Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
File: vPnwsJRzjFKC-_SzBnDsX9y1id8.mft (raw, json)
Hash identifier: WxTulh9nxleVdIgF4Z/7cqFm9HqhUfMv2qqk5E2P/d4=
Subject key identifier: FE:86:19:8B:2E:9E:A9:C2:64:AC:90:9C:99:04:31:03:FA:FC:32:98
Authority key identifier: BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
Certificate issuer: /CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Certificate serial: 0199FDDA5A13FC8B6A67491FEB2045A64A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 19:02:49 +0000
Manifest this update: Sun 19 Oct 2025 19:02:49 +0000
Manifest next update: Mon 20 Oct 2025 19:02:49 +0000
Files and hashes: 1: GcXZXurTGrAnFXKjvUHU9XD_YyQ.roa (hash: CVqER74xo0XyQrFlwwf0CdK9BC9SAVXvCBJxlFB4CBw=)
2: vPnwsJRzjFKC-_SzBnDsX9y1id8.crl (hash: z1wGlzBNOImeGuyIyCIMb4JzNWtMu+KqwML9zGdlZfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:5a:13:fc:8b:6a:67:49:1f:eb:20:45:a6:4a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Validity
Not Before: Oct 19 19:02:49 2025 GMT
Not After : Oct 20 19:02:49 2025 GMT
Subject: CN=fe86198b2e9ea9c264ac909c99043103fafc3298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:cd:95:59:25:3c:60:26:16:15:49:8d:87:
46:8f:48:d0:09:6a:af:73:66:8b:22:bd:5d:ee:d2:
d6:31:58:52:0c:03:f1:78:76:6a:51:4a:12:f4:e8:
98:ec:fb:2a:07:6f:e0:52:16:2d:bb:be:7c:7d:a8:
4e:6f:30:43:bd:45:03:90:0a:a9:e2:bf:1b:0d:44:
49:9f:22:d5:24:3a:17:13:91:f0:79:da:1c:7d:da:
73:1b:61:c9:95:2d:55:78:b9:3f:a3:dd:8f:d3:24:
56:c7:35:e1:a0:0b:97:84:58:d9:a9:ed:f2:49:c7:
42:7b:f0:07:22:57:00:9f:87:87:b7:f3:26:59:73:
bb:d9:0a:97:d0:50:57:27:1d:a0:83:4e:c1:be:72:
7e:4e:6e:93:dc:a3:b9:e5:92:37:8e:ca:85:43:fc:
6d:2d:76:f4:a4:a5:ea:ae:24:0a:d5:79:d4:be:9d:
4a:c6:43:4e:7d:5b:36:04:25:d4:73:e0:21:17:bb:
63:a4:b3:f5:fe:ad:4b:85:b7:1b:42:72:f5:a1:4b:
53:ea:f6:d4:c6:71:0c:b8:e5:44:34:24:f9:a5:31:
4d:40:fe:8b:8c:07:2d:d1:0f:24:9f:7a:60:3a:40:
ff:7a:b1:d1:f5:2f:40:14:a9:6f:a6:7e:0c:33:bb:
78:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:86:19:8B:2E:9E:A9:C2:64:AC:90:9C:99:04:31:03:FA:FC:32:98
X509v3 Authority Key Identifier:
keyid:BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:be:20:a7:ff:5d:28:6d:db:10:70:55:a5:c2:cd:3d:ff:04:
60:b4:e5:4b:eb:61:cf:02:a0:e7:40:45:0c:5c:ab:e4:18:29:
d4:85:fd:73:4b:f5:c4:02:f7:34:07:50:4a:f2:de:ce:3e:b9:
f4:c9:e1:d1:a6:a0:72:ba:d0:69:db:98:24:82:33:12:f1:30:
bc:c7:ac:54:48:e2:03:e1:27:9a:2d:93:c0:9c:77:0e:00:56:
83:7d:b3:a9:67:60:c2:33:65:45:0e:67:78:7f:67:ca:5f:99:
ce:38:d3:9f:33:86:f6:ae:fd:a3:a7:01:d3:bc:7f:65:b8:ee:
4f:f9:40:ba:69:48:ca:87:e0:91:a2:79:0c:0c:9b:43:94:04:
bc:55:7d:ae:6e:d2:0d:c4:8b:d1:22:37:aa:4b:50:58:84:56:
1f:6e:c8:c9:8d:95:d1:7c:7c:a1:8c:89:1e:46:1f:63:76:e7:
4d:fc:39:79:f5:e9:84:1b:25:c0:39:f1:c4:9d:32:e7:9d:3f:
bf:60:ed:68:a6:66:f9:5b:2d:ae:59:b2:12:5c:57:59:cd:a9:
3f:dd:62:95:d3:f5:8f:68:79:50:93:66:cd:85:0d:0e:f9:d6:
6b:cb:4d:e9:d6:d6:68:e8:ea:a4:41:34:e5:e2:35:9b:8e:cd:
09:b1:90:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92loT/ItqZ0kf6yBFpkp6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZjlmMGIwOTQ3MzhjNTI4MmZiZjRiMzA2NzBlYzVmZGNi
NTg5ZGYwHhcNMjUxMDE5MTkwMjQ5WhcNMjUxMDIwMTkwMjQ5WjAzMTEwLwYDVQQD
EyhmZTg2MTk4YjJlOWVhOWMyNjRhYzkwOWM5OTA0MzEwM2ZhZmMzMjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0/NlVklPGAmFhVJjYdGj0jQCWqv
c2aLIr1d7tLWMVhSDAPxeHZqUUoS9OiY7PsqB2/gUhYtu758fahObzBDvUUDkAqp
4r8bDURJnyLVJDoXE5HwedocfdpzG2HJlS1VeLk/o92P0yRWxzXhoAuXhFjZqe3y
ScdCe/AHIlcAn4eHt/MmWXO72QqX0FBXJx2gg07BvnJ+Tm6T3KO55ZI3jsqFQ/xt
LXb0pKXqriQK1XnUvp1KxkNOfVs2BCXUc+AhF7tjpLP1/q1LhbcbQnL1oUtT6vbU
xnEMuOVENCT5pTFNQP6LjAct0Q8kn3pgOkD/erHR9S9AFKlvpn4MM7t4jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6GGYsunqnCZKyQnJkEMQP6/DKYMB8GA1UdIwQY
MBaAFLz58LCUc4xSgvv0swZw7F/ctYnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlBud3NKUnpqRktDLV9TekJuRHNYOXkxaWQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZjE5ZjktODM5NS00MDg4LWFmMTct
ZTVjYTY3YzExNTMzLzEvdlBud3NKUnpqRktDLV9TekJuRHNYOXkxaWQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zZjE5ZjktODM5NS00MDg4LWFmMTctZTVjYTY3YzExNTMz
LzEvdlBud3NKUnpqRktDLV9TekJuRHNYOXkxaWQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHr4gp/9d
KG3bEHBVpcLNPf8EYLTlS+thzwKg50BFDFyr5Bgp1IX9c0v1xAL3NAdQSvLezj65
9Mnh0aagcrrQaduYJIIzEvEwvMesVEjiA+Enmi2TwJx3DgBWg32zqWdgwjNlRQ5n
eH9nyl+ZzjjTnzOG9q79o6cB07x/ZbjuT/lAumlIyofgkaJ5DAybQ5QEvFV9rm7S
DcSL0SI3qktQWIRWH27IyY2V0Xx8oYyJHkYfY3bnTfw5efXphBslwDnxxJ0y550/
v2DtaKZm+VstrlmyElxXWc2pP91ildP1j2h5UJNmzYUNDvnWa8tN6dbWaOjqpEE0
5eI1m47NCbGQbA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:04:09 2025 by rpki-client