Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
File: vp_DiEcFxK7c_npNF923UuH-YZg.mft (raw, json)
Hash identifier: yf3wMC0xji1IDdwh1j/KV8noqAAESwoOTlpaoCCv7gE=
Subject key identifier: F7:9E:1D:C9:76:B9:68:10:9B:61:8A:82:B6:BB:7B:7D:F0:60:7E:BD
Authority key identifier: BE:9F:C3:88:47:05:C4:AE:DC:FE:7A:4D:17:DD:B7:52:E1:FE:61:98
Certificate issuer: /CN=be9fc3884705c4aedcfe7a4d17ddb752e1fe6198
Certificate serial: 0199FCC63FB150F87D3C79379AECFC48D2F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
Manifest number: 1062
Signing time: Sun 19 Oct 2025 14:01:14 +0000
Manifest this update: Sun 19 Oct 2025 14:01:14 +0000
Manifest next update: Mon 20 Oct 2025 14:01:14 +0000
Files and hashes: 1: OxQ5KD2enOW3Q6SG5w9YoHDtQi4.roa (hash: 7v/MM1L+QU9CF1kjU9dOBbxcjiq8aqzftr7NOP1GZsU=)
2: vp_DiEcFxK7c_npNF923UuH-YZg.crl (hash: iRKH9NIH0Adlc3nPMVhqOopEc8AqLhBlGRcENmb+kcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:3f:b1:50:f8:7d:3c:79:37:9a:ec:fc:48:d2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9fc3884705c4aedcfe7a4d17ddb752e1fe6198
Validity
Not Before: Oct 19 14:01:14 2025 GMT
Not After : Oct 20 14:01:14 2025 GMT
Subject: CN=f79e1dc976b968109b618a82b6bb7b7df0607ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fc:ee:4f:78:1a:95:86:c9:1c:41:09:4a:a4:
e8:a2:06:b0:f5:77:e4:f7:90:94:4a:dd:5a:cc:94:
ab:5e:16:52:6d:18:bd:30:71:6d:30:d9:8d:d9:24:
c6:07:87:8e:fc:20:e0:ed:a3:87:b9:35:cc:d2:44:
4c:6f:fc:33:40:7a:e5:4d:fe:ad:df:c6:e1:17:97:
69:12:c8:cd:bf:fc:b7:7c:72:61:87:36:e0:df:0e:
c9:cd:1b:bb:19:f9:a4:ba:34:71:6d:98:19:29:27:
db:d3:98:b9:3b:fa:de:bb:61:3a:9a:13:1b:77:7a:
c7:59:66:90:bd:90:d9:fe:aa:03:7c:6d:c4:e4:b2:
15:96:de:b4:fb:ff:e6:3b:00:4e:51:83:f6:86:16:
ac:7b:62:72:a1:a4:64:e4:f0:1a:c0:7a:50:d9:d6:
63:28:d3:81:81:e9:2a:75:87:74:02:af:62:f0:fe:
fe:93:0e:bd:4d:19:0e:3d:61:35:d1:3e:88:68:fc:
dd:1d:ef:e3:27:dd:de:a7:66:b2:6d:cb:c7:c0:48:
e5:58:d2:d5:38:21:4f:e7:00:c7:0c:39:46:1c:1d:
f8:bc:b5:11:25:63:27:17:c3:2f:3d:bd:45:70:0a:
ef:8f:63:ec:7d:e8:51:15:f8:1f:ee:48:f1:2c:d9:
ee:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9E:1D:C9:76:B9:68:10:9B:61:8A:82:B6:BB:7B:7D:F0:60:7E:BD
X509v3 Authority Key Identifier:
keyid:BE:9F:C3:88:47:05:C4:AE:DC:FE:7A:4D:17:DD:B7:52:E1:FE:61:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1b:bd:78:00:d4:db:cf:f7:66:a0:1b:85:cc:45:8f:13:2f:
b0:7e:90:ae:5d:0a:03:4c:d4:fe:21:68:83:83:51:60:3b:33:
75:92:eb:bf:2c:67:53:1e:0d:8c:a2:df:97:fe:3d:14:70:19:
86:aa:d8:9b:8a:ba:5f:b7:39:56:91:a7:7a:0b:b4:23:b4:ce:
5c:ee:7e:f0:f9:a8:05:32:01:5d:3f:31:45:a2:9d:c9:a2:96:
25:14:10:5a:3e:db:43:ed:f1:ff:cd:7e:46:01:20:6b:7c:11:
2f:2c:2c:03:a2:e8:7d:a8:6b:f8:07:fc:f4:e1:b9:c3:52:b3:
26:9a:ac:87:e9:46:e3:24:14:a8:89:8d:d2:41:88:5f:a4:fe:
54:24:9d:13:43:a2:85:78:69:1e:93:2c:80:18:e7:22:13:32:
4a:52:28:3b:da:97:5d:f2:a1:73:34:e4:ce:e0:6b:ac:97:40:
13:c8:1b:8f:54:7b:d3:76:e0:a6:b1:bb:8f:9f:41:5f:16:ef:
e8:a9:16:2d:57:e7:49:d1:17:4d:c0:38:97:8f:5b:33:af:65:
38:c5:07:41:68:bd:49:42:83:39:43:5a:67:48:ff:e5:b2:19:
9b:98:38:a0:61:c6:0b:4f:d7:66:e4:07:85:f2:10:68:c2:9f:
91:6a:b8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:34 2025 by rpki-client