Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
File: vx1ZdLTlmcpy3MTawGbXcUIC78k.mft (raw, json)
Hash identifier: klSFBOY8Xg230L2vjubZVEU1L8iKQ0fPKw/hLG3bPss=
Subject key identifier: 42:50:4A:8F:97:2E:ED:AF:3D:C0:57:5D:DC:18:75:60:09:65:53:38
Authority key identifier: BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
Certificate issuer: /CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Certificate serial: 019A23D30DC379B94A129D3B252B410E4A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 04:00:25 +0000
Manifest this update: Mon 27 Oct 2025 04:00:25 +0000
Manifest next update: Tue 28 Oct 2025 04:00:25 +0000
Files and hashes: 1: oj5pO6PbAIedrwIhX-SgXkuxPgQ.roa (hash: chkdnhybp0jJ1hG80xmgFXkOcgLkze7nqAVVBuJ+bhU=)
2: vx1ZdLTlmcpy3MTawGbXcUIC78k.crl (hash: jzCB0LdTji+As91B4JiOG+cZ3EM9Kk9YBROqxZeEt4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:0d:c3:79:b9:4a:12:9d:3b:25:2b:41:0e:4a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Validity
Not Before: Oct 27 04:00:25 2025 GMT
Not After : Oct 28 04:00:25 2025 GMT
Subject: CN=42504a8f972eedaf3dc0575ddc18756009655338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:96:33:d1:fa:09:aa:d8:33:9f:69:e1:cf:
59:dd:10:9a:55:09:48:2d:50:61:9d:ad:7a:11:70:
b7:ce:e7:c1:d6:a1:4c:c3:49:67:1d:54:02:d3:6a:
f8:c0:55:d4:28:66:e0:a0:f9:8a:e6:3f:c0:85:2e:
5c:33:44:1c:be:16:6c:8e:cd:be:a7:7c:9d:2e:39:
95:af:02:2c:df:ff:b9:36:5a:6d:17:4e:17:34:67:
03:cb:72:d1:93:38:8d:91:27:94:95:f8:03:16:14:
2e:e1:a6:dc:0f:f2:28:68:d6:63:76:aa:05:8a:da:
7b:93:82:b5:34:72:f5:5a:bb:c9:0c:2f:72:10:b1:
95:90:9b:80:d2:0c:5f:0c:28:1c:39:42:d9:69:02:
ca:1c:2a:a1:10:47:73:00:c4:9e:51:94:5e:16:dd:
a9:b2:55:24:6e:c6:a6:ea:12:e7:ac:94:db:ca:32:
fb:49:2d:eb:c4:94:3e:7d:ab:33:4a:3c:de:06:46:
08:fb:42:29:cc:cf:e6:81:c2:76:37:2a:55:65:ce:
c0:ba:c1:18:06:f3:10:9a:8f:4f:f6:d3:dc:6d:9d:
d0:9a:bb:88:b7:5a:d5:83:86:1f:26:81:71:31:5f:
65:a2:14:02:4c:53:ea:57:32:fa:6a:d1:25:c8:3a:
91:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:50:4A:8F:97:2E:ED:AF:3D:C0:57:5D:DC:18:75:60:09:65:53:38
X509v3 Authority Key Identifier:
keyid:BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:92:c8:fe:55:33:ea:85:88:3c:e4:b1:3c:84:bf:8a:f2:73:
e3:d4:7c:80:22:3c:fe:41:3f:38:42:17:ac:3e:74:68:0b:bb:
aa:23:01:43:03:f3:ff:23:71:f2:e2:55:64:91:c3:35:e9:6b:
82:04:79:11:ef:f2:35:9b:37:96:a1:be:b3:6e:f1:c8:3b:48:
45:23:1b:19:14:f3:38:c6:c2:71:4c:8a:51:90:71:48:c6:c1:
f9:f3:58:e7:a3:2a:eb:25:a2:76:bd:52:54:b8:52:a5:2f:64:
61:79:dd:26:76:d1:a1:f7:a6:73:61:13:d3:d8:a4:86:eb:d3:
27:90:a9:77:d5:eb:6a:ff:4f:52:69:eb:2a:13:2d:4d:2b:f0:
0f:01:bd:d3:11:60:d4:e6:43:cb:c0:05:8b:43:a7:be:ce:61:
cf:20:91:46:2d:1d:c4:25:05:aa:78:e5:e6:ed:78:83:2a:1d:
46:23:d5:c5:b4:09:34:9e:39:3a:b8:b2:49:dc:e6:99:cc:d0:
49:b8:d1:9f:80:7d:f1:60:6f:d6:93:1c:9f:47:c1:05:56:c4:
c2:b1:bd:83:7b:df:c5:3f:d8:cd:7f:d2:95:b3:7e:2f:bc:1f:
ad:c5:da:25:5f:a8:5c:08:fe:f7:59:e1:6e:46:24:d6:e4:0a:
d7:8a:9d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:15:07 2025 by rpki-client