Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
File: vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft (raw, json)
Hash identifier: SNPgnTHslrh6qfpdEpiPd7tNOpDt8k+leI8puul3sfY=
Subject key identifier: C6:FA:B4:20:41:74:F8:EA:09:B5:CC:6E:70:2D:78:D8:02:B0:82:47
Authority key identifier: BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D
Certificate issuer: /CN=be2f2ccf1baa39033ec76a586f846a36218f209d
Certificate serial: 019A2855B5C83FCD89B822F5E409A8034657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
Manifest number: 123B
Signing time: Tue 28 Oct 2025 01:01:36 +0000
Manifest this update: Tue 28 Oct 2025 01:01:36 +0000
Manifest next update: Wed 29 Oct 2025 01:01:36 +0000
Files and hashes: 1: JAdnsONCtTfLbO2OfLFXkq3UEe0.roa (hash: uH25J1sXmVYdKjAjZcQtubKyV6gnVwOjCbWyLNaZ4r4=)
2: vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl (hash: uewj68wAiKJUW2pcX+WlXG9gtB3DPmte+Z4P3ThF8Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 01:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:b5:c8:3f:cd:89:b8:22:f5:e4:09:a8:03:46:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2f2ccf1baa39033ec76a586f846a36218f209d
Validity
Not Before: Oct 28 01:01:36 2025 GMT
Not After : Oct 29 01:01:36 2025 GMT
Subject: CN=c6fab4204174f8ea09b5cc6e702d78d802b08247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:a6:be:aa:79:b0:6c:2a:aa:eb:40:0a:1a:
ea:a8:c0:7e:0b:83:1a:f9:d5:31:dc:e0:42:c1:1f:
ca:a1:8c:1d:44:88:c3:bf:28:e5:5f:cb:8f:17:de:
a3:7d:87:c0:1e:d7:a9:84:9a:fe:a7:67:df:ab:38:
89:15:ec:40:72:ef:7c:70:24:0a:63:bb:0e:46:35:
3d:ae:e0:04:a9:dc:39:71:18:1d:93:28:3e:d7:aa:
13:dd:8a:21:7a:42:09:9c:d6:df:f5:ab:3b:40:d1:
67:48:e0:75:11:f3:ca:4b:45:c2:f0:ef:66:71:d4:
00:d2:6d:52:38:a5:69:dd:f1:78:7f:bb:81:9f:ac:
3e:cc:93:68:21:c9:23:6a:c1:4e:52:32:c1:77:2b:
b5:cf:9e:57:1d:aa:a5:20:76:18:37:27:9e:75:ec:
a9:45:a1:cd:9d:04:cf:49:32:98:31:ad:ac:54:a7:
bb:50:c0:64:16:00:0f:61:4c:b8:ab:98:18:f7:0f:
b0:67:7c:81:36:87:4f:04:85:41:75:8d:31:46:76:
8b:a5:e2:5a:c7:d0:66:0e:e2:b6:44:78:1a:15:f2:
5f:07:c9:da:31:ec:98:75:8e:36:3c:58:9b:dd:68:
30:c6:29:0a:42:84:7e:99:6b:09:bc:b0:5e:cb:9a:
01:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FA:B4:20:41:74:F8:EA:09:B5:CC:6E:70:2D:78:D8:02:B0:82:47
X509v3 Authority Key Identifier:
keyid:BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:df:45:28:b9:85:c2:56:6e:98:9c:9e:7f:ec:ed:cc:32:48:
f9:33:8b:03:7d:99:08:fc:5a:fa:0e:d1:dd:c7:7f:1f:32:82:
98:5a:a9:92:a4:91:9d:6f:46:2b:27:20:25:f0:c2:16:16:a8:
0c:af:9d:bb:5f:b9:3a:c0:32:72:7b:b2:34:f8:9a:c5:8a:9c:
69:87:b4:a4:45:e1:1d:43:32:17:25:e0:cb:e1:a3:6b:b3:26:
18:fe:69:71:c8:9c:46:96:36:64:fd:ba:92:29:b9:5b:fd:b0:
8c:42:4e:55:19:42:10:91:3e:45:53:62:5e:37:00:e5:ba:54:
7b:0a:85:df:51:87:60:4a:34:4c:c3:ee:ef:c6:9e:dd:4b:0f:
ce:f0:de:d7:d7:03:88:65:04:b9:c3:87:7d:c1:fe:49:33:66:
af:96:85:cb:c7:b4:3c:55:70:6a:96:f0:c4:88:e4:ef:e2:a0:
f8:b0:a8:d9:bd:00:b4:e8:12:f3:8a:fb:25:c5:e2:72:d5:6f:
db:dc:ea:f5:fc:cd:e3:f0:b1:b2:15:54:99:c6:30:4e:8f:55:
99:55:5d:98:0f:da:11:bf:ea:c8:0e:30:1a:1b:68:d2:63:ea:
72:04:4d:3f:49:88:bb:cc:3e:78:e5:d8:3e:20:34:ae:42:ac:
53:5e:9e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:45:13 2025 by rpki-client