Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
File: vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft (raw, json)
Hash identifier: 1M8MSzS1EoYU9ySbarLlebs3fagmd2EQHzmeYrXCPyE=
Subject key identifier: 8A:F9:75:13:F4:9F:7A:39:6F:EB:A1:BB:4C:A6:3D:C6:92:21:8A:43
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Certificate issuer: /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial: 019A70DC47687A57D34DACB2230BB25AA426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
Manifest number: 153C
Signing time: Tue 11 Nov 2025 03:01:15 +0000
Manifest this update: Tue 11 Nov 2025 03:01:15 +0000
Manifest next update: Wed 12 Nov 2025 03:01:15 +0000
Files and hashes: 1: Ghw61h9q0dZx9p33fCHZwLJ--4g.roa (hash: XENiDzusC8HHdBPr6eoujfkQa5XCC/wJpP0SovK6s5s=)
2: W-gPHpmpBiVpNwoTM89LZF-6eKQ.roa (hash: 1KJlUjxdJ+ruVUfDwdtSoFOvk+NECBzB6oYJ432Oeqo=)
3: gNsZz63lZz-xYYJApJes6zZtWTc.roa (hash: oq/U8u4Y8U1JtfeAS0wF/F6M4QBJJs7QTcA9o7FJ9go=)
4: l-fA27baArnfz8uDdDUN4TrASTU.roa (hash: mDdwZSps/Tm3oeaUYl4v4D4Q07yFttXjrmZKf1wuoqE=)
5: uPPM1c3qaDPcgQcMOMUY1UnD8bw.roa (hash: TZFGaoE1GRn/2zGm9yP4VVapPA1t9azRKGFIQqjd5T4=)
6: vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl (hash: qb+7qZyAx/Ea4ypcIUY5gqpvCi/Z2cdz86XcCnrctdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:47:68:7a:57:d3:4d:ac:b2:23:0b:b2:5a:a4:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Validity
Not Before: Nov 11 03:01:15 2025 GMT
Not After : Nov 12 03:01:15 2025 GMT
Subject: CN=8af97513f49f7a396feba1bb4ca63dc692218a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ec:3c:e1:a8:e3:94:cd:65:35:94:3e:ef:89:
2b:d9:9e:c1:91:5d:09:dd:c0:82:59:c8:7a:e4:2a:
9e:3d:53:ae:91:e6:e7:5e:82:22:a7:c6:f7:24:78:
de:0e:58:6c:93:4a:81:6e:47:2d:82:70:8f:0d:9f:
60:ae:33:2e:8a:30:02:93:09:df:28:60:76:01:ee:
43:60:b1:50:b1:2b:9c:c9:49:98:71:0b:7f:8f:36:
ec:24:d9:5c:6f:24:1b:7b:44:de:2d:42:7b:d9:70:
13:2b:95:00:47:be:be:36:ac:7f:4c:39:9c:86:34:
ee:d7:7d:49:a9:01:91:5a:3d:a1:a0:2a:3e:c5:7c:
15:89:fa:6e:bb:27:4e:6e:17:4a:0c:87:1a:6b:fb:
84:02:3e:81:50:67:3e:6b:5e:82:d3:22:0d:5f:69:
32:64:05:74:16:a3:3a:04:f2:ed:03:97:c4:70:d1:
d9:3c:ed:6c:f1:1f:4f:78:50:dd:53:d3:3f:e6:ab:
58:5d:83:da:1a:f5:a7:e7:0c:b7:f4:3b:9b:6f:62:
e2:88:96:4f:23:45:c0:fe:1e:fa:c2:53:e6:4d:88:
98:de:e9:b6:70:41:99:e0:3b:02:30:28:20:01:5b:
e8:5c:d6:45:b6:6b:62:d1:a7:37:dd:b1:0c:91:e4:
1d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F9:75:13:F4:9F:7A:39:6F:EB:A1:BB:4C:A6:3D:C6:92:21:8A:43
X509v3 Authority Key Identifier:
keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:88:29:fa:6a:44:48:f7:7c:a4:c6:4f:e9:19:15:5f:de:c4:
e5:1c:53:63:b1:b4:d8:9b:91:e3:5a:0c:86:16:a0:c1:ea:eb:
f2:34:a1:81:eb:61:39:6f:e2:38:08:97:6d:b7:ef:1d:74:82:
7e:e6:26:46:90:45:d1:e1:10:07:e5:98:13:ec:9a:90:01:2e:
7c:bc:fd:8c:a6:62:ac:f6:5e:08:0f:eb:e5:bc:9e:bd:23:6c:
c5:d0:8d:f6:3e:84:1d:c0:ae:13:db:e6:12:42:57:e1:f5:e3:
e4:69:f9:b2:57:d6:53:04:90:d2:ad:9d:bc:c0:41:b9:41:a6:
f5:3a:35:91:26:eb:d2:f4:10:80:c8:5a:86:5b:a0:b5:26:55:
84:c9:5e:6c:31:88:d7:a0:d3:ca:6f:c1:bc:42:90:6d:ed:11:
c5:46:9c:71:57:de:d9:41:62:12:91:ff:fe:83:26:ba:a3:54:
77:0a:b2:20:b9:dc:6c:8d:99:69:df:ad:00:f9:50:b9:45:ec:
20:b6:4e:61:71:90:f5:d3:47:f8:91:e5:54:96:42:66:63:1a:
8b:ee:10:93:8e:5a:48:78:fb:7d:a1:66:f6:d7:00:7a:e5:b6:
20:69:e1:aa:57:16:ba:f0:35:a4:50:aa:61:af:02:19:f3:11:
d9:a5:0c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:13:59 2025 by rpki-client