Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
File: vyOcd5D8PVd2JtW78YYeWcm0cK4.mft (raw, json)
Hash identifier: Ag3X4QJLKxSU9W0B7qsVqd+L9oyy6iJfbNshlW0xxmE=
Subject key identifier: 18:93:3F:52:5C:B6:15:92:E5:C2:6A:20:DB:A6:77:79:C9:12:D8:66
Authority key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
Certificate issuer: /CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Certificate serial: 0199FE4783725C0A91BB854DEB20F7897DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 21:02:03 +0000
Manifest this update: Sun 19 Oct 2025 21:02:03 +0000
Manifest next update: Mon 20 Oct 2025 21:02:03 +0000
Files and hashes: 1: KK3OWrlDvPBfmeCu6TWdw9E-UrA.roa (hash: Vy2fUsoJqiMmmehJ7Z8Mi7gsujBEWk6ek6y2ti8B4Vk=)
2: QV_6DUkAdERVfw0yzUcHGV_bqz8.roa (hash: c8b8x2TUbfNy9W2/B6dT+X68ZyaWk4xbwJtuGfbhOdc=)
3: amIQzNAiyqoos0YzXrrP-GPr_tc.roa (hash: sz+icHojpt6wyrlEFl0wQlbst+eL4nFHTN1MBJR94Eg=)
4: vyOcd5D8PVd2JtW78YYeWcm0cK4.crl (hash: TvrHtK8xijRGnzG+wFykRgpXcusJYmU2cP00VYs2LZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:83:72:5c:0a:91:bb:85:4d:eb:20:f7:89:7d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Validity
Not Before: Oct 19 21:02:03 2025 GMT
Not After : Oct 20 21:02:03 2025 GMT
Subject: CN=18933f525cb61592e5c26a20dba67779c912d866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:34:7f:b5:8d:43:77:72:11:f2:33:a1:2e:48:
f9:be:e4:32:9b:43:36:88:d1:8c:60:e3:e8:6d:42:
4f:81:b7:ee:d7:a4:26:eb:6d:40:d4:58:0f:1e:2e:
28:58:c8:31:f0:9c:32:01:f3:df:e1:74:56:44:6f:
e5:05:8a:06:13:7e:8a:d0:e0:7c:37:de:7e:da:a2:
d5:e9:cd:1e:28:68:7a:0d:cc:9a:85:b7:de:ad:08:
a5:be:9c:d7:6c:70:5c:c9:d4:0f:d2:ba:89:f3:5e:
ed:c2:89:b2:3f:82:44:9a:4f:a0:4c:94:60:f8:91:
b4:67:ac:d8:72:fe:44:cb:95:c7:a9:f3:86:dc:45:
2d:3d:75:15:5a:af:d6:94:56:0f:ed:71:c4:96:df:
66:93:07:8c:d4:4f:14:5e:84:ff:3f:e7:fe:a7:64:
d3:86:0f:c9:28:76:a1:cb:9f:6a:07:ee:c1:14:4d:
19:4a:7d:58:47:ce:a0:c3:27:1c:f3:1d:1e:5b:74:
16:00:1c:87:f4:e4:7b:0f:ba:1a:d6:fd:96:eb:ad:
c6:46:c0:c3:34:c5:0b:2e:7e:6b:7b:12:e7:62:dc:
47:40:de:5e:56:e5:d4:64:cb:14:29:3f:32:05:30:
e3:3a:9c:e8:6f:5c:be:b6:18:27:c3:5c:f2:70:a5:
b7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:93:3F:52:5C:B6:15:92:E5:C2:6A:20:DB:A6:77:79:C9:12:D8:66
X509v3 Authority Key Identifier:
keyid:BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:db:ee:37:e0:45:08:9c:11:30:29:d9:48:b4:ac:8c:98:00:
f5:b7:e6:a3:6d:d4:eb:02:1c:29:cd:f7:1f:c3:42:e0:90:d1:
71:0c:02:b6:de:90:7e:73:0a:98:1b:b8:2c:82:f7:11:0d:65:
e7:9a:88:2b:54:a0:1c:8c:74:f3:4a:7a:50:b8:8d:66:12:23:
b7:2e:01:ac:81:f5:fc:05:8d:45:c5:cd:2c:e0:f7:b5:e2:7f:
6d:7d:aa:9d:ff:98:3f:85:2b:09:4a:39:11:59:35:67:b1:75:
d9:d9:c0:9f:1a:3f:61:0a:b1:45:ba:c2:92:b8:5d:64:01:8b:
b2:cd:fa:8c:aa:92:9f:6a:e0:c6:e6:12:71:26:5c:74:89:00:
68:38:32:29:54:c1:77:67:40:46:96:1a:bd:d9:39:8b:aa:c8:
a4:b8:ec:a6:9e:9d:58:b7:7a:4d:15:c9:43:fc:88:20:ff:6e:
2c:be:67:a5:a2:69:17:d1:26:4f:d3:2f:00:d6:8c:d9:e0:22:
5a:ac:1c:c5:ff:5b:47:fe:65:d8:56:cf:64:00:a4:fb:6a:84:
dc:35:8b:54:98:8a:24:a9:7c:82:88:e3:b2:57:38:ad:47:dd:
08:9c:37:a2:ce:03:47:20:b4:f5:e1:f6:5b:9f:84:87:3f:79:
f6:02:7f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:10:49 2025 by rpki-client