE6HlfQ=)
2: vAB4on8QAyY8TFYbAlB2by9Sbn0.crl (hash: +o8GvaP7/bRfDE0FliTRmcG2E+eIT9NFWRjwaZLTP/Q=)
3: vAZxSJwcgiBcI_82IoG7w0HDsHY.roa (hash: p3exCfpQFtu6+djLck5m9Ak9SIsL/faxVMijWb66KP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:02:cb:6f:16:7a:68:6e:29:ee:41:f9:7e:31:aa:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Validity
Not Before: Sep 11 09:02:11 2025 GMT
Not After : Sep 12 09:02:11 2025 GMT
Subject: CN=a15132e92b0256010a805aaa4dd1684e41e01934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0c:c5:14:2b:f4:c1:80:1c:23:99:52:4e:4d:
e0:24:54:95:45:06:af:72:c2:ac:e0:1b:e4:42:36:
9b:e0:87:d5:04:b8:d6:91:01:09:04:6d:8e:0a:04:
89:f6:19:ed:ef:84:d5:eb:a4:cc:19:3c:9e:bc:e7:
53:12:64:e3:d5:98:58:35:a9:02:1f:c9:93:8d:79:
4e:89:36:8a:99:25:1c:c5:14:75:58:cb:97:2e:69:
22:b9:3d:ca:7b:55:a0:ee:92:e7:76:3d:1b:0d:fa:
4b:b6:34:85:9c:b4:fc:69:1e:e8:d6:66:07:19:19:
f6:ff:8e:ab:5f:84:4a:1e:f6:97:d3:ee:32:3c:be:
1e:d9:45:13:d9:6a:4d:41:cb:9d:f7:55:e8:a4:e9:
ad:29:2b:02:33:c7:ce:e6:68:84:91:17:a7:07:bd:
92:97:21:e0:eb:58:e8:9c:2a:1a:a9:d2:dc:8d:89:
40:f6:76:36:a7:a7:86:e3:36:8e:22:c7:71:86:17:
d5:d6:2e:f1:c0:44:42:6a:bf:7d:8d:10:31:77:76:
e7:0b:f8:9b:ec:8f:97:79:d8:3d:73:29:d8:f7:df:
0c:9d:fe:0d:1f:f1:6e:5a:4f:86:32:93:18:30:9f:
56:c4:b4:d0:76:70:fb:a5:11:cf:bd:c6:13:72:dd:
0d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:51:32:E9:2B:02:56:01:0A:80:5A:AA:4D:D1:68:4E:41:E0:19:34
X509v3 Authority Key Identifier:
keyid:BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d1:70:04:22:d1:60:d7:45:0d:03:e3:47:d3:5a:e4:7a:bf:
3b:c3:ec:9a:5b:89:d0:98:ca:55:60:86:5a:0c:56:e9:3a:c8:
34:44:82:b0:2a:8e:fd:bc:dc:97:d4:80:2b:37:b5:40:77:7b:
72:30:4d:ac:8f:a9:22:62:97:70:bd:70:be:dc:4e:62:fc:d2:
0c:24:03:69:5c:4e:07:15:97:80:46:38:14:8f:9d:fb:b7:f9:
86:b2:df:b6:4b:fb:e7:92:66:45:a8:5c:61:21:e4:c3:c1:8f:
a3:c8:b3:8a:3e:d0:59:db:12:7a:ce:b2:ea:5d:29:5b:60:c2:
c7:91:1c:04:1e:b1:b9:75:eb:0d:22:34:5b:bd:37:c5:7e:62:
70:08:90:db:c8:eb:d9:e6:1d:ac:59:a3:34:84:70:5d:4f:5c:
ec:66:de:a5:a0:7d:0c:41:74:1f:30:81:72:9a:0f:c4:94:ee:
4f:fc:00:cf:34:28:54:c3:d4:59:83:19:2b:bf:08:84:c0:11:
c0:d8:49:c6:1f:2b:69:eb:21:f1:1f:2a:e0:aa:1b:8d:0a:23:
cf:38:51:b8:51:43:21:7f:0e:dd:79:2d:b1:e2:42:7e:cc:eb:
4c:72:8b:d9:66:ca:48:93:22:dc:0e:4f:87:05:50:da:9e:2e:
09:df:39:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:43:11 2025 by rpki-client