Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
File: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft (raw, json)
Hash identifier: TJM3N66s+VHfsgxbAg998hWVmKHxzokzV8wvj8rC1QI=
Subject key identifier: CB:4C:76:AB:B4:7D:46:EC:62:64:34:C8:5E:33:CA:AE:86:98:95:1D
Authority key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Certificate issuer: /CN=bc127864cd43048550ed1699c584b5c14d80e098
Certificate serial: 019A71EE99D2CE7FBFF4BDC5D53BF8AADAAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
Manifest number: 079A
Signing time: Tue 11 Nov 2025 08:00:53 +0000
Manifest this update: Tue 11 Nov 2025 08:00:53 +0000
Manifest next update: Wed 12 Nov 2025 08:00:53 +0000
Files and hashes: 1: DmspTgBWfwCRXv4YidxL9MxMuLs.roa (hash: 1HDwuoapwdXHm8uFL7aQ8AiJfzmdU8tLWRG1TVtsgIw=)
2: P4H-USxdX8paqqc5vUCjCPteQ10.roa (hash: RUKC58n+H3u6CbZuKe7grfw3EeWvKz+vXEAG57qC5LQ=)
3: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl (hash: n0zJ7d9wQeERTgXjHuGYQjv8XnRlk+LCSN7hVwywhBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:99:d2:ce:7f:bf:f4:bd:c5:d5:3b:f8:aa:da:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc127864cd43048550ed1699c584b5c14d80e098
Validity
Not Before: Nov 11 08:00:53 2025 GMT
Not After : Nov 12 08:00:53 2025 GMT
Subject: CN=cb4c76abb47d46ec626434c85e33caae8698951d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c5:eb:67:fd:2f:1a:87:b9:14:51:4d:1f:a9:
9a:aa:93:37:86:c1:2e:69:6e:7e:60:c1:d8:6f:32:
1e:5d:c5:3d:78:0d:9d:d9:57:26:24:9f:43:f5:92:
56:19:06:b7:6c:b7:70:58:d0:87:ec:8f:cf:f5:ad:
25:dd:8c:f0:62:20:80:ac:f5:1a:f8:22:2b:9f:42:
cf:58:f4:34:7d:57:c0:b5:8b:de:47:5c:01:9f:1c:
63:c3:4d:65:fd:1c:72:e0:7c:79:11:86:e9:eb:27:
72:42:5c:34:60:98:88:89:68:fd:33:9f:99:3b:e8:
4a:98:3a:19:6a:65:47:55:84:40:96:a4:ef:5d:48:
9f:1e:a2:b7:d9:61:f9:a8:63:6d:7e:52:7c:fb:aa:
a0:94:a1:b5:ed:b7:a3:8b:f1:2e:db:c0:57:a3:9d:
a8:78:34:ba:a9:d4:30:cc:a4:12:ee:d1:22:1b:d4:
a8:b7:92:1a:70:41:6c:c7:5b:55:4e:12:fa:c7:45:
13:ee:62:a7:99:3c:55:f2:ed:7f:19:ea:cf:55:2f:
b0:03:9f:94:d9:0a:91:6e:0c:b7:f5:1d:ba:98:82:
05:7b:1d:f0:a6:ea:bd:15:ae:51:0b:38:69:10:17:
e5:52:ee:08:32:9f:03:0d:fc:2f:aa:93:05:cf:a9:
42:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4C:76:AB:B4:7D:46:EC:62:64:34:C8:5E:33:CA:AE:86:98:95:1D
X509v3 Authority Key Identifier:
keyid:BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3b:9c:32:cd:bf:a2:4a:ee:92:45:97:a7:1e:52:35:a0:a7:
90:e3:02:1f:2c:2b:2e:b7:9b:49:d6:26:3c:b5:70:22:0f:99:
42:38:1d:af:6b:86:e6:1b:c2:67:fa:7c:c3:8c:00:e8:ad:a5:
b2:ef:91:e6:2c:44:7a:82:74:b2:b5:4c:44:d6:83:92:0d:fc:
de:a0:7b:d2:93:47:fb:49:2f:fa:7b:3f:88:ec:8e:9b:e9:86:
40:e5:f8:a4:58:bb:86:36:fb:e0:57:4c:84:6d:ac:15:68:00:
63:79:2a:a9:fe:e1:62:f2:53:cb:0d:a3:9c:72:ed:30:e1:92:
00:8b:7b:ae:13:e9:ba:0d:c6:10:24:e2:c3:74:db:15:44:43:
76:82:de:e1:34:b1:37:cb:21:63:20:c0:b7:7f:8b:f5:61:5f:
18:7e:af:49:4d:56:e4:90:cd:fa:b5:51:d3:dd:00:fa:e6:3f:
75:7b:9e:a9:b0:d2:62:b6:ef:69:30:a4:c5:7b:5c:52:69:68:
41:1d:dc:55:e6:00:0a:ae:15:b7:c1:6c:c5:97:8c:6a:cf:72:
d4:14:46:87:bc:67:62:a5:aa:8e:1a:56:e7:14:80:dd:93:4f:
d5:26:b8:1d:4a:ca:81:a0:5d:ae:9d:1d:fc:79:74:35:e0:86:
de:a1:5f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:34 2025 by rpki-client