Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
File: vJxAOtAH4qJCprCQYaPBo2CmTVo.mft (raw, json)
Hash identifier: jPyFYQlmZ81cyG5iFhmU9/oDtvIpyzfyLUKCMxuFmc8=
Subject key identifier: 41:1B:43:CE:E9:AA:FD:2A:9D:68:54:C7:36:AE:D4:DC:97:44:03:18
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 019936B775ADCEDF01EC6F943E5D9DD0D9DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
Manifest number: 08C4
Signing time: Thu 11 Sep 2025 03:00:16 +0000
Manifest this update: Thu 11 Sep 2025 03:00:16 +0000
Manifest next update: Fri 12 Sep 2025 03:00:16 +0000
Files and hashes: 1: DI4aL2VDjSmaj-T6WF7qWyVxEy8.roa (hash: irLOs0EfjvwV0yEqJPJZBOPh+tRGrPv6PzJ4eB+9FwU=)
2: c4jk7gKONHNQDGzC6dsv2q8s7vI.roa (hash: a6L74Wo+bnsgWub76o3PYF/fgomhfzvN3TtRHLCaboU=)
3: tPkC9g1rh0B-WDtzyBxNorqbjqo.roa (hash: 3UTyjNkmps78kxWwCRVUmx8qZWeL7ho0lCKlGDqKCwQ=)
4: vJxAOtAH4qJCprCQYaPBo2CmTVo.crl (hash: NieOUqN3y4VKDGMUqIzQJWoq4T3srLvQZsV1A08jkvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 03:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:b7:75:ad:ce:df:01:ec:6f:94:3e:5d:9d:d0:d9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Sep 11 03:00:16 2025 GMT
Not After : Sep 12 03:00:16 2025 GMT
Subject: CN=411b43cee9aafd2a9d6854c736aed4dc97440318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:97:3a:98:27:7d:20:a6:17:07:8b:5d:47:04:
cf:84:c8:d9:3b:5d:0e:6b:e9:61:39:11:39:67:a1:
17:ee:57:27:54:53:80:69:f4:0b:62:1c:23:52:94:
c8:a8:62:b4:2d:a4:15:5d:6e:b4:87:7e:3e:74:73:
be:d1:c8:99:4a:9a:1e:6a:cd:a2:15:4b:9a:74:ea:
b6:f3:cb:dc:05:66:a3:0f:f9:c6:2d:db:77:8f:63:
91:c4:98:8b:87:10:dc:e8:0f:cb:29:8f:00:b8:ff:
87:c0:db:b9:bb:90:fc:7e:f9:8d:d8:98:49:f2:b5:
c5:da:17:56:89:d1:13:d7:b4:35:e6:b0:8e:69:6f:
cd:cd:55:98:6f:ea:b6:8b:5a:0e:90:cb:c3:7e:e4:
79:b1:e6:7a:36:ce:2b:2a:dc:af:e0:b4:f7:6f:27:
c4:30:02:3c:fe:5f:05:05:90:d2:ee:78:d0:88:19:
58:06:f2:92:a5:c5:27:d3:99:23:6f:5c:85:1a:c4:
06:0e:73:b8:f0:87:1e:c9:7f:e3:46:a9:bc:a4:05:
81:a9:d6:9a:05:5c:ea:56:6b:5a:51:2a:68:1b:49:
7f:27:8d:d3:5c:e7:ca:90:0f:80:48:b9:30:3d:2b:
79:f0:2b:bc:5d:07:b9:3f:3c:96:d7:eb:a0:17:05:
4a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1B:43:CE:E9:AA:FD:2A:9D:68:54:C7:36:AE:D4:DC:97:44:03:18
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:57:09:65:62:e7:fb:fc:fe:8c:91:65:57:25:0f:c6:de:b1:
d5:01:c3:fc:4f:a3:06:69:56:1b:ff:99:07:10:00:f4:d6:f2:
c9:0b:b1:ab:71:54:40:70:d3:b3:6c:8e:b6:93:0c:c0:ba:56:
37:79:2e:1e:3e:ca:e7:d6:01:31:fd:d1:e3:57:3e:64:d9:ba:
33:e0:76:00:d3:a1:6e:00:42:7b:3c:e7:2a:4f:97:3e:46:93:
88:ce:1e:3f:6b:53:4c:eb:3a:c8:c3:d4:b9:63:93:48:da:5f:
fc:c3:51:39:cb:16:d4:95:de:0d:cc:cf:cf:06:0e:1f:5b:c5:
33:96:ba:b7:33:57:83:bd:3d:9e:4d:c6:8f:e8:93:4b:af:a9:
03:88:60:a0:22:5c:2f:5d:fa:39:3d:78:4a:13:2a:42:be:d3:
90:0a:5f:cb:9d:b0:51:87:4d:dd:fa:17:dc:f8:4e:a8:5d:70:
47:8c:54:34:7f:16:1e:73:ff:0c:9a:f6:25:25:6e:37:25:94:
ff:1a:70:7c:92:02:df:11:ae:41:e1:c9:af:29:2a:09:a1:4d:
18:b9:da:85:f9:0e:5c:de:7d:88:ef:8a:4a:9e:4e:ee:1b:6b:
13:19:36:b8:f2:71:28:70:7c:4e:10:5a:95:8b:ed:39:3f:3d:
53:2c:84:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk2t3Wtzt8B7G+UPl2d0NnaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWM0MDNhZDAwN2UyYTI0MmE2YjA5MDYxYTNjMWEzNjBh
NjRkNWEwHhcNMjUwOTExMDMwMDE2WhcNMjUwOTEyMDMwMDE2WjAzMTEwLwYDVQQD
Eyg0MTFiNDNjZWU5YWFmZDJhOWQ2ODU0YzczNmFlZDRkYzk3NDQwMzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Zc6mCd9IKYXB4tdRwTPhMjZO10O
a+lhORE5Z6EX7lcnVFOAafQLYhwjUpTIqGK0LaQVXW60h34+dHO+0ciZSpoeas2i
FUuadOq288vcBWajD/nGLdt3j2ORxJiLhxDc6A/LKY8AuP+HwNu5u5D8fvmN2JhJ
8rXF2hdWidET17Q15rCOaW/NzVWYb+q2i1oOkMvDfuR5seZ6Ns4rKtyv4LT3byfE
MAI8/l8FBZDS7njQiBlYBvKSpcUn05kjb1yFGsQGDnO48IceyX/jRqm8pAWBqdaa
BVzqVmtaUSpoG0l/J43TXOfKkA+ASLkwPSt58Cu8XQe5PzyW1+ugFwVKPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEbQ87pqv0qnWhUxzau1NyXRAMYMB8GA1UdIwQY
MBaAFLycQDrQB+KiQqawkGGjwaNgpk1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80YWU0YzctZjI4Ni00YzZlLTk1MTQt
ODhlNjgxNjI3MWY3LzEvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS80YWU0YzctZjI4Ni00YzZlLTk1MTQtODhlNjgxNjI3MWY3
LzEvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFcJZWLn
+/z+jJFlVyUPxt6x1QHD/E+jBmlWG/+ZBxAA9NbyyQuxq3FUQHDTs2yOtpMMwLpW
N3kuHj7K59YBMf3R41c+ZNm6M+B2ANOhbgBCezznKk+XPkaTiM4eP2tTTOs6yMPU
uWOTSNpf/MNROcsW1JXeDczPzwYOH1vFM5a6tzNXg709nk3Gj+iTS6+pA4hgoCJc
L136OT14ShMqQr7TkApfy52wUYdN3foX3PhOqF1wR4xUNH8WHnP/DJr2JSVuNyWU
/xpwfJIC3xGuQeHJrykqCaFNGLnahfkOXN59iO+KSp5O7htrExk2uPJxKHB8ThBa
lYvtOT89UyyE4w==
-----END CERTIFICATE-----
Generated at Thu Sep 11 11:53:47 2025 by rpki-client