Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
File: vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft (raw, json)
Hash identifier: xNIT2jYshTpMajAA+JctN9JYQGw9A71eo+O3Y4VmfCQ=
Subject key identifier: 8F:40:B7:A4:5B:91:B0:7E:F2:60:09:3F:FD:09:B7:93:82:BE:0E:69
Authority key identifier: BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
Certificate issuer: /CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Certificate serial: 019A4D746F04522F915D5FC0D1301A7C3AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
Manifest number: 0DD4
Signing time: Tue 04 Nov 2025 06:01:07 +0000
Manifest this update: Tue 04 Nov 2025 06:01:07 +0000
Manifest next update: Wed 05 Nov 2025 06:01:07 +0000
Files and hashes: 1: AFiiX1ExBRX0sjF1OFaXff5vX-o.roa (hash: s6dqOT6FYSZSQT8asyjr/q9SCL3Hless8wyrxiVHEwU=)
2: vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl (hash: Y4ECYEJKUeVMfyAUiEdVwsnp4ioo7Q0qSeigQjBoW7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:6f:04:52:2f:91:5d:5f:c0:d1:30:1a:7c:3a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Validity
Not Before: Nov 4 06:01:07 2025 GMT
Not After : Nov 5 06:01:07 2025 GMT
Subject: CN=8f40b7a45b91b07ef260093ffd09b79382be0e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:79:12:32:3c:5b:8c:44:da:6e:06:3c:78:8f:
59:0e:f3:d9:b5:dc:09:54:fd:79:d9:e5:bc:27:6d:
b9:e6:86:34:65:ec:c8:78:eb:43:ec:76:bd:0c:35:
0b:88:62:fa:57:65:12:fd:db:ae:78:aa:74:e1:72:
f6:da:a3:36:ff:b3:23:8b:18:7f:83:82:49:2b:d9:
71:82:03:51:de:34:52:f9:17:08:9c:25:76:d0:66:
df:78:6f:8c:cf:8a:e9:d8:ef:8e:7d:9b:74:14:f3:
64:f6:87:fb:0e:09:a8:81:1f:6d:21:4c:12:7f:9f:
f3:34:ac:c0:e4:94:d1:74:32:0e:ff:ed:c7:85:c5:
42:8b:e6:c2:9b:a2:79:3f:9a:5c:b9:86:f3:96:e4:
c4:34:57:2e:07:b5:11:7c:6a:a4:df:ee:ef:be:dd:
5d:f2:e5:98:2a:e1:a7:a9:2a:c5:ea:91:e3:d8:7b:
f6:f4:a1:29:0a:42:e9:e4:93:65:e0:65:a7:7b:64:
d1:fe:ad:98:9e:fb:7b:ba:c3:be:68:b0:b3:24:23:
e1:5d:27:2f:77:92:1b:e2:f3:d4:af:7d:8b:8e:91:
f3:b2:c9:ca:67:9c:4b:b9:68:04:56:30:e8:64:4c:
48:81:78:7e:4a:6b:03:33:4e:3c:27:63:8d:1b:4d:
7c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:40:B7:A4:5B:91:B0:7E:F2:60:09:3F:FD:09:B7:93:82:BE:0E:69
X509v3 Authority Key Identifier:
keyid:BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:bc:5a:ec:f9:47:ac:dc:ba:09:bd:18:48:04:e1:62:3c:1d:
bd:5a:40:4e:e3:bd:93:93:c4:7a:18:ab:24:3e:11:da:c2:c0:
17:f5:1f:79:29:f2:d2:c5:6f:28:9d:09:0a:a3:dd:df:48:51:
cf:df:71:b4:f6:4a:c9:20:bc:88:30:b5:4e:96:3b:44:f8:a7:
30:4e:7c:85:3d:b3:63:77:19:aa:cd:7a:51:fc:ab:37:a2:f4:
c4:cc:24:fd:ad:8c:e1:01:72:61:85:95:b0:57:98:91:bb:87:
eb:60:9b:2f:a6:c8:b5:8e:be:48:7b:ac:64:a3:f1:58:02:75:
67:13:34:95:8a:0a:ff:e1:c0:43:aa:91:49:f1:15:92:01:01:
4b:ad:07:d6:58:40:52:51:8a:f4:34:b2:1a:d8:3b:d8:c5:63:
13:3e:d5:03:07:da:86:dd:04:16:6c:4a:d2:58:3e:53:c8:b7:
b7:07:5b:30:f6:df:6b:82:b1:60:89:68:11:3e:29:9a:a3:a6:
58:5b:dd:23:85:4e:a7:6b:1b:61:72:cc:8d:c2:75:d2:44:6d:
e8:3a:d7:93:47:59:1a:4f:39:c8:7d:c5:9c:ae:5c:ce:2a:bd:
1f:d7:8e:ea:b7:08:e6:6e:c3:06:f4:17:de:de:43:9b:6f:e1:
40:67:82:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:34 2025 by rpki-client