Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
File: vB5m76AFpt5TsdDJHzdVS99Gdr0.mft (raw, json)
Hash identifier: KJ+rhc52NJ5AWb+BaZUnrJlPEAWKdYmrcJsSRgFetBY=
Subject key identifier: 69:C0:6C:64:40:D4:FF:57:A9:3D:8A:D8:6F:ED:83:DC:09:DA:41:25
Authority key identifier: BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
Certificate issuer: /CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Certificate serial: 019A4E18923CD48A62532A267EA9FD5E15C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
Manifest number: 0F0C
Signing time: Tue 04 Nov 2025 09:00:24 +0000
Manifest this update: Tue 04 Nov 2025 09:00:24 +0000
Manifest next update: Wed 05 Nov 2025 09:00:24 +0000
Files and hashes: 1: 6IVQyX8RgUoO3Q58rf7sMqHJv54.roa (hash: 7oxYbSUUgVn0A9C0QrCdMuBwwgHYFbY1shMdIhdZPLk=)
2: vB5m76AFpt5TsdDJHzdVS99Gdr0.crl (hash: CO5dUG9lbR4QW8s7RZRnMz2ulWn+8Y4FIrPMoFurjf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:92:3c:d4:8a:62:53:2a:26:7e:a9:fd:5e:15:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Validity
Not Before: Nov 4 09:00:24 2025 GMT
Not After : Nov 5 09:00:24 2025 GMT
Subject: CN=69c06c6440d4ff57a93d8ad86fed83dc09da4125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:26:7c:a2:cc:96:b7:5c:a4:8a:d7:9a:76:
7a:8b:90:ae:5d:d3:4f:a2:47:c1:11:bf:94:13:c3:
5b:cd:68:11:60:4e:77:07:1e:41:84:1b:67:7c:ab:
7a:d4:f7:7a:14:83:7d:04:38:ef:8a:8c:af:bb:12:
69:07:5b:29:00:9f:87:d5:27:67:b0:e9:33:7e:05:
71:2d:19:d3:33:c8:27:85:74:fd:9f:36:f0:ce:5a:
57:c8:6b:4e:c0:da:64:90:4a:ba:bf:24:8d:a9:9b:
07:9c:04:2a:ed:e4:a1:85:c6:0e:cd:0f:69:a3:5a:
29:ed:32:30:ab:76:63:f5:62:0d:55:92:ba:33:0c:
e8:96:39:2e:8e:9e:bc:e7:40:ea:e4:2e:09:b9:83:
5d:04:4d:14:a4:4b:78:63:ad:13:47:e2:de:c2:77:
cd:6f:7a:d4:0c:b5:f1:70:17:48:27:3e:4d:b5:a4:
8d:6e:0f:b5:25:bc:1f:46:ef:47:f8:dd:ce:66:a7:
27:91:fe:69:63:47:d8:40:14:50:8d:0e:f0:08:cd:
fa:2c:43:33:2b:73:3d:3d:e3:54:2b:dc:86:5e:e6:
d5:dc:20:c4:90:d2:b6:b2:a2:91:c9:05:0e:f0:ff:
14:59:cf:fe:ae:e9:70:72:48:88:2d:e9:35:34:fd:
13:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C0:6C:64:40:D4:FF:57:A9:3D:8A:D8:6F:ED:83:DC:09:DA:41:25
X509v3 Authority Key Identifier:
keyid:BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f2:16:3b:2f:96:f4:a4:99:49:74:50:6f:6e:53:39:0f:9a:
35:37:cc:6b:43:01:c9:e3:ac:95:c2:71:29:49:b6:cf:1d:35:
72:1d:b9:a5:4b:2d:9b:6e:ec:28:e5:55:26:42:f8:21:8b:ed:
52:5f:e3:69:76:75:c7:0a:8d:4e:34:37:84:af:c1:ed:8e:65:
a7:5d:a9:ba:ac:37:b8:84:88:fc:3c:c3:e3:b5:e6:80:83:a4:
95:be:4b:98:0c:81:4b:16:c1:41:87:84:ce:65:b3:d5:67:5c:
67:30:32:56:42:f7:31:89:da:1e:02:4a:a2:e2:8d:3d:d3:c3:
ea:f9:86:75:56:da:eb:94:39:8b:0a:c2:00:2c:68:6d:4b:88:
e9:75:bb:1b:9f:2f:29:df:65:02:0a:83:b3:43:86:d2:10:7d:
d4:3b:c8:6a:b4:fd:6a:ed:13:8e:09:0e:ea:87:a5:ca:6b:21:
7a:bd:51:59:7c:db:ad:67:e3:83:51:14:d2:35:df:8e:e3:98:
12:01:55:73:11:8b:c0:c7:d3:f0:60:0c:94:42:f1:c2:c1:31:
e9:00:3d:41:82:62:76:bb:ee:8b:dc:22:92:43:52:9f:4e:61:
4d:7e:c2:6e:00:fb:b4:a9:49:56:7c:d7:3c:7c:12:5e:86:17:
46:6e:ac:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:50 2025 by rpki-client