Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
File: vJxAOtAH4qJCprCQYaPBo2CmTVo.mft (raw, json)
Hash identifier: OsJJXRfmf3QK60nO6k54LTUhq1JiarAoavLzFUBklHI=
Subject key identifier: 34:96:F6:31:B3:2F:B8:06:CC:6A:41:7E:0B:7D:12:4D:93:16:F0:79
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 019A51BE580AE4DADD3C869FDFDAFC763E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
Manifest number: 0958
Signing time: Wed 05 Nov 2025 02:00:20 +0000
Manifest this update: Wed 05 Nov 2025 02:00:20 +0000
Manifest next update: Thu 06 Nov 2025 02:00:20 +0000
Files and hashes: 1: C7WJZ0MSGTSK11o8aWAlEWJl0j8.roa (hash: hyEq8bFB3KSRXz3GQOFcsFfK3xFehxlIq2TZp5r0/CA=)
2: IuSi6E2OqyGC8JrvU9bBDewGhB8.roa (hash: xhr1WJNVnuwtRBZVPH3Muk8E3trcpTvU2YyXMkQE9XE=)
3: str3-7dKKBXkTaCco2AxqojW1YQ.roa (hash: fMmpOIsyT53t9MRkb+zMzEyMIqFRw0lRg1YQpIT+8WI=)
4: vJxAOtAH4qJCprCQYaPBo2CmTVo.crl (hash: GeXQL9rY97AVoJZus/O/bA9fimP9hDLMWP+Sb2j+GWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:58:0a:e4:da:dd:3c:86:9f:df:da:fc:76:3e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Nov 5 02:00:20 2025 GMT
Not After : Nov 6 02:00:20 2025 GMT
Subject: CN=3496f631b32fb806cc6a417e0b7d124d9316f079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:bb:bb:08:55:1c:d8:60:e6:55:c4:90:78:
14:cd:20:3e:49:81:cc:e0:68:1d:22:8e:b2:42:a1:
3c:27:8f:ea:cc:b3:f2:11:08:a2:7a:83:e5:40:d8:
f6:51:f9:45:5e:7a:0b:ef:d6:bb:42:91:86:18:8a:
b1:04:8f:89:5d:ac:5b:6a:5b:a4:e7:1e:37:30:43:
87:50:21:09:47:00:4a:d8:36:2e:00:4f:b9:9d:dc:
46:10:30:0d:13:8e:ea:c2:a0:de:a8:50:2f:06:5b:
b4:4b:b1:7e:8e:39:41:cb:f3:b2:da:39:91:ef:37:
e2:7d:e8:e6:07:b1:dd:0d:17:7a:ce:67:10:c8:29:
78:c8:0b:f9:07:7d:da:63:c9:3a:1d:18:93:83:7f:
11:c0:a0:d3:d5:ac:04:86:fc:40:0e:03:87:4c:be:
35:6a:f4:bd:ac:6e:00:ec:c9:3c:29:55:4d:b4:ce:
2a:40:0d:35:17:84:17:51:a7:70:30:e1:e4:75:49:
07:13:f0:b0:6f:a2:18:b6:2e:ca:bc:b5:a0:84:7e:
a9:52:7b:33:fe:d7:13:97:ad:15:45:e8:bb:11:66:
71:7a:80:49:6c:b1:26:fd:9b:83:59:84:5f:12:d0:
65:ec:8e:ee:e2:be:66:9a:3b:50:b1:a0:a8:2c:be:
1e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:96:F6:31:B3:2F:B8:06:CC:6A:41:7E:0B:7D:12:4D:93:16:F0:79
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:98:7f:a0:2b:83:08:b2:95:97:61:5d:ac:9f:8d:c0:81:0a:
32:01:25:0d:f1:18:cd:51:09:3a:4f:28:6b:c1:ba:b0:fb:16:
d1:35:91:d0:01:98:0b:e0:39:d9:f9:de:7c:35:d9:7c:e1:5d:
f3:e4:0b:12:95:7c:fc:d5:60:35:83:b7:e9:35:02:ba:2f:a9:
35:eb:99:bb:bd:82:6e:84:66:e9:f0:fb:55:da:72:45:e6:35:
9b:17:6a:d2:0f:9c:ec:5a:84:29:82:f1:df:03:ef:5e:15:eb:
5a:6a:71:66:80:a1:ba:9e:33:a4:a4:92:82:f5:35:a0:9e:46:
7f:21:10:84:b0:39:a2:4d:5c:a8:26:fa:f1:0a:7c:66:56:2e:
06:68:01:6a:e4:0d:1e:d3:c2:2f:56:37:ba:a4:b3:f5:58:71:
b8:d7:3a:a1:16:34:01:cf:54:11:65:10:e8:91:3c:c7:d7:cd:
06:72:3b:a7:2b:1e:c5:36:8a:61:5e:07:60:dc:d5:ff:51:c5:
13:03:d7:04:e0:8e:72:11:94:f8:9e:1c:fa:e6:9b:67:a3:74:
6d:eb:b0:4b:35:2a:07:ac:8b:37:69:df:79:7f:42:f2:97:06:
18:57:e7:95:63:6c:26:2b:ae:60:23:2c:e1:b5:8d:6f:aa:c4:
21:47:cd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:03:47 2025 by rpki-client