Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File: vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier: pMkoPV1B1yi1qUMRT7FtieMW2xbKs2dVtOkBmchTG9I=
Subject key identifier: 09:ED:77:C0:A7:B8:F2:BB:29:43:33:29:1E:82:AD:0B:60:FC:C0:99
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial: 019A56AEDBCF4A1EC7F2E802070CAC2E4B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number: 0B12
Signing time: Thu 06 Nov 2025 01:01:31 +0000
Manifest this update: Thu 06 Nov 2025 01:01:31 +0000
Manifest next update: Fri 07 Nov 2025 01:01:31 +0000
Files and hashes: 1: ct0pyOPI6fIxvI90voKvQ2P09kc.roa (hash: HL+IQFJP+wo1WUNFcjpb/00F+VP2TuCmZyFITiHM4E4=)
2: gW5vsz1XHWHAiEv2XrHiZAPT2LM.roa (hash: /LPDMtSPu0KMCf6GqHsTiZ0o1jWTrz0r+OipJeljVUk=)
3: smZrnk_Yoz0MEPZqDKnYUoP-Opw.roa (hash: 24G5yjs0ZUoqUy4OoFHxczQzhAIkELffXisqhuw+2DI=)
4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: U/ZVbnyros69KsNszPvSJuF0Uzn+/m4yVZLuZ9/wj8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 01:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:ae:db:cf:4a:1e:c7:f2:e8:02:07:0c:ac:2e:4b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Validity
Not Before: Nov 6 01:01:31 2025 GMT
Not After : Nov 7 01:01:31 2025 GMT
Subject: CN=09ed77c0a7b8f2bb294333291e82ad0b60fcc099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:13:22:11:e1:64:43:ca:3b:3d:c5:15:95:a0:
fb:37:84:2c:50:57:2d:1e:58:45:4d:65:e8:a3:0b:
21:3b:99:fb:aa:64:af:46:8d:b5:86:fe:9d:da:ae:
4d:60:05:ed:37:26:40:94:e6:4b:2e:14:36:f5:2b:
ee:0d:be:10:96:37:90:a9:6e:32:24:a6:b9:98:69:
92:58:2c:79:7b:9d:7a:f2:81:45:fc:67:93:7b:b5:
07:8b:b6:59:19:f0:94:e9:cd:ea:c6:03:39:6c:ba:
e1:0c:82:7e:f4:8d:16:ef:95:d0:2c:6c:6c:bd:33:
1c:c1:fa:02:0a:8d:dd:a6:39:81:60:e5:cc:1b:49:
22:98:0c:28:5a:cd:67:f6:18:84:bb:e5:4c:60:7e:
96:17:78:48:8a:71:d3:6c:b2:11:1f:37:d6:df:ea:
cf:0e:10:b8:ac:59:df:07:0f:ef:bc:ea:93:40:40:
a5:fd:31:73:89:20:2a:27:f8:7f:81:9e:fb:e1:cb:
8a:d0:16:c8:3f:d2:30:a2:4d:af:60:46:71:83:04:
9c:f8:b2:64:8c:07:e9:fa:b8:dd:95:1b:c8:2a:a6:
5a:f9:9d:56:bb:a9:69:fb:66:12:a2:3b:dd:f3:9c:
8f:ae:9b:98:9b:01:4f:79:a6:29:24:a7:53:02:6b:
23:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:ED:77:C0:A7:B8:F2:BB:29:43:33:29:1E:82:AD:0B:60:FC:C0:99
X509v3 Authority Key Identifier:
keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:84:bf:4b:dd:dc:7a:00:cc:d6:73:44:44:3a:28:e5:be:7e:
04:90:d6:c1:c5:ed:11:da:f8:f2:b5:45:be:69:9c:92:1a:b0:
24:0f:90:9c:12:56:bd:68:b7:1f:21:9f:b5:ac:80:b3:63:0f:
26:f5:f0:43:4c:d8:64:c3:4f:c5:76:2d:2a:09:3d:b3:3e:34:
d5:09:23:01:c9:f5:d2:64:4a:54:8e:81:57:99:53:5a:de:92:
07:9b:a0:2f:92:19:75:30:65:37:c2:37:9a:8a:d6:77:af:e7:
5b:fb:ef:e3:a6:2b:47:e7:b3:96:50:cc:29:5f:ea:a1:c1:d7:
95:65:0b:38:92:62:61:d0:c8:c6:7d:a8:99:de:2f:67:82:63:
1e:38:fd:8e:ad:05:19:c8:89:bf:cc:64:55:50:21:d6:54:cf:
26:a7:21:84:89:0c:fe:d1:9b:da:f1:b7:21:65:13:e5:0b:65:
12:cc:62:d9:4a:f8:12:f8:d4:18:97:c3:18:85:60:b3:ac:a1:
28:bf:01:af:65:6b:48:9e:7e:ad:39:cd:c9:1a:40:92:c8:37:
3b:a7:b2:4e:37:7f:3f:ec:4a:c6:26:c3:4d:a0:ee:9d:2c:70:
98:1a:51:5a:11:e6:e3:cd:8f:ea:b5:d4:b7:0f:50:b8:8a:ad:
3c:6f:d2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 08:11:45 2025 by rpki-client