Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
File: vZC8PjcRQLQqIdaX2DANlBCiSao.mft (raw, json)
Hash identifier: 9VGUM/wVTqrRiNUG7XjySliszc51AoH+LKq4K2U/7V8=
Subject key identifier: DB:85:95:7E:6C:77:CB:66:65:BC:77:39:78:7B:07:1C:0A:05:13:28
Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
Certificate issuer: /CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Certificate serial: 019A4E18AE08213FD482C4BA45AFE6055E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
Manifest number: 08A3
Signing time: Tue 04 Nov 2025 09:00:31 +0000
Manifest this update: Tue 04 Nov 2025 09:00:31 +0000
Manifest next update: Wed 05 Nov 2025 09:00:31 +0000
Files and hashes: 1: t8BDYn1_4F2TyunsqfKmIL3bpGQ.roa (hash: 96TEsEkP40hfvXfLq7oaqGEhgKhW300uagupuFMXgtg=)
2: vZC8PjcRQLQqIdaX2DANlBCiSao.crl (hash: O7oR1v3ljouqVBfiFxGp/ljQGO6Czf3CvHNqgYO5g2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ae:08:21:3f:d4:82:c4:ba:45:af:e6:05:5e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Validity
Not Before: Nov 4 09:00:31 2025 GMT
Not After : Nov 5 09:00:31 2025 GMT
Subject: CN=db85957e6c77cb6665bc7739787b071c0a051328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3c:7e:f1:99:6c:da:03:2f:05:6d:d0:75:5b:
85:d6:0a:ac:e9:56:d7:f2:78:fc:64:8c:47:10:12:
84:9d:9e:2d:59:99:1b:7e:2f:c5:16:05:dd:ff:28:
19:61:92:b1:75:5f:ed:2c:bd:13:6b:1e:ce:71:c3:
33:0f:09:68:89:80:b4:7a:6c:6f:88:58:d8:f5:60:
be:28:d3:b0:41:a9:9a:33:73:25:33:3f:ca:78:f4:
f0:62:df:e2:19:0d:99:7c:2d:e1:13:b4:6c:9f:75:
d7:2b:50:7e:15:aa:d7:c4:6b:cd:f7:55:0e:74:9a:
29:7f:ae:1e:98:eb:25:ae:5d:46:2a:98:b0:ba:c8:
c4:c0:e5:5e:10:e9:50:85:c7:6c:13:33:b4:bf:c6:
1d:55:e7:26:e6:9e:6b:b8:6a:d0:0c:4e:08:91:3e:
dd:b0:eb:d6:3a:69:12:c0:58:4f:d0:df:e0:97:13:
9f:ed:15:0b:c4:b7:76:d1:10:02:7b:f5:0a:00:68:
49:a7:c4:36:dd:5d:28:d1:6a:8a:c9:36:13:8f:c2:
bf:3d:9e:b0:ea:12:98:46:31:14:21:32:aa:0a:10:
b0:40:3b:11:2c:f3:be:ba:75:8b:74:4f:e0:26:15:
6c:b2:0c:7b:c2:b4:60:cc:64:53:0f:ba:23:af:36:
65:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:85:95:7E:6C:77:CB:66:65:BC:77:39:78:7B:07:1C:0A:05:13:28
X509v3 Authority Key Identifier:
keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d1:41:04:ba:f0:53:fa:c4:5f:5d:a2:22:6c:80:05:f9:5c:
3e:c8:30:56:48:67:d5:03:2b:f6:9c:d4:33:36:68:25:c4:c3:
bf:e8:ab:27:9a:1d:1d:7d:1f:ac:2d:dc:fa:6b:cd:3c:7e:77:
48:d1:7b:48:d9:5a:1b:c5:24:e7:a5:d0:6c:e5:71:0c:db:be:
85:c8:91:ee:62:59:17:4d:d1:50:8c:62:d8:27:84:59:cf:a0:
30:ff:64:22:f2:e1:98:30:bf:a9:47:08:2d:f5:b9:fb:1e:a3:
08:51:05:d5:43:57:d5:ca:56:93:33:fa:aa:a8:9e:d1:e7:f7:
3d:7c:2d:87:a4:0e:55:c3:bb:60:55:7d:96:a2:f0:c6:8b:b2:
d8:f3:d3:ed:52:a2:c7:cc:f1:8f:ed:d4:b3:e9:19:d2:81:a1:
5b:6b:eb:03:4b:02:45:3e:12:50:4f:82:0c:02:5b:4d:3f:89:
a4:c0:cd:3b:97:03:dc:c6:90:71:52:ac:3f:c2:db:6f:5c:54:
cb:84:d6:f7:a3:2e:50:25:d9:fe:90:1c:e6:cd:b7:fb:fe:d5:
7c:90:5c:fe:86:1a:3c:84:ba:19:a7:cc:2f:c0:93:82:e2:a7:
c4:08:2b:b0:2e:80:a3:be:ba:ee:c9:54:4c:16:dc:63:d8:ca:
02:0d:9a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:50 2025 by rpki-client