Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
File: vAB4on8QAyY8TFYbAlB2by9Sbn0.mft (raw, json)
Hash identifier: l8MiqUjO3Bqf4uHV4mjShTGXMvk31bKXcejDehPGYlo=
Subject key identifier: 30:3B:31:B2:52:93:5B:87:06:25:F4:04:7C:0D:1B:14:E6:A2:17:2A
Authority key identifier: BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
Certificate issuer: /CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Certificate serial: 019A51F5B7E8936F528E00B213A9C11CE0EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
Manifest number: 04AD
Signing time: Wed 05 Nov 2025 03:00:49 +0000
Manifest this update: Wed 05 Nov 2025 03:00:49 +0000
Manifest next update: Thu 06 Nov 2025 03:00:49 +0000
Files and hashes: 1: U8RX6_Xhgd2rniYJPgiw5XhDM14.roa (hash: 2r/ZPIhIP4vgQHcp4lEFNmYb4WZmbuMJWG8eyE6HlfQ=)
2: vAB4on8QAyY8TFYbAlB2by9Sbn0.crl (hash: U7GUYtX0xKpyOJtde0RamrS/giZarXEnH57pmf/C2ys=)
3: vAZxSJwcgiBcI_82IoG7w0HDsHY.roa (hash: p3exCfpQFtu6+djLck5m9Ak9SIsL/faxVMijWb66KP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:b7:e8:93:6f:52:8e:00:b2:13:a9:c1:1c:e0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Validity
Not Before: Nov 5 03:00:49 2025 GMT
Not After : Nov 6 03:00:49 2025 GMT
Subject: CN=303b31b252935b870625f4047c0d1b14e6a2172a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:18:79:d6:bd:11:c2:37:e9:b4:ea:92:42:
cf:2a:64:dd:1c:40:05:23:84:8b:cb:d0:1c:2c:3d:
23:d5:d3:d4:b0:d0:1c:12:55:af:19:96:36:b8:2d:
b3:fd:e4:60:f4:26:cf:4a:2d:7f:c5:53:64:14:50:
ce:42:0c:fc:ee:3a:49:be:ad:f7:bd:7b:fb:72:21:
97:db:94:c7:41:10:3c:06:73:6a:88:33:09:b5:52:
58:68:6c:24:02:e8:65:08:7c:4f:36:20:1b:14:00:
3c:91:22:6b:14:99:02:65:d2:a7:be:f5:71:33:96:
28:0a:02:b1:f7:6c:3b:62:e7:84:a5:dc:4d:c0:a2:
c9:4d:29:1e:a8:c9:bb:49:a3:b5:78:da:ec:1c:a9:
31:78:5e:8b:4a:50:0a:da:6a:e2:1b:bb:d4:34:6e:
c1:1c:0b:c8:dc:6e:d4:04:3b:db:68:e9:f7:97:ed:
1d:8b:33:0e:a2:b5:0c:40:18:4d:71:56:2d:63:cd:
98:8e:7b:dc:f1:b3:fa:65:7d:b2:1c:b3:cc:40:7b:
df:b6:6f:9c:0d:22:5e:cc:ab:13:78:d5:f7:cd:f3:
4d:c3:92:4d:c2:49:48:86:c2:c4:f8:fe:ac:f9:85:
f0:d2:ec:69:30:ec:e8:be:18:be:84:ed:1a:f2:63:
51:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3B:31:B2:52:93:5B:87:06:25:F4:04:7C:0D:1B:14:E6:A2:17:2A
X509v3 Authority Key Identifier:
keyid:BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c3:29:cd:75:88:28:fe:38:92:33:49:92:ce:bd:5d:0b:b4:
c7:8a:82:1e:4d:3d:ce:a3:a2:c5:9d:10:0c:1f:89:a5:2d:d7:
bd:60:8f:57:dd:85:dc:56:bd:35:4a:b0:df:fd:0f:eb:96:d4:
ac:0a:60:10:66:16:df:ac:46:7c:7d:4b:4c:f3:5f:b3:16:b9:
de:c8:ae:74:a1:7b:38:7e:b5:9a:f8:a0:d1:30:32:13:0d:e2:
cf:43:86:24:24:49:10:07:1a:b0:d4:75:4b:fb:df:e2:16:43:
99:dc:c8:4e:49:fe:76:d6:b3:d2:3d:5f:70:f6:32:5d:c5:54:
fd:60:f1:b5:a6:3a:26:ed:6d:8d:00:9b:26:58:5d:d3:e3:bc:
04:40:bb:fa:20:e0:0e:fb:4f:2f:21:ba:a8:1c:36:78:8a:44:
a4:8e:4a:29:25:47:ff:7d:5e:a3:5b:06:7d:bd:9b:e7:62:2b:
30:0d:1a:f7:9e:64:0a:f7:65:b3:52:cf:47:e5:85:cd:77:e5:
82:19:13:39:01:e7:14:e3:bc:ff:2e:e3:91:22:26:b9:d5:4a:
79:f8:7e:fc:3c:cc:ee:ea:5e:af:fe:e4:c9:d8:1b:b3:0d:8e:
a7:3e:64:ba:d6:34:79:a8:20:ad:4e:7d:ed:42:d3:4f:0d:96:
d3:18:b7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:20:30 2025 by rpki-client