Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
File: vx9s1vq5XSQc2axfhfTQX53lj5s.mft (raw, json)
Hash identifier: 5qoxmmBEpD1ixoZNPmsFUT44LaUXYE+OzIDLZgBElbg=
Subject key identifier: 4C:F1:B3:83:D1:5A:90:C6:D4:68:F1:C3:98:2C:F8:B5:C7:9C:AD:83
Authority key identifier: BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B
Certificate issuer: /CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
Certificate serial: 019A4EF4C06FD712B3E5873442FA3AB5993B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
Manifest number: 14E9
Signing time: Tue 04 Nov 2025 13:00:54 +0000
Manifest this update: Tue 04 Nov 2025 13:00:54 +0000
Manifest next update: Wed 05 Nov 2025 13:00:54 +0000
Files and hashes: 1: EBHjm8uQ-LmD4evvwOZ6E0JwNQA.roa (hash: Tk02eWTtsJNpE3RvUJnaO0ovgb/O/tJmPY6vH9oMVtQ=)
2: vx9s1vq5XSQc2axfhfTQX53lj5s.crl (hash: vzn+iaiwYhXv1PJ+0fbX1pYDTEk+HLafPz1p6/Ky48w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:c0:6f:d7:12:b3:e5:87:34:42:fa:3a:b5:99:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
Validity
Not Before: Nov 4 13:00:54 2025 GMT
Not After : Nov 5 13:00:54 2025 GMT
Subject: CN=4cf1b383d15a90c6d468f1c3982cf8b5c79cad83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:3b:d1:cb:3a:2a:2f:45:de:39:6a:f3:fc:
cc:0e:e0:96:84:0f:37:14:2b:d2:30:05:1b:5e:f3:
b0:f5:71:69:51:28:4a:b5:b1:59:2d:4b:05:f7:d9:
14:a5:97:85:55:bb:49:67:59:c8:a6:a1:9b:92:4b:
a2:6d:05:ce:74:41:97:cd:b0:77:84:32:c6:d3:ae:
d1:b8:ea:c7:14:41:36:b1:18:e7:74:14:05:67:e5:
9f:72:b6:b9:d2:ce:1f:e2:08:0a:4a:eb:bc:0b:80:
8e:42:c5:c2:6f:5a:b0:5d:b1:46:26:83:b6:cf:c3:
86:12:d8:ad:2c:85:0b:90:08:f2:b2:8a:e7:e4:30:
94:6d:04:ea:3a:62:39:c4:a8:bd:12:79:9d:09:b1:
af:95:34:2b:94:e5:a2:83:e2:82:cc:2d:3a:71:0e:
92:97:08:bf:ce:01:11:07:09:1f:52:08:3d:45:bf:
ce:4a:ed:1a:01:df:be:4c:9e:8b:91:0a:bb:01:59:
52:bc:c7:8a:63:f7:66:bd:04:02:b0:51:60:da:66:
56:d9:6a:f4:79:e1:f0:6e:6c:8e:77:e0:e5:17:fd:
ee:83:2c:b0:6f:d1:1a:37:d2:95:f2:5e:58:81:57:
55:16:38:29:b3:92:4d:90:c1:9b:ea:38:2f:e0:9e:
db:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F1:B3:83:D1:5A:90:C6:D4:68:F1:C3:98:2C:F8:B5:C7:9C:AD:83
X509v3 Authority Key Identifier:
keyid:BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:55:b3:65:9d:68:ea:9a:95:7e:a0:da:76:e4:fb:7d:ac:6f:
da:15:51:d6:b8:a3:87:ae:0f:87:2b:48:b4:fb:24:b2:05:79:
9c:03:4c:5c:b0:a1:70:38:5c:a4:8f:6c:1a:82:5c:30:8b:79:
99:24:4d:d8:45:1a:22:9b:27:4e:31:c5:57:0a:aa:f5:0b:44:
2b:b7:f1:e0:52:83:83:d2:4e:af:51:45:39:84:b0:65:f3:7a:
a5:e5:d5:10:79:41:b6:e1:e4:31:ca:69:46:b9:67:83:51:13:
5d:f5:bc:7a:12:44:f1:07:72:61:87:54:1d:d4:7c:63:d8:71:
db:78:5a:b0:0f:a4:e4:ba:a5:eb:30:e5:7a:31:67:5e:a7:52:
f9:71:72:99:80:e0:1c:87:ad:58:37:98:b0:33:b2:ce:b4:98:
26:7e:c2:25:f2:9d:d6:be:b2:54:0f:07:6d:50:f2:68:48:24:
89:86:cc:11:52:ef:ed:d3:8b:69:50:43:7e:84:82:06:8f:df:
f7:7d:32:e2:dd:be:5b:c3:82:0a:8f:1c:ca:8b:b3:e6:39:56:
6e:2d:25:7e:a1:9c:90:37:0f:b0:d9:7f:e7:79:fc:e3:c4:0f:
00:f5:2f:e7:d9:a9:44:4e:cb:ac:d1:c7:e1:38:fa:ce:8a:36:
da:f7:a4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:43 2025 by rpki-client