Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
File: vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft (raw, json)
Hash identifier: WXSbyogjzTTIhZB2ufBfWJCKqqDfk9/3Esh+UK75nyc=
Subject key identifier: 40:B4:F6:BB:44:EB:79:8C:1C:AA:6E:6A:F5:72:57:DC:25:DC:45:6A
Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
Certificate issuer: /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Certificate serial: 019A0290A5A86D7533BFBA5DA31A6C708549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 17:00:25 +0000
Manifest this update: Mon 20 Oct 2025 17:00:25 +0000
Manifest next update: Tue 21 Oct 2025 17:00:25 +0000
Files and hashes: 1: 6pAZoUeyJNKjbIkJ9bo52GGChiE.roa (hash: H9UE5mQZ+sgOHGu/NqWUAUZ7b5ITdi+7fpdJ+eVNZFg=)
2: vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl (hash: KGHVxxqIAuVYTxJHR8Mbyb6iWRW1kw12+1QZXjGbtyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:a5:a8:6d:75:33:bf:ba:5d:a3:1a:6c:70:85:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Validity
Not Before: Oct 20 17:00:25 2025 GMT
Not After : Oct 21 17:00:25 2025 GMT
Subject: CN=40b4f6bb44eb798c1caa6e6af57257dc25dc456a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:d0:3b:ed:0c:29:b4:b3:20:bb:bb:03:d3:
bb:f2:83:79:c8:b3:df:e3:39:12:3a:58:81:29:39:
da:bb:6f:12:37:f8:26:e0:ba:76:7d:d8:f5:b9:2b:
28:64:23:8e:d5:b6:95:49:1e:5a:d1:98:90:0c:8a:
fe:cd:90:af:27:3c:ff:2d:2f:b5:fc:09:c0:59:39:
3c:d7:38:6a:ac:f9:30:1a:26:2f:2f:56:59:d7:7c:
25:09:7f:22:3a:31:65:69:20:7e:8a:14:cb:da:62:
c4:1d:8f:f1:61:98:2b:e8:a8:04:90:34:8e:be:00:
68:b7:8c:57:80:d4:6c:b5:89:c4:98:93:5a:8e:d5:
05:21:e6:cf:16:a9:43:cd:d5:83:0f:0f:6b:d3:37:
4c:69:54:58:62:af:83:67:00:d0:3d:b1:53:64:64:
8a:bb:0b:d7:c7:d2:8c:51:d7:7f:d1:89:e8:fe:5c:
23:0b:29:a0:da:37:43:f7:35:68:49:04:ac:9a:b0:
aa:25:ad:36:8f:74:01:b2:a2:46:bd:23:f7:e6:e6:
4f:cb:c8:3b:c1:b0:66:7f:5a:d5:9f:7b:d7:e9:83:
d5:60:e8:e8:74:cc:67:87:ff:aa:d1:1e:ec:50:7d:
63:f2:98:ab:ad:99:36:b8:2f:9a:ab:0b:f5:ad:af:
b4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B4:F6:BB:44:EB:79:8C:1C:AA:6E:6A:F5:72:57:DC:25:DC:45:6A
X509v3 Authority Key Identifier:
keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:04:71:43:64:5e:87:5c:97:ff:07:8a:83:c8:d3:46:60:2c:
e9:05:98:e1:6d:6e:50:96:6f:3a:b5:02:28:f6:2f:9a:20:fb:
5f:93:73:60:4d:17:95:26:c4:0c:41:5e:0d:5f:fa:19:4f:29:
da:6f:27:2c:a7:65:d5:e1:b8:60:35:ec:0c:a0:91:43:e0:b5:
c6:2c:52:6e:7a:9b:c2:83:8b:12:4c:1e:7b:c1:b7:3e:e5:f6:
a9:ff:d8:aa:a3:97:70:4a:97:14:f8:95:03:94:3b:3a:6c:8b:
e2:31:0c:c0:8a:6d:7e:50:70:62:4f:55:76:db:3e:4a:d0:67:
f0:db:01:40:c4:81:1a:f9:ac:2a:48:21:15:7e:dd:86:30:e9:
4b:ac:b3:2b:da:68:8d:91:57:a8:8f:63:0c:a9:6a:e1:84:0c:
8b:a8:8e:80:58:b0:60:35:d6:85:76:8f:4c:c5:a5:17:fd:5e:
89:17:28:3e:b9:ff:f8:8b:59:2f:fb:10:77:e3:0b:27:3f:0b:
f0:5b:97:40:3d:4a:0b:ff:39:6b:12:22:d3:2c:28:63:f7:2e:
0d:1e:8b:68:b9:c4:35:64:8b:fa:16:c0:ab:8e:75:05:9b:ec:
e7:61:ed:22:f0:81:b3:f5:1a:10:e4:99:40:1e:ed:75:c7:0a:
88:48:7c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:18:48 2025 by rpki-client