Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
File: vygFmS5lMdPaMe4a9rzVwG0Ctso.mft (raw, json)
Hash identifier: un0v+Zm328VslcfboA9+9agbigzyS68PE7Ao9srzJxo=
Subject key identifier: 36:F9:9D:C8:0B:6B:56:D8:90:68:80:81:80:9C:91:B6:93:A6:69:3E
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial: 0199FCFD83B9C3174E556EE8F7716CC80409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 15:01:36 +0000
Manifest this update: Sun 19 Oct 2025 15:01:36 +0000
Manifest next update: Mon 20 Oct 2025 15:01:36 +0000
Files and hashes: 1: ZA2eo4PhOO6YarPBjFuZYerlXM8.roa (hash: OaUR9ntwZSMTqF4rae/f45ntDF7DCdGD74N9a3x5n8s=)
2: iU6o8UX2fMqdnVT4GPBZLMHQUVk.roa (hash: L7qS2Pktcg+3MFOhFw0UCguQbXdIgIfJZ4PXXKIQFAI=)
3: vygFmS5lMdPaMe4a9rzVwG0Ctso.crl (hash: 8bBHGRSa006mc3j+ahHQ3bednqqmgR8SojClKA5+kh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:83:b9:c3:17:4e:55:6e:e8:f7:71:6c:c8:04:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Validity
Not Before: Oct 19 15:01:36 2025 GMT
Not After : Oct 20 15:01:36 2025 GMT
Subject: CN=36f99dc80b6b56d890688081809c91b693a6693e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ff:c9:e3:6f:e7:f7:5c:bc:a3:0c:f0:67:52:
96:85:6f:08:a4:ad:0a:54:07:0e:8f:c8:74:8b:ef:
1e:8e:91:cf:d4:d1:90:e5:0f:4d:df:cc:e0:fe:2b:
df:bd:26:78:03:05:08:53:8f:d8:22:1e:54:ae:0a:
b5:df:88:c1:a0:68:75:86:dd:28:65:90:90:15:82:
d7:b5:50:ba:05:36:04:0b:ab:af:08:3b:28:99:cf:
5d:60:3d:6f:8e:c4:2e:53:d7:f6:cb:d9:0d:28:f3:
9c:c5:c9:9d:cd:c5:8a:c3:5f:52:6f:08:fc:c5:51:
07:0b:da:16:6a:80:7d:fb:2a:a7:14:6d:85:d6:07:
71:f0:09:79:00:3f:5c:87:3f:55:b6:63:5a:24:a8:
f6:37:25:fa:e0:53:10:32:61:28:e0:c6:2c:00:6b:
13:c6:94:3e:b3:d5:c5:29:58:b4:98:af:f2:f9:d8:
54:49:18:01:c9:47:9f:94:32:72:29:65:d1:d9:33:
28:b1:5a:9f:ac:7c:c3:dd:bb:42:84:a0:15:23:f5:
46:8f:58:5e:53:6b:87:4b:61:93:03:b2:e0:d0:9e:
11:fd:b9:31:36:84:9a:29:39:a2:10:44:6d:81:b9:
e2:e9:0f:ab:fb:67:ca:1f:73:34:1e:7c:9e:3d:9d:
fc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F9:9D:C8:0B:6B:56:D8:90:68:80:81:80:9C:91:B6:93:A6:69:3E
X509v3 Authority Key Identifier:
keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:95:ce:84:a6:ef:8e:16:8b:33:eb:c4:2f:91:9a:62:b2:de:
8a:21:8e:c6:22:16:d4:06:b3:93:20:74:c8:b6:20:31:a6:6b:
bf:2d:1a:5b:5d:99:8d:2e:c1:ca:5b:2f:65:dc:52:01:2b:41:
f3:99:76:a9:56:f1:be:ec:7d:f1:fa:89:10:a4:13:ad:15:43:
62:32:af:80:b0:88:e0:49:ee:82:87:44:a2:66:86:e0:50:7d:
f9:79:1f:b7:58:97:73:f8:77:f1:a8:0a:b3:6b:aa:35:72:2d:
5d:96:f7:ba:e7:d2:75:9e:eb:82:41:d3:23:09:ed:7b:75:16:
d1:36:08:01:cd:38:15:60:1f:0c:6e:5d:8b:f0:db:d5:2e:fa:
68:d1:7a:f5:a7:48:f2:d8:0c:d4:5c:95:96:b8:86:bc:65:4c:
01:af:e2:ec:d5:17:08:f8:fe:88:51:40:ec:10:50:fb:fa:ac:
63:11:0a:26:47:1d:97:2b:ea:7a:28:fe:8d:ca:33:24:64:42:
a6:96:f6:53:50:62:5d:d0:3b:fc:35:76:17:31:15:67:cc:8e:
6b:7a:24:a6:c8:04:42:54:16:1e:de:19:0a:76:d0:32:88:5d:
ca:da:dc:7e:2a:a3:11:43:89:8c:d8:ca:cf:c1:1f:73:cf:2a:
a9:5c:46:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:14 2025 by rpki-client