Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
File: vMfmdGZUQPbmuA5v8VWq1qics_I.mft (raw, json)
Hash identifier: HpzorQzbx01iUdA5cQCacWTUSStmzkR+7n6u803jivw=
Subject key identifier: 9D:30:CB:1F:BE:FA:AC:68:BF:92:5F:2E:2D:D8:19:D3:12:1C:0E:F1
Authority key identifier: BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
Certificate issuer: /CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Certificate serial: 019A1E3F23BECE9E1EB2ABA3FDF6837698EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
Manifest number: 153A
Signing time: Sun 26 Oct 2025 02:00:45 +0000
Manifest this update: Sun 26 Oct 2025 02:00:45 +0000
Manifest next update: Mon 27 Oct 2025 02:00:45 +0000
Files and hashes: 1: PHL7NSBK95zaws9C31ZflNW81UQ.roa (hash: xN1IuHM2HqmvCMYrHZyAcKbiNydpQGHMsZWgFpHpOl8=)
2: vMfmdGZUQPbmuA5v8VWq1qics_I.crl (hash: MWT/lph/o2A1EmJ78BTEHU1dRT6LAfjFg3ehbIpeae8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:3f:23:be:ce:9e:1e:b2:ab:a3:fd:f6:83:76:98:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Validity
Not Before: Oct 26 02:00:45 2025 GMT
Not After : Oct 27 02:00:45 2025 GMT
Subject: CN=9d30cb1fbefaac68bf925f2e2dd819d3121c0ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d8:27:d3:15:de:ea:4e:02:a8:8c:cc:4c:6b:
8e:a3:52:e8:1b:32:68:5f:ec:ec:06:8b:4a:58:e5:
6f:65:7f:ed:81:b6:a9:67:7f:4d:15:5e:78:d1:5b:
59:ea:c1:13:b7:d8:40:4f:1f:03:5c:74:62:80:f8:
d0:72:0d:ca:93:59:00:ad:ee:eb:11:8b:c4:96:24:
fb:d1:d8:04:7a:30:e3:02:6f:01:a2:55:78:10:c1:
07:dd:16:c8:2b:f0:c5:26:e7:89:c2:dc:51:33:73:
4a:78:48:db:8e:d3:99:c1:fd:dc:3f:4e:9d:f0:14:
5e:66:43:94:6b:25:f5:2d:19:8f:21:a2:f3:12:e1:
34:bb:f4:3d:3a:07:d5:b2:d1:c8:cf:84:72:40:82:
b0:e3:72:86:c3:1b:f8:3e:93:5d:06:b5:b8:2c:98:
3e:ef:cf:2d:ca:44:46:4c:22:18:ed:99:f4:a2:83:
6b:54:df:c2:cf:a3:3f:83:8e:48:52:d6:7d:ed:c8:
f0:ac:bb:a7:14:8f:b8:dd:2d:70:99:f4:e4:e2:58:
c6:f6:e2:8a:80:2a:bf:54:92:ff:c5:32:e2:57:9e:
39:f1:f8:81:c6:a6:4d:79:43:a9:da:38:79:d8:76:
cf:d1:30:9f:7e:a3:19:ab:31:3a:66:ac:f3:2e:1a:
52:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:30:CB:1F:BE:FA:AC:68:BF:92:5F:2E:2D:D8:19:D3:12:1C:0E:F1
X509v3 Authority Key Identifier:
keyid:BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4a:a8:18:59:9e:b2:b0:9a:51:fc:b0:56:95:30:87:a8:86:
39:b3:0a:f3:09:e6:86:a7:fc:aa:05:5d:b4:6f:fe:b7:9b:89:
a1:b0:f7:d2:17:43:8a:5b:3c:2c:a3:89:89:73:9f:e3:2c:33:
a4:11:3c:67:47:5c:71:c7:1f:22:b9:fe:8c:ac:a2:53:97:b0:
85:88:ea:27:e6:16:4b:4f:36:bd:3f:e5:cf:46:d1:95:5c:53:
3e:20:4c:6b:69:eb:ce:1c:30:8e:1b:eb:e3:4f:23:f7:7e:eb:
5a:87:d0:68:98:c7:13:6a:4c:2d:0f:85:3a:76:a6:96:70:91:
6e:f6:c0:b3:94:0d:f9:19:54:d0:31:b9:be:db:c6:dd:07:6f:
6e:65:0c:ea:c0:39:4a:95:54:cc:69:b7:53:8c:18:62:f5:a7:
f6:db:4c:62:a7:52:32:a0:e5:00:4c:42:7e:0a:9a:3f:14:b8:
0a:c6:52:e6:67:81:7b:cc:8d:af:0c:c1:1a:7c:a0:68:ab:1f:
51:5d:2e:50:e5:a2:e9:28:be:1b:1e:d1:b6:60:18:a5:0f:43:
6c:df:e5:1c:e6:e3:75:7b:be:0a:5b:7d:ab:04:0f:b4:04:da:
8e:2a:68:94:98:a4:46:cc:44:f6:e0:40:5f:44:d5:e6:a6:2b:
b2:56:3a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:19:07 2025 by rpki-client