Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
File: vZoDUhhk_eVxr63vAfMpdZg9H2I.mft (raw, json)
Hash identifier: /eLbvTfFY2OgPKl+B+sSplDprLDwohsUyjWLFE6WJNI=
Subject key identifier: D9:E6:E9:EF:69:EF:3B:1C:FB:3C:D2:79:34:4B:19:E1:D3:8B:E1:22
Authority key identifier: BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
Certificate issuer: /CN=bd9a03521864fde571afadef01f32975983d1f62
Certificate serial: 019A71B7D80813A98847D029AD79ACADCAAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
Manifest number: 0204
Signing time: Tue 11 Nov 2025 07:01:05 +0000
Manifest this update: Tue 11 Nov 2025 07:01:05 +0000
Manifest next update: Wed 12 Nov 2025 07:01:05 +0000
Files and hashes: 1: RJNuysFIW66Gw4c0piXvnXkEo9o.roa (hash: /TsRrqxKejX5cWBdLvn7sFDNt5iNj6A7iHaePoLLWJk=)
2: vZoDUhhk_eVxr63vAfMpdZg9H2I.crl (hash: maNAn60LqjZiA29/H7lI9pMUl8U7YOBqF063YWibokc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d8:08:13:a9:88:47:d0:29:ad:79:ac:ad:ca:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9a03521864fde571afadef01f32975983d1f62
Validity
Not Before: Nov 11 07:01:05 2025 GMT
Not After : Nov 12 07:01:05 2025 GMT
Subject: CN=d9e6e9ef69ef3b1cfb3cd279344b19e1d38be122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:40:81:f4:6a:d0:ce:ec:26:94:14:15:f2:1b:
bb:81:03:81:e6:56:f3:2a:9c:e8:27:70:14:d5:a8:
01:1b:6f:77:9f:1e:bd:75:bb:33:b7:42:db:5d:12:
fc:bf:33:35:e8:52:e0:04:4a:fa:f0:a6:05:13:77:
5c:11:f1:75:f5:1c:82:64:a4:8b:7a:01:f2:0a:78:
f7:9d:bd:b0:13:93:8f:c8:d8:2d:32:a6:cb:f9:97:
46:0b:5d:ba:7a:dc:16:53:ca:f3:76:b5:5d:95:88:
1d:98:37:9e:f7:ff:d8:9a:1a:ed:e1:0c:97:fa:40:
b3:9d:b8:bf:de:5d:ce:5f:a3:35:15:a1:e3:a4:a1:
ae:d6:2c:94:3d:14:d1:19:ac:3e:80:e7:78:26:d1:
08:21:bf:dd:d6:b4:8a:30:b4:06:83:5a:80:af:bf:
1f:34:a6:06:5d:5e:6e:c7:f2:6f:58:8d:63:3a:4d:
b2:f5:a6:91:97:f7:7f:e8:de:9f:de:19:0b:8a:99:
76:2d:6c:e1:6a:1c:31:23:d8:08:a5:0e:17:68:44:
77:c2:5b:ca:5a:26:19:9f:39:8b:8e:60:3f:9e:67:
08:f9:98:d1:b9:23:ce:1b:a1:82:7d:fa:f6:73:99:
f3:ad:2a:54:be:fa:e2:a1:61:4a:0b:15:c9:1b:3f:
17:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E6:E9:EF:69:EF:3B:1C:FB:3C:D2:79:34:4B:19:E1:D3:8B:E1:22
X509v3 Authority Key Identifier:
keyid:BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:25:68:ee:f3:26:40:1c:93:b9:12:94:bd:a9:61:f1:ce:51:
8d:30:9c:9a:f9:b4:d2:31:8d:30:6e:b8:8a:ab:c4:00:28:12:
18:fd:45:47:07:74:83:81:db:c2:3c:39:db:5b:ae:bc:8e:9c:
72:2e:1f:d5:de:84:08:f9:86:53:17:aa:f7:74:54:dc:7c:5e:
6f:e7:18:a7:d3:f0:51:02:76:b5:3c:72:90:fb:b0:cd:fb:12:
82:d8:aa:ef:c6:2f:d9:6b:15:9b:21:8c:65:bd:ed:0c:9c:28:
09:d6:97:d8:ef:06:3d:11:de:2f:b8:b6:51:3e:4d:85:87:5f:
e5:f9:20:4d:62:71:c7:99:6a:4c:f2:8e:84:d6:cd:b7:bf:80:
54:ab:6b:0a:eb:a2:0e:72:5e:b5:44:81:e6:71:38:70:53:cd:
d5:be:d1:dd:2c:7b:51:86:05:b7:ec:51:51:42:70:be:99:39:
2b:6e:22:53:ad:d9:62:05:d7:b1:d7:4d:37:ad:fb:94:82:77:
b4:a6:ac:84:f2:e7:b1:97:ac:4b:6e:a1:d2:66:d8:ec:a6:ac:
1b:23:01:7b:ab:cf:5f:70:e0:61:31:64:a3:af:a6:fc:ec:a7:
0b:5b:0e:10:0c:46:f1:a6:62:72:d4:a7:fe:84:8a:5e:66:43:
b4:62:f0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:02 2025 by rpki-client