Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
File: vJxAOtAH4qJCprCQYaPBo2CmTVo.mft (raw, json)
Hash identifier: GsU4zKMYvqg4wvXTJLBGLTVl0SFFLLLuBWwzWy0xTho=
Subject key identifier: 9E:8D:CF:8A:AE:F4:4E:71:40:8B:74:AF:50:96:AF:D1:1C:EB:29:30
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 019A2553B3CC4C750B03C488EF0E29573431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
Manifest number: 0941
Signing time: Mon 27 Oct 2025 11:00:33 +0000
Manifest this update: Mon 27 Oct 2025 11:00:33 +0000
Manifest next update: Tue 28 Oct 2025 11:00:33 +0000
Files and hashes: 1: C7WJZ0MSGTSK11o8aWAlEWJl0j8.roa (hash: hyEq8bFB3KSRXz3GQOFcsFfK3xFehxlIq2TZp5r0/CA=)
2: IuSi6E2OqyGC8JrvU9bBDewGhB8.roa (hash: xhr1WJNVnuwtRBZVPH3Muk8E3trcpTvU2YyXMkQE9XE=)
3: str3-7dKKBXkTaCco2AxqojW1YQ.roa (hash: fMmpOIsyT53t9MRkb+zMzEyMIqFRw0lRg1YQpIT+8WI=)
4: vJxAOtAH4qJCprCQYaPBo2CmTVo.crl (hash: HGtU1cTqeuZjXQgU5lZ2az8kl7avk+ltPNOHJr1Sxfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:b3:cc:4c:75:0b:03:c4:88:ef:0e:29:57:34:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Oct 27 11:00:33 2025 GMT
Not After : Oct 28 11:00:33 2025 GMT
Subject: CN=9e8dcf8aaef44e71408b74af5096afd11ceb2930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:16:a6:f8:30:c4:38:88:bc:2e:9c:44:b1:
0f:4d:04:9a:4d:bd:b3:23:85:d9:ac:fd:a5:41:f2:
20:64:09:de:69:b2:c5:76:8b:59:62:bb:c1:4b:37:
a6:c9:ff:f7:9a:61:30:4a:43:f3:ef:c9:1d:9a:66:
78:c2:4a:1f:13:c2:ee:c9:d2:f7:2f:ad:92:06:68:
ab:9d:f6:42:9d:6b:c7:17:2b:27:90:00:37:00:5a:
d8:84:38:2d:51:c6:66:80:16:c1:dc:62:2f:ef:0b:
8e:0a:79:23:9e:cc:47:17:4b:d8:bf:37:bb:8f:01:
c3:a4:39:cc:1c:38:31:45:e2:49:99:f6:f6:b6:99:
eb:2a:81:61:78:94:e0:07:6f:75:26:28:65:f5:1a:
0e:a6:02:5e:34:9d:71:9e:f2:23:5e:a0:8e:97:5c:
01:12:68:a8:18:4d:e3:81:68:bc:41:a2:3d:5a:56:
c8:f9:33:0e:88:f9:80:73:ac:cb:4f:38:ea:68:0d:
66:48:be:f1:f2:33:81:33:22:92:d7:30:31:c9:a9:
57:06:cc:b0:fe:d7:18:f7:9f:8e:15:d8:1d:9d:16:
41:e9:3f:03:f0:a0:49:41:e8:2a:cd:04:91:f9:37:
ac:e1:20:dc:a1:be:aa:07:a0:83:25:81:4d:bd:13:
cf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8D:CF:8A:AE:F4:4E:71:40:8B:74:AF:50:96:AF:D1:1C:EB:29:30
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ba:b7:36:b4:ad:67:6f:4d:3a:60:69:d0:36:2e:5b:8f:87:
72:bf:66:76:0f:f8:f4:38:c7:56:2a:2a:fb:b0:2d:51:9e:f0:
a7:89:63:3c:86:73:b4:b6:5f:6c:e1:65:e9:4e:42:11:62:7c:
45:13:e1:57:39:63:98:39:24:10:6e:26:ec:82:14:65:dc:61:
fc:a0:f2:d2:88:19:58:85:22:85:64:e0:3e:64:6f:8b:0a:b9:
19:ea:1d:0a:04:a2:5c:7b:11:1d:c3:e3:e5:54:50:ce:74:1c:
98:73:33:2e:77:3b:be:05:71:fa:d5:b7:ba:51:1c:f5:e2:55:
19:eb:b9:39:90:9d:a2:3f:ed:58:9f:bf:54:74:6f:0a:1e:7b:
e2:2e:65:e3:44:32:9c:99:5d:39:59:5b:07:6f:99:e7:79:57:
93:05:2c:47:28:50:df:c8:51:aa:e3:45:c3:23:b0:bc:5d:7c:
18:54:9d:17:f8:fe:93:82:2b:53:d8:76:19:c8:d7:cf:2d:15:
40:dd:1d:30:d9:7d:bf:5e:ec:13:13:42:16:7a:3f:99:6d:74:
4b:83:82:13:9e:a8:df:a2:f5:6f:02:44:d3:79:c4:4f:af:d8:
46:29:97:55:82:34:56:ce:8c:c8:f1:d4:22:e8:6b:e8:8b:b7:
b2:9d:09:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolU7PMTHULA8SI7w4pVzQxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWM0MDNhZDAwN2UyYTI0MmE2YjA5MDYxYTNjMWEzNjBh
NjRkNWEwHhcNMjUxMDI3MTEwMDMzWhcNMjUxMDI4MTEwMDMzWjAzMTEwLwYDVQQD
Eyg5ZThkY2Y4YWFlZjQ0ZTcxNDA4Yjc0YWY1MDk2YWZkMTFjZWIyOTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5kWpvgwxDiIvC6cRLEPTQSaTb2z
I4XZrP2lQfIgZAneabLFdotZYrvBSzemyf/3mmEwSkPz78kdmmZ4wkofE8LuydL3
L62SBmirnfZCnWvHFysnkAA3AFrYhDgtUcZmgBbB3GIv7wuOCnkjnsxHF0vYvze7
jwHDpDnMHDgxReJJmfb2tpnrKoFheJTgB291Jihl9RoOpgJeNJ1xnvIjXqCOl1wB
EmioGE3jgWi8QaI9WlbI+TMOiPmAc6zLTzjqaA1mSL7x8jOBMyKS1zAxyalXBsyw
/tcY95+OFdgdnRZB6T8D8KBJQegqzQSR+Tes4SDcob6qB6CDJYFNvRPPDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6Nz4qu9E5xQIt0r1CWr9Ec6ykwMB8GA1UdIwQY
MBaAFLycQDrQB+KiQqawkGGjwaNgpk1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80YWU0YzctZjI4Ni00YzZlLTk1MTQt
ODhlNjgxNjI3MWY3LzEvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS80YWU0YzctZjI4Ni00YzZlLTk1MTQtODhlNjgxNjI3MWY3
LzEvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7q3NrSt
Z29NOmBp0DYuW4+Hcr9mdg/49DjHVioq+7AtUZ7wp4ljPIZztLZfbOFl6U5CEWJ8
RRPhVzljmDkkEG4m7IIUZdxh/KDy0ogZWIUihWTgPmRviwq5GeodCgSiXHsRHcPj
5VRQznQcmHMzLnc7vgVx+tW3ulEc9eJVGeu5OZCdoj/tWJ+/VHRvCh574i5l40Qy
nJldOVlbB2+Z53lXkwUsRyhQ38hRquNFwyOwvF18GFSdF/j+k4IrU9h2GcjXzy0V
QN0dMNl9v17sExNCFno/mW10S4OCE56o36L1bwJE03nET6/YRimXVYI0Vs6MyPHU
Iuhr6Iu3sp0JCg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 20:40:36 2025 by rpki-client