Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
File: vP0tpUR9AHYW693Cpw_qxed8Sos.mft (raw, json)
Hash identifier: RK/zqNkXQmduwsJyi/4ms1Oe8eXrDIAHMYHUEs/2J7M=
Subject key identifier: 7E:8E:FE:F9:54:41:7D:28:5F:C3:CE:26:C8:7D:C0:CF:FB:09:32:DC
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Certificate issuer: /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial: 019A4DAA7CBB09801A09317FFBDEE44E3D42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
Manifest number: 0F93
Signing time: Tue 04 Nov 2025 07:00:09 +0000
Manifest this update: Tue 04 Nov 2025 07:00:09 +0000
Manifest next update: Wed 05 Nov 2025 07:00:09 +0000
Files and hashes: 1: 8qm9bEbxwfNKbG7VK6lFr1L7h68.roa (hash: 75uVkQx0ihlVy8p/hI6UBtxjUc4hu50c+jP7jjKtmh4=)
2: CwdCUQsFV7CyApTMyt6j3A_OJVA.roa (hash: SME0C7xkpjziLPa0GzpInguFdkdM75z/nCo/zXQqOyk=)
3: vP0tpUR9AHYW693Cpw_qxed8Sos.crl (hash: 9RxPfU7jDSIbTqBUwOfS+J3uj3ihUXR4RIUl9o3kZzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:7c:bb:09:80:1a:09:31:7f:fb:de:e4:4e:3d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Validity
Not Before: Nov 4 07:00:09 2025 GMT
Not After : Nov 5 07:00:09 2025 GMT
Subject: CN=7e8efef954417d285fc3ce26c87dc0cffb0932dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:0f:ef:9f:93:9c:69:54:0f:e3:ba:d0:a8:
0f:0e:70:32:8f:fb:73:54:43:19:d8:77:e7:87:f4:
b9:df:2c:ff:c8:80:a5:97:cb:0f:8e:c6:88:f4:32:
44:47:ac:9f:9d:e7:98:ef:47:02:bb:6d:8d:25:bd:
68:30:87:d7:92:af:97:e8:5d:c2:f6:0b:36:02:91:
26:a4:c6:7a:83:fe:5c:0b:3a:66:e3:4a:6b:86:5d:
1e:f6:f7:ca:0f:a0:1c:bb:21:17:71:9f:00:74:1c:
73:78:73:da:54:16:7b:7a:eb:c7:23:3c:f8:c6:79:
51:12:2f:75:d5:85:71:ed:eb:04:55:b3:40:28:c3:
e2:ad:78:c8:f4:85:2b:46:58:a6:20:78:b9:62:df:
72:32:87:31:f4:b6:a5:42:60:b7:64:bb:d3:aa:7f:
32:e1:a3:cd:a1:67:d6:04:41:ce:50:25:4b:aa:d7:
39:c9:10:83:76:7c:ec:58:8f:33:aa:62:4f:77:47:
d1:80:a5:57:8c:3d:2d:8b:93:75:4b:cb:5b:67:4c:
82:22:54:b0:84:d3:49:3d:e1:f4:1f:46:ad:06:fb:
f5:17:ce:e2:58:76:71:5a:8a:99:d7:52:ff:91:93:
23:d1:5a:cb:82:13:ef:6f:59:79:20:09:64:83:e1:
5e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8E:FE:F9:54:41:7D:28:5F:C3:CE:26:C8:7D:C0:CF:FB:09:32:DC
X509v3 Authority Key Identifier:
keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:99:12:bb:42:b6:84:10:cb:c1:be:b6:e7:f7:04:64:96:57:
9d:3b:95:cd:b0:98:9a:0c:53:a8:f3:2f:1d:27:0f:29:ec:95:
30:a9:2b:2f:b9:fb:fc:f9:58:04:c4:b1:16:57:ee:9c:3f:78:
ba:44:79:2c:82:02:f2:ed:e5:38:81:b0:c5:50:cb:b3:89:5f:
a0:bb:35:9f:44:b7:11:49:6a:91:83:d9:41:dc:f6:7a:9d:05:
cb:92:bc:30:ef:96:17:64:9e:9b:a3:00:01:25:0b:dd:67:62:
98:fc:f5:ee:f7:c2:35:83:27:72:c6:be:55:3e:b1:ba:5b:1b:
8c:44:55:6b:5d:05:66:7d:6e:dc:e2:59:69:d1:55:a6:9f:3b:
32:ec:8c:b2:7a:6a:ba:c7:26:0f:f3:ca:8f:bd:15:3f:5c:1a:
06:1d:17:4e:b2:61:dd:3e:91:84:98:30:60:e5:f2:59:7b:96:
df:18:fd:08:4b:56:2e:d3:06:ea:55:3e:24:e9:5c:95:fd:33:
d0:30:f0:f2:a2:d3:c2:5f:d4:02:33:7e:b2:11:2d:91:e9:4e:
f2:ba:b7:0a:ca:ce:8c:49:83:3f:85:8e:f4:26:cf:31:a4:31:
23:2b:47:12:51:ed:8d:16:41:ff:44:12:ec:d8:4e:2c:1e:c0:
75:5a:2f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:50 2025 by rpki-client