Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
File: veY2_1I-Xzc0In8zxEwuUP-NHuI.mft (raw, json)
Hash identifier: PG6VMdZ8H5U7aMRDWFKSvJNmarrHRlzPH64P31NHRss=
Subject key identifier: 47:83:6E:7E:55:03:88:D7:45:E6:8A:54:4A:25:1B:A1:81:E8:22:31
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial: 019A24AEBBD6BBDBBD02AC9E5B0C1CFB43A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
Manifest number: 0A95
Signing time: Mon 27 Oct 2025 08:00:22 +0000
Manifest this update: Mon 27 Oct 2025 08:00:22 +0000
Manifest next update: Tue 28 Oct 2025 08:00:22 +0000
Files and hashes: 1: 4NbkXu89FXOyQLhXi76KTLRS_8U.roa (hash: /R0anYXR39TgZMh7wTdh79H3PAU+bV4gIhm7ONZyMQ8=)
2: C9jlSQpiBO6Y73lSEYMO0KAZmVU.roa (hash: bHV8b0r3RZhEMBuy9WHUg2/V18JXKTeCJEmR8xzO1XQ=)
3: Sucl-ga8bKlbfGlHsxsq1Oo80t0.roa (hash: k1Htljgs56uFbBPsZWyrCnN1sbAvxLT63YyfljrMCbY=)
4: bfuZYtxjTAOdpCpRWdDszbBOycM.roa (hash: oKsbpIb+4VCZp3VPNUM0uIEJezlOZcr7unos7yGZizs=)
5: veY2_1I-Xzc0In8zxEwuUP-NHuI.crl (hash: QHjIr3xoJJwK1z5ba8pJV3K5UZVAInfpi4hdJ8clYv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:bb:d6:bb:db:bd:02:ac:9e:5b:0c:1c:fb:43:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Validity
Not Before: Oct 27 08:00:22 2025 GMT
Not After : Oct 28 08:00:22 2025 GMT
Subject: CN=47836e7e550388d745e68a544a251ba181e82231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:13:84:a8:8f:71:3f:b4:0f:7e:64:17:21:2a:
16:df:60:30:5c:10:e8:b8:62:49:9e:14:29:7b:b0:
e4:44:0c:00:41:9f:38:bd:3c:cb:41:b3:73:f1:0a:
bb:88:65:24:87:3d:4d:e9:b1:33:c0:ad:95:73:fd:
9a:e7:23:27:81:90:68:81:27:2a:07:08:2c:de:cf:
45:49:15:c4:0c:ed:f1:d2:1f:f2:72:97:fb:72:b2:
67:62:21:ee:cf:39:e2:bb:1c:01:c6:ca:ac:02:ab:
39:33:0d:ec:42:45:91:9d:bd:3f:87:b3:fa:91:58:
42:f0:f7:b9:a7:c4:37:12:10:62:4e:10:59:5a:32:
57:a6:46:c4:16:28:28:ab:92:bc:7a:06:3e:02:21:
71:dc:42:37:50:fc:ff:a2:7f:37:cf:ff:8f:d8:35:
21:cf:4b:73:f4:b1:62:ac:ad:4a:93:79:ea:47:b6:
5b:a3:7c:0b:ce:4b:9d:21:4b:b3:e1:8b:d6:a1:3e:
a5:ad:71:20:db:c1:a1:76:b1:32:6a:6f:5b:c4:3c:
30:10:e6:9c:f3:af:13:26:dc:ab:2d:76:a9:fb:93:
33:1f:c4:cf:cb:f8:ae:f5:98:42:a0:11:42:d6:83:
a6:e3:58:9d:77:f2:84:a3:a7:63:00:47:f7:5c:83:
f9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:83:6E:7E:55:03:88:D7:45:E6:8A:54:4A:25:1B:A1:81:E8:22:31
X509v3 Authority Key Identifier:
keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0b:b1:31:77:47:9c:ea:07:69:1a:5b:63:a2:1b:67:74:03:
ff:02:ab:5e:b4:e3:5e:30:06:39:21:9a:50:ef:a5:4a:20:d7:
db:3b:eb:7e:62:67:81:b9:ca:eb:3c:e2:f8:66:26:1f:0e:5d:
3d:21:93:04:08:88:a9:d3:ba:14:00:dd:8b:9e:c2:42:5d:44:
36:bb:3d:1f:b5:df:0c:47:99:0e:19:d5:e3:b3:f5:a4:71:6d:
83:25:2e:f5:e3:24:1e:78:18:63:8a:03:18:5a:b7:36:b0:6d:
43:78:bc:a6:3f:71:18:a5:30:e1:42:54:a7:30:42:58:88:db:
71:03:8f:6a:73:3d:b2:50:b1:46:cd:a6:30:6f:3e:bd:d1:06:
d0:14:f5:8b:05:f7:0f:37:94:1f:f0:9e:81:83:f6:25:5f:6f:
2a:01:c0:47:4f:ba:9a:eb:08:7e:c1:ae:84:b8:96:a0:a9:11:
19:35:74:86:8e:52:0d:d9:93:85:21:f3:86:03:73:4e:5e:c0:
7e:21:01:37:37:6a:2e:52:6f:52:ce:cd:ec:f1:90:e3:39:d7:
cc:01:21:0c:5e:da:4c:26:34:2d:6d:ea:b6:1a:ea:f4:d2:2c:
73:88:75:0d:39:5e:f5:2a:1a:40:94:5b:ff:e7:bb:86:4d:1c:
6a:0f:9a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 16:57:50 2025 by rpki-client