Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
File: v9eGsktLMCdbzI1SRONO4ASB15A.mft (raw, json)
Hash identifier: M1Xb9vY1HZe4wv9vGgAmrMqYBafHNUatzJcmNJGMqdE=
Subject key identifier: F3:F0:67:76:C0:4A:90:D6:0E:C8:06:44:FD:EF:F5:23:B3:5D:51:5F
Authority key identifier: BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
Certificate issuer: /CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Certificate serial: 019A01B5A1759DC71D4E1EB0A7E974843EC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
Manifest number: 1269
Signing time: Mon 20 Oct 2025 13:01:11 +0000
Manifest this update: Mon 20 Oct 2025 13:01:11 +0000
Manifest next update: Tue 21 Oct 2025 13:01:11 +0000
Files and hashes: 1: jvaFexoxtk4rKhDumsQjGLQsBLU.roa (hash: trR6TCS5RgKXy+FTVPF28Tq5uhqKg+8D3gvbODYNaCY=)
2: v9eGsktLMCdbzI1SRONO4ASB15A.crl (hash: uStQyp22N1VcAM1jsHQQ5vvB9lMh499BlPy67hoGpJY=)
3: zPseRt5WlA5PNoUFkbv3vmUfDV8.roa (hash: Ya/w9mpoqyM5Bw8KTqPuY/qxCTIk7UQN48ES6+Vh43g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:a1:75:9d:c7:1d:4e:1e:b0:a7:e9:74:84:3e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Validity
Not Before: Oct 20 13:01:11 2025 GMT
Not After : Oct 21 13:01:11 2025 GMT
Subject: CN=f3f06776c04a90d60ec80644fdeff523b35d515f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:52:c6:0e:71:b5:99:13:b8:42:2c:62:e9:
c0:61:91:d1:ec:55:1f:d3:e1:cd:43:bb:34:a6:05:
0d:4c:a9:d2:47:4c:9f:5c:cc:bd:2f:34:18:cc:ff:
61:ba:5c:c2:cb:76:44:d5:86:ad:bc:35:76:72:15:
60:30:96:ca:50:e7:c9:f2:28:52:c0:b8:24:2e:1d:
75:4e:1a:c3:a7:d7:94:bc:31:b1:69:30:7f:0b:c1:
06:b5:2c:a7:e7:da:6c:6b:f6:8b:cd:93:98:fe:51:
90:66:ce:43:21:65:63:7d:f0:58:77:8a:bd:4f:42:
f7:20:28:27:42:0e:bc:52:88:47:c9:2d:7b:55:4c:
64:4d:44:51:5e:a4:07:04:9e:3f:ff:59:c4:38:ae:
cb:1a:e6:55:ba:73:be:11:f7:00:8a:75:14:d0:06:
df:9d:fb:53:cf:34:09:02:dd:43:6f:53:ea:74:cc:
31:98:13:1b:e1:17:d9:a1:19:ef:92:cf:51:d1:96:
92:21:31:16:b0:14:0b:1e:ae:28:88:b2:5a:6a:ff:
7d:9e:a0:0d:5d:a6:47:5f:a6:ac:0a:6b:79:b6:e3:
fc:4b:45:25:69:fd:69:82:55:50:d1:8b:2a:fc:bc:
b6:49:58:b0:15:fd:bc:b6:18:69:34:c8:e5:8e:c4:
0c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F0:67:76:C0:4A:90:D6:0E:C8:06:44:FD:EF:F5:23:B3:5D:51:5F
X509v3 Authority Key Identifier:
keyid:BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:48:87:0b:65:12:23:90:20:15:9d:78:69:ae:e4:d7:3d:a5:
30:3c:7d:8e:36:c0:8c:87:8d:5b:df:56:7c:41:4b:bf:9d:a7:
5d:9e:2f:8f:c6:59:f8:ee:95:6e:b4:00:c3:16:67:89:49:94:
da:0c:b3:95:e1:77:55:b0:53:ea:1c:a8:af:e0:fb:8f:d8:c7:
51:e9:ec:1f:c8:d3:ac:4a:0e:66:87:d2:e4:4c:46:9d:7d:13:
09:6e:bb:0f:0f:00:6d:cf:7b:5e:15:f1:ac:ee:82:03:5a:cd:
cf:6a:65:d2:d8:2a:7b:16:44:49:27:7d:01:9f:aa:53:2e:ee:
b0:8d:7a:73:6c:25:fa:91:94:b5:0a:a6:73:1a:b1:a7:55:6f:
56:ff:8d:03:47:18:8c:48:31:ac:09:2f:45:0b:8b:e1:ba:2e:
b6:1a:12:6a:67:35:0a:ec:a4:e1:69:b7:a3:86:20:c7:54:a7:
3d:8e:93:46:9a:e7:f3:4a:1d:6b:74:df:5c:50:b5:f8:83:a7:
16:89:4d:86:74:7f:78:60:c1:5b:29:cf:23:c3:f1:13:0c:41:
9e:1e:8d:ae:7c:3b:94:f9:9a:db:25:2a:29:bd:7e:ad:0b:71:
a1:ff:63:5e:e0:dd:cb:18:58:90:de:30:10:b7:c9:4e:8d:d1:
e2:ca:8f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:42:06 2025 by rpki-client