Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
File: vQY9lEu4H8McuhFJndAG607OliQ.mft (raw, json)
Hash identifier: 6sWORXxiJGLgvwmBUaIhJ75K0OftFEKg2G79VbNXieI=
Subject key identifier: AF:85:64:12:FF:B2:DA:73:47:EA:21:CE:EF:BE:B8:43:1F:CC:89:E0
Authority key identifier: BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
Certificate issuer: /CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Certificate serial: 019963909D825C4E3CB76CF0C0DC0144C96E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
Manifest number: 04C9
Signing time: Fri 19 Sep 2025 20:00:45 +0000
Manifest this update: Fri 19 Sep 2025 20:00:45 +0000
Manifest next update: Sat 20 Sep 2025 20:00:45 +0000
Files and hashes: 1: Nq1isTWXGFgDMfQsWjLkSFAz9YU.roa (hash: cOanxi0n0S0i8MlV6jtoZzMtSVudeCiiZSom6UuFfg0=)
2: vQY9lEu4H8McuhFJndAG607OliQ.crl (hash: BHWqEaExt6oQTCmxiVWd7XmGtt/+O2oSxZY3btVc7y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:63:90:9d:82:5c:4e:3c:b7:6c:f0:c0:dc:01:44:c9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Validity
Not Before: Sep 19 20:00:45 2025 GMT
Not After : Sep 20 20:00:45 2025 GMT
Subject: CN=af856412ffb2da7347ea21ceefbeb8431fcc89e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:c3:35:91:b7:20:76:9c:36:44:cb:f3:aa:
c8:4e:fb:20:bc:b2:4f:8c:63:8d:ca:3d:7c:02:37:
42:de:ea:d6:ae:c1:6c:b6:f7:41:82:35:76:a5:b0:
bb:11:33:d7:f8:47:37:d2:8a:1b:fb:68:4b:ab:cc:
2a:3e:ec:6c:c9:e9:0d:e5:10:92:0d:b6:41:4a:a2:
fe:ec:0d:8d:23:18:00:ab:b7:c6:ea:19:f8:b3:3e:
fc:02:63:20:94:2d:8a:40:94:fe:35:36:f3:42:14:
70:1c:53:bd:90:51:3f:41:94:0e:fd:3f:6a:db:f5:
f1:44:a4:22:1d:00:c8:2c:41:fe:f2:7f:30:fd:8e:
fe:2b:d7:b8:1f:da:c9:1a:88:4d:fc:f9:4a:b1:a0:
83:c0:cd:13:1d:8d:d3:67:e2:43:51:64:f6:85:5b:
71:44:0f:ea:42:cf:e2:18:13:60:f6:5f:eb:71:bb:
67:a8:0a:35:e1:d9:f3:41:14:69:c0:a3:49:38:1d:
5e:80:9a:30:70:ec:89:b0:94:96:c1:9a:d0:07:42:
8d:03:37:c8:e1:ef:b0:8b:ac:85:50:0b:44:1e:ea:
4f:ae:28:e4:0f:28:b2:ab:c4:88:45:85:65:29:7d:
fd:f8:16:65:05:55:3d:0d:c1:c6:c1:b5:77:4b:4a:
c3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:85:64:12:FF:B2:DA:73:47:EA:21:CE:EF:BE:B8:43:1F:CC:89:E0
X509v3 Authority Key Identifier:
keyid:BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:a9:06:29:70:9a:f9:98:93:fa:5b:a4:06:b4:33:f0:fb:d6:
ab:d4:e8:08:92:12:c0:34:78:e3:4a:79:92:81:c4:d4:47:d1:
63:32:15:42:52:87:f5:fc:f6:3a:b4:ce:f2:da:90:46:0c:b4:
b9:98:53:ad:55:47:4b:a4:e2:d6:73:f9:1b:1b:9d:83:02:6e:
ac:05:61:16:c0:d8:dd:bb:1a:9e:8d:d8:9b:fe:50:c2:d4:85:
26:f7:a7:e1:b7:84:69:5c:c3:bd:2f:57:38:c8:16:f8:78:32:
e8:00:90:d6:6f:5a:27:07:b2:42:4b:fd:ac:f2:9b:f0:e0:6c:
71:04:2a:90:fb:1d:0b:1b:49:02:2a:e1:95:bb:51:7f:e9:72:
a3:95:38:41:93:b5:2b:ea:41:4b:c2:fe:88:97:eb:39:82:1e:
c3:43:30:8d:f0:ad:f5:35:47:96:bd:3a:36:02:ad:41:a2:49:
96:bf:20:2f:e6:bb:9a:98:e3:57:3b:2f:64:39:48:a6:be:ad:
96:16:59:81:8e:d1:71:bf:df:e9:4e:3b:ef:9f:ab:ee:0a:25:
ad:ed:2d:0b:b2:2e:03:42:f5:1d:c1:9a:89:20:a6:20:d1:2f:
f9:3e:01:34:90:8c:5a:4a:09:bc:5f:f0:c3:96:3c:26:31:78:
3a:17:97:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 21:24:42 2025 by rpki-client