Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
File: vfegoEi2jsz6TUnqtPFtx5LA0xg.mft (raw, json)
Hash identifier: H6g22G6MwLBFSlk8ay6gLgwz1JIQaxmdAkpRsfxVUdw=
Subject key identifier: A4:85:62:94:62:4E:98:65:56:21:DA:C7:53:2A:66:D8:9F:3C:A0:14
Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Certificate serial: 0199FEB4681CF21495A4AA1C141952A2D4DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 23:00:59 +0000
Manifest this update: Sun 19 Oct 2025 23:00:59 +0000
Manifest next update: Mon 20 Oct 2025 23:00:59 +0000
Files and hashes: 1: GKC-zruGo7Y0lHBj7AqmYPwzc8c.roa (hash: u2pwVxzKoBKyV0Dimg3sj9jXDAo9fvdhwaO1o32GlnA=)
2: X_m5ZAvxIpZScImZ01eKwHRPNDY.roa (hash: beEA3W7SColLkSlnHacB1waBPlogRmM3jPPLz78ItOg=)
3: v1Kwwfd8ZjjCs2Mu7l5Mtdf-PVI.roa (hash: ulU0aPB2ZxGebVfubT+AGsI+A+WmNT0R9PT7Ovu3cU0=)
4: vfegoEi2jsz6TUnqtPFtx5LA0xg.crl (hash: +YYpWD63m51qZmN1BhUsuAO/X/qksl9LfIZb6dvvdIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:68:1c:f2:14:95:a4:aa:1c:14:19:52:a2:d4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Validity
Not Before: Oct 19 23:00:59 2025 GMT
Not After : Oct 20 23:00:59 2025 GMT
Subject: CN=a4856294624e98655621dac7532a66d89f3ca014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0c:c7:19:8d:89:00:81:a1:f4:a3:eb:c0:61:
77:d7:14:79:ba:0b:8c:ef:6c:41:ff:ee:28:fd:52:
b0:41:4f:ab:5c:72:cf:15:7b:e1:fe:c2:e6:2c:77:
46:37:bc:58:b9:f2:a9:f8:d3:4d:30:70:79:67:3f:
ac:aa:b0:6a:d9:b9:40:44:6b:a7:9e:65:49:6e:2b:
83:1a:33:16:0d:a9:f5:00:2f:c5:52:07:c3:73:f4:
70:f2:f4:92:aa:ed:c5:5d:75:93:85:54:5e:18:5a:
d4:a3:a0:8e:78:64:4d:50:00:d8:32:0a:6a:e2:7b:
48:7d:06:73:f8:6c:53:73:f9:89:bc:0b:8f:9d:1a:
f5:46:b1:7e:85:1f:66:02:cb:96:a4:ea:72:4b:a0:
d4:e2:4f:73:83:97:69:cb:38:a5:f2:3b:64:4e:fb:
00:ca:b4:89:99:92:a7:a5:98:e8:b2:f9:f3:df:27:
14:1d:1e:5c:b8:1b:cf:f5:43:46:de:3d:5e:7c:1c:
06:bf:17:1f:da:c2:f0:91:35:c6:bb:40:ca:e6:9d:
c5:92:cb:be:2f:0d:9c:48:02:c3:32:09:27:e8:8a:
f7:6a:54:fb:88:38:07:0f:57:f8:a9:eb:d5:66:19:
27:bb:0f:8a:6d:98:b7:48:87:c1:5e:4f:c3:16:d4:
55:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:85:62:94:62:4E:98:65:56:21:DA:C7:53:2A:66:D8:9F:3C:A0:14
X509v3 Authority Key Identifier:
keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0a:81:21:45:fe:6e:e9:ea:ff:9d:3a:ad:52:b3:1a:e2:6c:
8d:82:59:53:12:0c:5b:70:17:ba:88:a9:c6:32:77:f5:47:fc:
be:f8:7e:16:e5:38:3d:77:9a:e2:bf:49:b4:7a:7d:f7:f4:1e:
05:01:c6:e0:2b:5c:a3:d5:83:3b:23:5b:9e:08:1d:59:d2:08:
45:24:fb:89:eb:03:9b:69:3d:75:f8:51:fe:87:a0:0e:16:2d:
9f:a0:9b:a5:59:2f:fb:b4:b0:86:4d:bf:f4:06:a8:32:17:9d:
f5:b2:db:a0:b3:d3:69:fe:77:25:44:cf:e4:28:ed:39:a2:73:
c9:3e:b0:7f:f3:4c:d6:7d:20:d2:56:8d:de:a4:d9:32:95:b1:
12:81:87:a3:d7:a5:77:7b:ce:3d:8e:2c:1e:85:21:38:8d:ec:
23:96:48:cb:5a:9f:ec:c3:5c:91:70:04:5a:5d:9c:b3:77:46:
f9:18:84:da:e1:76:da:4b:72:3c:a2:be:21:82:99:cf:34:b7:
8f:67:5b:39:d7:ab:81:09:33:a3:ee:23:b3:b9:37:cf:33:4f:
48:1c:0c:a7:6f:0a:a8:aa:fd:7b:06:1e:9a:e0:90:a7:47:03:
d6:58:24:50:80:f0:34:15:92:d0:94:9e:bf:29:95:d2:7e:95:
93:cb:b0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:37:44 2025 by rpki-client