Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
File: vR211yi9J2tMdS4SWlCP-HhK0oU.mft (raw, json)
Hash identifier: yDkDqYMgTx6d75E9miOr8cz8Gujh616j+1ozexLsRFM=
Subject key identifier: 13:F3:8C:C6:F7:62:F2:FE:07:BB:A3:E8:09:7F:C8:CE:22:AC:CB:57
Authority key identifier: BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
Certificate issuer: /CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Certificate serial: 019A4D06B72104164B16CDA350BD5F8D2BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
Manifest number: 12B2
Signing time: Tue 04 Nov 2025 04:01:16 +0000
Manifest this update: Tue 04 Nov 2025 04:01:16 +0000
Manifest next update: Wed 05 Nov 2025 04:01:16 +0000
Files and hashes: 1: 7IfWcJSratNnlfLMrnbIuQWgR8I.roa (hash: S2czlmmJLkq2AObWA1vCv3NtLmwVMJ2FnTs6ITj1XcQ=)
2: vR211yi9J2tMdS4SWlCP-HhK0oU.crl (hash: FyYYbaWB5K3rtSnIg0MJx7rZu7zsGyis2EmnRIuXJ84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:b7:21:04:16:4b:16:cd:a3:50:bd:5f:8d:2b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Validity
Not Before: Nov 4 04:01:16 2025 GMT
Not After : Nov 5 04:01:16 2025 GMT
Subject: CN=13f38cc6f762f2fe07bba3e8097fc8ce22accb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:01:10:a6:59:a2:e9:7a:be:75:41:64:8c:9c:
cf:32:5e:f2:b6:6b:05:3c:92:52:1e:a5:1a:30:5c:
a5:e9:15:2d:17:6f:d4:88:de:30:f2:fd:f0:85:30:
3d:9b:ca:7c:a8:d2:2a:6c:3a:10:18:38:39:8d:99:
9c:e5:c9:be:6c:85:37:d5:9b:d8:76:9c:52:5e:f6:
ae:49:27:84:a6:ac:16:54:ed:6d:7e:72:cb:f1:c3:
05:70:ae:07:fa:d5:d5:f9:90:bd:c9:01:43:80:74:
b8:8b:57:18:46:1c:82:ce:51:41:3c:b0:05:d7:f5:
7d:6e:2a:d6:ac:3f:e9:bb:9f:c4:63:c7:44:38:a9:
e2:ca:17:a5:92:1b:9b:31:9f:64:0a:90:04:9e:6d:
bf:06:2e:2b:3c:1a:c7:84:77:cf:d0:f6:3b:1e:c2:
44:e4:58:10:76:d7:72:42:24:64:0f:49:9e:a5:e8:
76:a3:0a:55:40:2f:80:40:4e:04:b5:f6:01:a0:35:
fa:4a:b1:69:2d:e8:3a:6c:a8:59:63:e6:b7:ba:45:
9a:51:ab:25:9e:a4:21:7c:b2:36:3d:ec:cc:80:d5:
2d:cc:78:25:c6:0e:a6:99:e9:dd:71:08:e6:ea:89:
86:0c:c0:ef:64:e2:18:6b:da:83:d0:f5:7e:45:45:
85:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F3:8C:C6:F7:62:F2:FE:07:BB:A3:E8:09:7F:C8:CE:22:AC:CB:57
X509v3 Authority Key Identifier:
keyid:BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2b:f8:cd:88:0e:95:38:bc:f9:2a:21:79:96:ff:ee:45:d7:
01:61:d6:6e:08:8b:a9:f1:1d:40:72:e5:b7:91:84:f7:f6:18:
41:98:21:86:01:f8:5b:15:f1:bd:d6:6e:f4:94:05:17:09:e3:
78:02:fb:52:47:04:98:92:76:77:37:2f:35:1e:30:f0:69:4c:
90:ae:03:2b:97:65:f0:af:11:19:ea:90:8b:85:d3:2f:dc:44:
90:4c:b7:ab:f0:9f:b5:a3:ef:e0:b9:2c:56:35:f1:c0:33:7c:
28:87:5f:5d:6e:19:4a:49:cf:3d:82:da:c3:c8:7a:69:4c:2c:
3a:79:27:60:b2:c4:1d:e8:6c:a6:e4:83:4b:2e:7d:e2:c8:2c:
c4:22:2a:4a:36:c9:f8:0e:0d:34:1d:48:c8:a0:18:c6:09:ce:
92:ea:17:5b:ff:ea:70:69:63:cd:4e:59:d8:e9:89:28:62:63:
1e:58:d6:d9:d6:70:fe:7c:18:5c:6c:68:84:5d:4e:e0:2d:2f:
43:17:c7:c4:ff:25:23:04:ab:f2:1d:be:e5:df:eb:05:57:0e:
a3:5a:ca:93:60:c2:4c:38:ec:dc:60:87:e6:ca:e4:c6:54:db:
f3:64:07:b0:82:d7:3e:52:f9:a2:b1:e8:21:04:21:46:fd:c9:
c0:3d:97:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:48 2025 by rpki-client