Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File: vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier: M12yLFCUkz3QXazELurFEksYl52B6ZlF0eckb31R+/c=
Subject key identifier: 29:8D:8A:30:AD:A3:23:27:0E:10:FF:5F:EA:15:57:28:D0:AE:0C:0C
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial: 019951F9949EF6A43DB1C9F4D455EEBA3444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number: 0A8B
Signing time: Tue 16 Sep 2025 10:02:14 +0000
Manifest this update: Tue 16 Sep 2025 10:02:14 +0000
Manifest next update: Wed 17 Sep 2025 10:02:14 +0000
Files and hashes: 1: ct0pyOPI6fIxvI90voKvQ2P09kc.roa (hash: HL+IQFJP+wo1WUNFcjpb/00F+VP2TuCmZyFITiHM4E4=)
2: gW5vsz1XHWHAiEv2XrHiZAPT2LM.roa (hash: /LPDMtSPu0KMCf6GqHsTiZ0o1jWTrz0r+OipJeljVUk=)
3: smZrnk_Yoz0MEPZqDKnYUoP-Opw.roa (hash: 24G5yjs0ZUoqUy4OoFHxczQzhAIkELffXisqhuw+2DI=)
4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: 7c6gprF7IyGw16Kx0/8VkWVGhjkiIvSAtA6MlOzg4OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 10:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:f9:94:9e:f6:a4:3d:b1:c9:f4:d4:55:ee:ba:34:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Validity
Not Before: Sep 16 10:02:14 2025 GMT
Not After : Sep 17 10:02:14 2025 GMT
Subject: CN=298d8a30ada323270e10ff5fea155728d0ae0c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8e:2f:81:2e:20:60:e4:2f:b5:34:e4:e4:11:
d4:4d:f2:a7:96:f6:cf:db:2a:b5:2e:ad:5d:3c:9c:
81:01:a5:68:f5:d3:33:39:7f:39:19:ec:47:2b:df:
ba:cf:81:ff:a0:3a:85:37:87:5d:b0:6e:c8:c1:8c:
2c:c2:c1:4e:0a:22:d3:18:20:e7:65:e0:74:89:8d:
46:52:23:05:d9:d2:8c:d8:3f:e4:ac:ec:fb:c1:0f:
c5:64:98:be:47:00:37:d3:fe:f4:66:03:17:5a:f3:
a0:da:e7:42:06:33:06:9c:c0:cb:d4:1e:01:2d:ae:
28:6c:50:6e:f0:74:1c:01:ac:22:20:82:2c:28:49:
43:08:c8:a3:24:cc:5f:b7:c7:27:c8:70:40:41:18:
1c:6c:f5:fa:bc:b7:69:82:de:6f:4d:d0:99:58:d7:
81:af:09:d9:99:eb:51:cf:23:ce:a1:a5:7e:72:c4:
da:8f:0d:e2:b6:31:3b:c3:e2:0a:9e:ea:eb:09:36:
32:08:ee:58:67:6f:a7:63:f0:d3:07:23:55:95:52:
05:74:cd:fd:07:6a:87:8e:70:95:0b:c7:7b:4d:23:
c9:f8:1f:91:23:fd:22:67:1d:90:39:2e:4c:c0:d8:
c2:08:37:98:24:2b:7e:83:fb:06:ce:dc:b5:5b:13:
e6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8D:8A:30:AD:A3:23:27:0E:10:FF:5F:EA:15:57:28:D0:AE:0C:0C
X509v3 Authority Key Identifier:
keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:95:95:b1:49:4f:a0:9c:b5:63:c8:0c:c8:f2:66:a2:20:35:
1f:27:1e:4f:cd:ec:6d:db:39:62:de:fc:a8:76:78:f2:96:38:
fc:86:75:f9:f2:52:0e:1d:59:9e:70:2f:91:f4:9f:d2:0f:5c:
24:6e:8c:1e:8c:78:20:e0:68:f3:ee:54:04:2c:ee:b0:17:1c:
c1:97:85:18:f6:53:fa:d2:09:92:2a:18:0e:94:3b:85:df:cd:
36:cf:e7:4f:08:81:cd:31:e2:a8:84:24:b2:e4:a4:2a:c1:74:
67:08:9b:d9:2a:57:42:af:85:31:98:6a:f0:3a:40:84:8f:9d:
84:05:a1:7e:4e:23:ea:fe:d5:79:4a:6a:af:4c:aa:ad:20:bb:
71:56:81:f9:97:8c:28:21:2d:59:da:9b:49:00:2b:39:26:da:
b1:f4:a4:c0:c5:a8:f0:f4:e5:55:a8:54:0c:bf:65:46:63:b9:
2f:be:13:d1:31:ab:5e:81:05:06:5f:ab:be:6a:36:ab:94:c8:
ef:04:a2:9a:74:35:b9:0b:e2:d2:1b:dd:54:49:72:6a:ef:9f:
0b:34:5d:17:ed:e2:05:76:b6:06:c1:1f:5d:44:30:03:6d:12:
62:bb:70:22:00:0f:ad:04:a0:ce:e0:dd:29:ca:54:43:57:a3:
1c:ba:77:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 19:39:41 2025 by rpki-client