Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
File: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft (raw, json)
Hash identifier: ubhpMm2+m56Ll0/3ljM8qZhmKZqWgGuWAC/gRIkf/b0=
Subject key identifier: 32:4D:DA:54:88:8C:02:38:CA:53:CC:99:70:6F:83:89:3C:5A:05:54
Authority key identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
Certificate issuer: /CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Certificate serial: 019954F93B4C9F9D3915C9DBA991D4B95567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
Manifest number: 0120
Signing time: Wed 17 Sep 2025 00:00:43 +0000
Manifest this update: Wed 17 Sep 2025 00:00:43 +0000
Manifest next update: Thu 18 Sep 2025 00:00:43 +0000
Files and hashes: 1: D98Ck1_qKOXalzx0pMS_FarSGM8.roa (hash: u49BF5lQyjsLl1bn3ULD3SUQ9N/pcixaCTatnIvy4v0=)
2: tCV34_eFEm-bBTr3p-Dum9J6ZzA.roa (hash: lJs/8jun541iQ5FmJ+SShA8Wi27D6ss5N6YmTLmASl4=)
3: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl (hash: 4gnPs75bOPBVr+CosAV0iAO16XaDiLwrqQuXG9Lq4sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:54:f9:3b:4c:9f:9d:39:15:c9:db:a9:91:d4:b9:55:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Validity
Not Before: Sep 17 00:00:43 2025 GMT
Not After : Sep 18 00:00:43 2025 GMT
Subject: CN=324dda54888c0238ca53cc99706f83893c5a0554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5b:d3:28:5f:db:81:66:7b:34:86:9f:34:6d:
49:19:ea:ce:b1:05:a9:6f:de:94:1e:3a:19:f3:7f:
5c:86:dd:f7:e5:6b:e2:3d:d3:96:22:cb:a8:1d:c5:
f2:b7:bc:30:41:46:52:63:67:9a:97:50:43:03:68:
e8:69:86:0d:68:fe:63:1a:c9:95:b0:5c:49:ae:aa:
4e:be:4c:35:76:74:e0:43:4a:94:4d:6c:ab:17:50:
41:d0:54:e6:f2:77:64:95:4b:8b:1b:8b:42:f7:f8:
4c:4e:7b:51:2b:82:ce:ca:0e:f4:a8:21:2b:3e:ae:
59:e2:e5:e6:2f:0a:f0:23:13:f9:eb:ad:41:6c:a4:
65:0e:7f:49:6f:b3:9e:23:66:5d:02:08:9f:80:79:
ca:70:43:14:5b:45:ab:eb:ee:7a:11:f6:78:98:5c:
0f:55:06:bb:5b:ae:5d:64:48:2d:1b:f5:d1:b9:11:
58:d8:80:36:b6:3b:55:32:39:a3:b4:5c:bb:ae:e9:
47:31:50:84:bf:96:f0:19:1d:06:52:fb:06:0e:ef:
60:c1:23:65:6d:56:2a:49:78:a5:17:5f:04:13:6e:
29:a7:11:e2:d5:2f:88:bf:bb:7b:40:92:af:64:3f:
24:5c:29:4c:21:c1:95:33:59:89:20:b9:30:fa:e5:
03:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4D:DA:54:88:8C:02:38:CA:53:CC:99:70:6F:83:89:3C:5A:05:54
X509v3 Authority Key Identifier:
keyid:BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0b:bc:b4:92:59:47:41:6e:12:38:7b:17:55:f8:d2:b7:cd:
4d:1c:51:d4:39:30:78:48:89:ab:b6:ad:c5:2d:a6:92:a8:bb:
01:4f:00:cb:a0:0e:a6:68:27:be:da:0a:2d:5b:5f:56:d6:9a:
2c:2a:6d:0c:63:79:10:49:9c:df:e2:ad:d3:a7:32:75:58:64:
42:18:fe:e6:64:0d:ea:bc:4d:ae:84:cf:f7:da:79:9c:b7:8b:
ab:a2:47:33:8d:df:bf:98:0b:f6:8e:d6:08:6a:78:4e:5f:b2:
a0:ca:dd:8d:84:43:2a:91:29:3b:e0:e1:62:a8:b8:9c:18:70:
c7:94:50:d6:81:be:8a:d3:29:e0:08:a2:ff:d4:c9:00:c3:aa:
b9:9c:c5:fb:89:23:64:84:ec:1f:3a:6a:90:e2:c9:b2:9a:3b:
fa:91:c3:3b:be:6f:6a:c4:cc:a3:76:b0:bc:b6:5b:90:95:69:
45:a7:f6:14:df:ad:71:98:60:a3:17:5d:18:64:1d:2d:9f:5f:
57:60:9d:dd:a9:dd:f0:29:5b:7e:f0:55:34:6e:01:0c:3a:8b:
fc:23:0c:a3:1f:35:c4:24:2f:5e:0e:5c:fe:e2:38:91:de:54:
8b:51:9a:08:b3:84:55:71:c6:2b:75:ef:dc:30:6f:d9:a9:14:
82:f2:78:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 08:22:06 2025 by rpki-client