Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
File: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft (raw, json)
Hash identifier: E0l7xEEJ+cd4FFwEl2J1dLowtxHJz9Oxd2eid0OL1tE=
Subject key identifier: 2A:DC:96:F8:46:02:3B:E4:9E:3B:03:8B:51:38:C2:0C:54:59:1C:7A
Authority key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Certificate issuer: /CN=bc127864cd43048550ed1699c584b5c14d80e098
Certificate serial: 019A5308628B6970F8B74701DDF195F5108E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
Manifest number: 078A
Signing time: Wed 05 Nov 2025 08:00:49 +0000
Manifest this update: Wed 05 Nov 2025 08:00:49 +0000
Manifest next update: Thu 06 Nov 2025 08:00:49 +0000
Files and hashes: 1: DmspTgBWfwCRXv4YidxL9MxMuLs.roa (hash: 1HDwuoapwdXHm8uFL7aQ8AiJfzmdU8tLWRG1TVtsgIw=)
2: P4H-USxdX8paqqc5vUCjCPteQ10.roa (hash: RUKC58n+H3u6CbZuKe7grfw3EeWvKz+vXEAG57qC5LQ=)
3: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl (hash: sUgnE+t1HfZxVpiJB4seIE49IDkyB92gIdxD+sGB2XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:62:8b:69:70:f8:b7:47:01:dd:f1:95:f5:10:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc127864cd43048550ed1699c584b5c14d80e098
Validity
Not Before: Nov 5 08:00:49 2025 GMT
Not After : Nov 6 08:00:49 2025 GMT
Subject: CN=2adc96f846023be49e3b038b5138c20c54591c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:65:29:9e:7b:2c:d6:37:89:14:be:73:66:
84:55:a6:52:f8:62:e1:93:80:17:e6:71:3d:14:be:
26:9a:ff:f7:69:ab:b8:b8:29:53:ab:91:e1:c7:ab:
60:5b:7a:f5:d5:7f:ce:45:a0:09:09:d8:88:bd:17:
e7:00:62:40:52:ad:e9:d4:88:0e:9e:bf:38:b6:a2:
db:52:cd:cd:c6:18:50:6c:8e:b1:5c:35:20:97:a1:
23:cf:49:a6:f4:4b:aa:83:b8:86:c4:2c:a3:23:05:
7a:58:86:f4:6a:3a:d4:6b:39:3d:95:82:a6:ef:1d:
6b:46:7a:ab:a2:31:30:5e:6d:ff:58:f7:b8:a0:2e:
a5:02:b5:1f:e6:e7:f9:4d:01:2c:7c:a2:42:77:de:
bf:38:36:0b:2c:23:8a:b1:8c:9e:67:f0:5b:33:74:
cd:29:94:cd:32:d8:a6:1b:c1:69:1f:35:5a:f7:a2:
e0:a8:56:f7:61:b6:b8:01:4a:94:e3:af:37:d2:63:
17:54:f3:30:6c:c7:28:6b:ee:2f:1e:b7:ff:e0:78:
cc:cb:d4:75:bc:11:0e:97:3b:0f:be:28:28:db:f1:
25:82:e3:b1:09:eb:7e:cb:77:46:1d:04:b2:a2:2c:
1e:6a:bb:94:52:35:03:f0:96:44:cc:30:fa:be:d7:
68:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DC:96:F8:46:02:3B:E4:9E:3B:03:8B:51:38:C2:0C:54:59:1C:7A
X509v3 Authority Key Identifier:
keyid:BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f0:41:0b:cb:df:9f:8c:07:9f:99:b8:5f:98:cf:a7:de:9c:
f5:ad:bb:8c:7d:0f:27:05:f8:6f:7c:6c:34:bc:ca:f1:4c:a4:
52:08:45:c7:8f:70:82:d2:e3:e2:73:60:89:48:60:85:3c:33:
3b:8b:02:50:71:4a:83:45:49:64:57:a4:94:47:c5:17:dd:a9:
cf:e8:c4:4c:a5:6a:89:1e:b6:b8:e7:c7:90:73:69:00:7a:38:
ab:06:97:f1:d2:c0:2d:d9:40:f4:a3:29:f7:50:37:41:51:2c:
88:20:1d:aa:c8:79:29:92:f3:47:59:dd:00:92:f7:84:c9:8c:
14:1f:60:0c:8a:08:c0:91:bd:63:dd:35:c1:85:0a:54:36:20:
9e:8c:77:b9:62:88:87:4d:5f:25:86:1c:8e:cb:c3:5f:4c:c1:
56:c6:ed:74:54:ee:df:b3:80:01:f1:b2:ca:0b:3d:33:f6:59:
6a:cc:c9:a4:68:2a:b0:0d:92:01:23:40:b9:cb:a8:b5:b9:a9:
98:9d:a1:76:43:ee:95:5b:25:5e:ac:09:f9:a8:d6:5e:eb:22:
21:a3:12:45:03:b8:63:6e:52:07:69:59:36:ca:dd:be:ed:4b:
54:5d:ee:77:54:61:29:e6:57:11:b7:e8:09:5b:cc:2f:0f:5f:
2d:18:c3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:31:58 2025 by rpki-client