Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
File: vDjusmw53w8ZTlDXZBmNkOHztck.mft (raw, json)
Hash identifier: h/VkyvhsEJDi13Wx7jRLl3yAM38QFlclqj5BmRXiMQY=
Subject key identifier: 5A:2D:BC:51:DC:9E:7E:3D:A8:E9:FD:53:68:78:1A:09:8C:2E:E7:2C
Authority key identifier: BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9
Certificate issuer: /CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9
Certificate serial: 019A22F7EACDBC9F0FE649871B807FCF50C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
Manifest number: 0960
Signing time: Mon 27 Oct 2025 00:01:04 +0000
Manifest this update: Mon 27 Oct 2025 00:01:04 +0000
Manifest next update: Tue 28 Oct 2025 00:01:04 +0000
Files and hashes: 1: FSb-Rvye6YoA1Ii-rCKundZ-HD8.roa (hash: wEXQWTLVPy1UwtI4vOgrpyaszSEDzsytRnOaOtWiUUo=)
2: vDjusmw53w8ZTlDXZBmNkOHztck.crl (hash: tRO7rLD8DjSyjvGCBGQ90rZQ1q98dp2LGFb0+hdlPi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:ea:cd:bc:9f:0f:e6:49:87:1b:80:7f:cf:50:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9
Validity
Not Before: Oct 27 00:01:04 2025 GMT
Not After : Oct 28 00:01:04 2025 GMT
Subject: CN=5a2dbc51dc9e7e3da8e9fd5368781a098c2ee72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:79:52:39:df:2e:82:ea:1f:aa:7f:37:7a:
a9:8c:42:89:4c:0e:35:54:3b:32:26:41:48:64:3e:
79:a9:3c:f8:66:1b:2e:6d:10:66:58:9e:a1:d7:54:
ac:18:9c:dc:10:d7:ed:db:fb:4a:b1:f7:de:30:87:
07:21:c1:c4:09:b6:2e:3f:78:f8:9b:a2:27:43:2d:
fb:fa:46:f5:c2:2a:70:b7:28:26:16:06:9c:d4:9f:
da:2c:1d:be:86:a0:85:b4:57:80:4f:5f:33:e1:cf:
5b:70:b3:40:ad:36:51:6f:20:99:98:90:04:c3:9e:
38:a2:87:46:67:d7:15:2b:5f:1b:23:37:38:b4:4b:
4a:07:8b:c5:f8:3c:43:79:31:80:27:ad:06:45:e6:
e8:56:a6:18:b5:3b:48:6f:cd:57:d3:22:0f:82:49:
f0:a1:55:02:d8:5d:e9:a9:dd:fa:18:fc:df:99:c3:
cf:6e:44:ce:72:7b:ad:d4:a0:c6:55:65:86:34:21:
87:02:40:52:76:ec:7f:9d:70:2b:b3:f3:98:2c:8d:
69:cc:1e:9e:00:fa:2c:dc:cc:f2:0e:7a:55:bd:41:
1d:e2:ed:54:7a:5f:ff:2f:38:42:9e:41:27:f0:ba:
60:09:75:72:7f:e8:0b:9c:99:88:fb:60:2d:c1:8b:
07:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2D:BC:51:DC:9E:7E:3D:A8:E9:FD:53:68:78:1A:09:8C:2E:E7:2C
X509v3 Authority Key Identifier:
keyid:BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9a:66:73:b0:7e:f3:80:e8:36:a1:e1:1e:fe:87:f6:2d:ea:
be:e3:1c:ec:ff:07:96:da:11:5c:5a:3d:a4:f2:de:60:64:4a:
d3:32:2e:61:a3:bd:08:81:d9:50:c5:33:fa:79:6b:4d:29:6a:
5c:a2:45:3f:33:1f:3e:de:79:af:09:15:5b:3f:a6:55:a7:5a:
b3:58:b2:c5:14:fe:3d:02:c5:af:e5:a3:a7:f5:04:9a:fb:d5:
c3:54:a0:fb:49:e5:d7:14:10:fd:57:6a:7d:e7:d9:3b:15:69:
1a:c2:95:a2:f9:1c:0a:f3:ac:9d:e5:a7:e9:12:97:b0:d9:e1:
b6:2d:c2:00:19:5c:ea:58:6d:5c:b0:2d:e8:7e:2c:db:cd:9b:
cf:8e:65:13:04:df:bc:fc:c3:55:1a:77:ef:0e:c5:49:5f:40:
00:04:66:cb:7c:fc:44:4a:06:da:45:7a:c8:dd:cd:4a:9b:e8:
8f:46:1b:1e:74:3d:ec:77:df:31:2c:ea:ee:d8:11:69:98:25:
87:24:ad:7a:80:2b:de:76:85:8a:4f:7c:47:d0:3b:d7:36:14:
f2:f8:7f:7f:ce:62:08:90:14:f1:26:42:9e:41:5e:0c:39:b4:
4f:42:01:ff:52:ca:34:c9:7e:ad:bc:3c:c2:2d:8b:03:bf:f2:
1b:cf:96:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:08:51 2025 by rpki-client