Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
File: veY2_1I-Xzc0In8zxEwuUP-NHuI.mft (raw, json)
Hash identifier: bBD8y5wf/hlBiuFMv4qe6wRfhhk1LcAOhfK1tVxfuhQ=
Subject key identifier: 4F:BE:D8:67:B3:A8:C2:E8:24:F3:31:21:6B:92:C4:9E:69:67:14:B4
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial: 0199315ABF5A7E1B8CA64B9D8586D2A3EE00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
Manifest number: 0A17
Signing time: Wed 10 Sep 2025 02:00:54 +0000
Manifest this update: Wed 10 Sep 2025 02:00:54 +0000
Manifest next update: Thu 11 Sep 2025 02:00:54 +0000
Files and hashes: 1: 4NbkXu89FXOyQLhXi76KTLRS_8U.roa (hash: /R0anYXR39TgZMh7wTdh79H3PAU+bV4gIhm7ONZyMQ8=)
2: C9jlSQpiBO6Y73lSEYMO0KAZmVU.roa (hash: bHV8b0r3RZhEMBuy9WHUg2/V18JXKTeCJEmR8xzO1XQ=)
3: Sucl-ga8bKlbfGlHsxsq1Oo80t0.roa (hash: k1Htljgs56uFbBPsZWyrCnN1sbAvxLT63YyfljrMCbY=)
4: bfuZYtxjTAOdpCpRWdDszbBOycM.roa (hash: oKsbpIb+4VCZp3VPNUM0uIEJezlOZcr7unos7yGZizs=)
5: veY2_1I-Xzc0In8zxEwuUP-NHuI.crl (hash: yek/NODW5Jz8iXH1f+zCUYnvkMYZ4rCma2nXQyOHgLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5a:bf:5a:7e:1b:8c:a6:4b:9d:85:86:d2:a3:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Validity
Not Before: Sep 10 02:00:54 2025 GMT
Not After : Sep 11 02:00:54 2025 GMT
Subject: CN=4fbed867b3a8c2e824f331216b92c49e696714b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:90:bb:8e:3b:55:f5:cf:fc:82:86:aa:5a:
6a:23:c0:35:67:1b:ba:db:ca:37:09:c5:ba:00:13:
aa:c9:92:8f:64:c1:2c:3a:12:25:a1:07:f0:ba:76:
3f:8e:ff:fc:6e:5d:19:8d:28:48:72:a2:7e:0f:98:
82:a7:36:c7:13:7a:ae:7f:e1:e6:1f:f0:f3:58:a5:
43:76:65:e7:f9:92:13:76:ea:16:00:f2:1f:20:2b:
00:a8:3c:5e:d2:3c:3c:1c:f7:cf:a1:86:e1:b0:9e:
6d:66:c5:0a:09:06:af:9f:ca:3d:49:c4:85:1e:d3:
3d:b8:c0:1a:b5:b7:54:aa:4f:37:8a:0f:3f:6a:99:
d9:8e:3f:83:b4:66:52:40:12:8e:60:87:71:aa:00:
bd:07:aa:87:e3:07:34:e2:1d:33:68:a5:45:cf:a7:
86:2c:99:59:fb:47:dc:97:b6:00:2c:5b:d7:45:13:
e6:c9:0b:5e:73:84:ff:01:af:9b:51:b8:4c:3d:8a:
4d:46:5e:86:31:14:93:aa:e8:87:86:f4:65:63:60:
91:33:3c:4d:f1:b0:f7:2d:ea:c3:28:60:78:95:de:
cf:0c:3c:8c:72:fa:67:0e:a9:2a:4c:36:2c:1d:39:
2d:27:78:d4:8c:ff:84:6f:ac:4b:bd:f3:7d:4c:b2:
be:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BE:D8:67:B3:A8:C2:E8:24:F3:31:21:6B:92:C4:9E:69:67:14:B4
X509v3 Authority Key Identifier:
keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:87:07:09:93:63:4c:c8:23:0f:1e:7a:85:3f:55:08:5b:c1:
94:e4:1a:00:ea:8b:43:e5:98:ee:fd:ed:a6:c2:fb:74:0b:09:
e7:73:b2:52:03:1e:ba:80:ce:f1:f3:ff:b7:71:99:0f:75:e1:
c6:82:59:c1:7f:1b:6d:17:35:4d:de:23:1d:ec:86:0a:8c:88:
73:ff:b4:75:21:79:f1:68:f0:cb:3e:9c:5b:09:88:15:d7:3c:
8c:5c:44:22:f3:18:ab:a6:99:94:0b:b4:3e:66:d6:6b:08:39:
c5:d7:4c:4d:87:49:b7:f6:6e:be:fe:19:bd:21:f0:12:d4:fc:
cd:9d:34:44:17:7c:9b:8b:10:ff:9e:24:a1:77:d4:b2:6b:83:
26:30:10:15:9a:a6:36:db:ad:b1:a8:f4:f5:3a:83:d0:86:35:
76:a2:98:60:55:1b:6b:9f:5f:43:c2:d9:f6:e5:5f:da:7d:ce:
27:9a:16:b6:99:82:d7:0e:b5:57:74:f2:58:96:06:51:6b:27:
46:ac:a6:02:0b:2b:65:5c:fb:99:59:09:2a:e1:0e:c6:e9:3b:
0d:a0:69:5f:5d:5f:9c:7f:bb:67:94:2a:d0:17:1a:17:25:17:
7e:19:8f:43:b9:14:e6:55:af:b2:08:92:09:b0:e2:6c:31:9f:
fc:f9:d0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:48:09 2025 by rpki-client