Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
File: vCYT4PJtOQfwljQL4FDCAdNY1tU.mft (raw, json)
Hash identifier: na1zz5PiHKCHOJ/alWlvC4b/YuaJNEo8WowUkrEEmoo=
Subject key identifier: FF:56:D0:5A:FF:AE:46:CE:EC:5D:44:CD:0B:68:98:D5:E0:35:53:DD
Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
Certificate issuer: /CN=bc2613e0f26d3907f096340be050c201d358d6d5
Certificate serial: 0199FB7CDE2121D0A3B7CB99B83E207B775D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
Manifest number: 039A
Signing time: Sun 19 Oct 2025 08:01:28 +0000
Manifest this update: Sun 19 Oct 2025 08:01:28 +0000
Manifest next update: Mon 20 Oct 2025 08:01:28 +0000
Files and hashes: 1: XAyxjA2g2s28aHQHs98tsK3etR8.roa (hash: QUtciDeOFFn7dnyC4Ef30ak5vE9PG8V8NwPTRULv3/k=)
2: vCYT4PJtOQfwljQL4FDCAdNY1tU.crl (hash: tExWDfGzvM2L73MYfNt//U0IHmfQcsGqfQzBNVbQtyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:de:21:21:d0:a3:b7:cb:99:b8:3e:20:7b:77:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5
Validity
Not Before: Oct 19 08:01:28 2025 GMT
Not After : Oct 20 08:01:28 2025 GMT
Subject: CN=ff56d05affae46ceec5d44cd0b6898d5e03553dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:a9:3b:a0:ed:db:0e:1c:16:dd:43:dc:07:
2e:60:15:25:73:2e:81:03:e5:6b:71:fb:f5:aa:e9:
a7:6f:5b:df:ab:e6:4b:84:85:2e:1f:63:2e:4c:de:
4a:eb:5f:45:15:45:f4:10:93:6c:de:ed:f1:e7:3a:
78:13:27:21:f5:2f:ea:fc:29:80:67:7c:3a:23:89:
c6:5b:40:82:c1:78:29:d3:fd:5d:cc:13:ee:e8:10:
25:dd:a1:92:e1:06:16:21:b4:42:44:88:f0:bc:a7:
59:ab:60:77:a4:fa:0b:b8:96:bf:af:78:db:16:ec:
ef:e8:c6:d2:66:25:ab:f4:a0:1e:aa:48:9e:64:44:
2b:53:41:66:05:f6:b9:b8:0f:ac:2a:44:00:99:1a:
df:31:eb:3a:15:0d:c8:6c:c1:85:25:52:1a:db:e0:
85:12:3a:6a:13:d3:67:c3:10:eb:5a:84:80:75:23:
4a:3a:e5:d8:1b:c5:07:20:39:d0:15:9b:bd:b5:c9:
52:43:78:1b:76:e2:a4:ef:b3:1c:fc:b5:de:cd:07:
8e:f2:60:2f:6b:2d:b9:20:93:67:11:05:84:2d:9a:
e7:a8:90:42:b1:a7:d5:be:57:01:93:73:51:82:4a:
e1:de:9e:58:09:ce:c0:c6:b8:b8:7d:7b:6c:cc:19:
bf:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:56:D0:5A:FF:AE:46:CE:EC:5D:44:CD:0B:68:98:D5:E0:35:53:DD
X509v3 Authority Key Identifier:
keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f1:c9:e9:ea:4d:68:cc:1c:9c:3c:f6:7f:98:fa:d2:b1:60:
32:89:a8:49:43:cb:9f:6d:9b:75:0e:61:85:42:63:cd:4b:e8:
02:5f:ce:26:2a:d4:f5:a4:36:b7:56:36:be:0b:5b:df:42:9d:
2b:f8:cd:c7:35:cf:42:4e:b2:d1:4c:9f:90:16:b5:ab:19:d9:
db:42:e4:2c:8e:0e:a6:cd:e9:25:03:e8:71:91:4f:70:60:2d:
14:eb:4d:99:b3:53:77:15:48:39:86:ed:c8:56:61:6c:58:dc:
32:b9:ca:b9:dc:81:45:3b:88:3d:56:09:7a:9f:26:97:8d:75:
2c:2e:37:de:8b:2d:a2:c9:ca:2a:99:62:aa:3f:1f:79:37:eb:
4f:a5:96:ed:bd:57:5f:53:9f:84:58:c0:c7:bf:c8:d5:f8:89:
c0:5e:a0:cf:86:de:ec:e3:aa:14:f6:39:66:ca:1a:d0:ca:92:
0a:d9:39:3c:af:40:9e:24:66:c0:61:f4:dc:01:5f:aa:84:a2:
35:10:76:ae:e7:f9:40:91:33:2b:1c:c7:66:dd:92:16:00:ec:
7d:9e:e6:4e:20:07:e6:fd:64:db:47:81:b6:17:56:54:c6:e7:
31:d0:81:93:cc:55:d0:0f:86:83:a3:0b:0c:62:34:2b:e0:81:
7d:73:f1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:27 2025 by rpki-client