Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
File: vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft (raw, json)
Hash identifier: hlmkJoOcnWsWZx3ZZQV9/hpYkmwXINyf0UXM91Up+QE=
Subject key identifier: AE:02:D5:D4:72:92:A9:20:D9:9C:9F:D2:C2:3D:1F:EC:9F:05:EA:21
Authority key identifier: BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
Certificate issuer: /CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Certificate serial: 019A4EF4FE27A9D24796A62113685A4BAEC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
Manifest number: 14ED
Signing time: Tue 04 Nov 2025 13:01:09 +0000
Manifest this update: Tue 04 Nov 2025 13:01:09 +0000
Manifest next update: Wed 05 Nov 2025 13:01:09 +0000
Files and hashes: 1: 1-qiVqOjBXOScQyOmQsUr-NwkTzY.roa (hash: QQhk5ltrGxYiRgdxzHLo3yY2s4Qbc99+8Eg2CHCARqY=)
2: Ft0ZB8OyXDqdHuA2ecKptesJxaA.roa (hash: TiOljuv3CctqH89ZzFnB7S3NUxP1dkyAC3xa+TMiJAY=)
3: R9qZ8Nd4AyiumQCYagXJI1cdjJk.roa (hash: LseYWFgGf5p0B/ygA2vm5MY1yPEkvBvDwKu8LwSap5c=)
4: vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl (hash: lSNPOZdVdyKTCFA8ofoQideHUhadrSsJFF4IxGrfCWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:fe:27:a9:d2:47:96:a6:21:13:68:5a:4b:ae:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Validity
Not Before: Nov 4 13:01:09 2025 GMT
Not After : Nov 5 13:01:09 2025 GMT
Subject: CN=ae02d5d47292a920d99c9fd2c23d1fec9f05ea21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:10:ec:7b:35:24:9d:b6:3a:ca:e0:38:3f:e8:
83:c6:6e:25:c8:0d:42:b1:1a:93:6e:b8:a9:7e:cf:
d2:7e:f9:08:4b:a3:c3:c3:e9:1c:b5:2c:5b:00:01:
3e:64:90:cd:28:29:3d:ea:24:40:6a:20:92:f8:5b:
24:75:81:d9:dc:35:14:5a:47:25:c3:7a:29:e6:85:
0e:5b:4e:f8:7c:4a:75:2e:c7:42:2a:0b:9d:bd:26:
13:c8:1d:f1:06:84:fa:ea:03:7b:fb:f4:fd:f8:d9:
64:ce:30:71:dc:bd:8d:6a:53:0e:1d:02:fa:b5:52:
6b:aa:f9:7a:09:a8:9d:5d:d5:e5:ca:1d:2f:49:2a:
f3:b5:bc:cd:d3:2d:30:09:9b:fe:0f:9a:36:07:a9:
a6:01:fe:96:db:2a:6d:8c:1d:29:7c:be:c6:99:f4:
3d:c9:17:8f:25:75:52:a1:48:e0:88:4b:2c:a7:87:
23:04:7f:c7:bb:15:2c:7e:94:19:0a:77:36:90:6e:
b9:43:2b:be:92:ca:ed:04:10:80:17:bd:df:90:90:
dc:d6:11:4a:1b:04:ec:24:01:bf:3a:4b:5b:c5:47:
19:76:20:bf:22:e5:a9:69:32:4a:3b:97:87:de:66:
fb:e9:2c:36:6b:0e:63:38:8b:f3:b4:ab:2e:de:26:
38:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:02:D5:D4:72:92:A9:20:D9:9C:9F:D2:C2:3D:1F:EC:9F:05:EA:21
X509v3 Authority Key Identifier:
keyid:BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:11:2f:9e:ae:cb:9a:b0:d7:da:fb:7c:29:4b:80:3c:c2:d5:
90:0a:e8:dc:18:81:2d:4f:b6:1a:88:ec:df:6c:aa:ed:3f:db:
28:33:35:9e:9b:99:f6:29:8a:79:93:71:ea:de:9f:ee:6d:41:
a4:3d:bf:fe:90:6a:f3:23:e4:ec:92:55:d3:cb:a0:f1:98:4d:
13:d7:d4:7e:0b:8e:27:c4:69:38:cc:73:34:e6:6a:f3:a0:44:
6c:d9:c8:43:5a:6d:4e:1f:5b:a9:2b:db:69:fc:5b:79:af:98:
88:1d:c7:f6:6d:6e:b8:13:79:66:b6:83:07:7b:29:bd:ea:5c:
39:85:75:82:2d:f4:26:4f:92:11:65:d9:b2:1f:49:57:54:1b:
21:32:37:43:44:36:92:97:6d:72:ce:fe:3b:71:32:89:60:c5:
86:e3:30:06:75:c8:34:40:8b:11:d5:a0:d4:63:b6:95:c9:6c:
ad:1c:79:02:6d:92:67:81:b1:75:1e:d2:65:f0:1e:27:2c:d1:
b8:85:af:22:aa:37:92:d9:d3:5a:a5:e8:34:2d:67:af:c4:3c:
97:33:36:bc:6e:7d:f4:28:65:f1:cf:c6:a7:2c:8d:7d:d5:2b:
1b:15:77:58:ce:d6:64:0e:b5:6c:8a:dc:d0:c8:7b:1b:1a:f8:
d6:3f:7c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:55 2025 by rpki-client