Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
File: vB0gk2YmtVdDxllFEt5C75-OkF8.mft (raw, json)
Hash identifier: QNCQh3ZuaX7wD6IdokIaNH/VB/1XpSFCZhi6xiFOnlE=
Subject key identifier: 6F:73:FC:D5:B4:0F:24:C8:1D:AA:79:24:1B:B5:3F:8E:CA:BA:59:92
Authority key identifier: BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
Certificate issuer: /CN=bc1d20936626b55743c6594512de42ef9f8e905f
Certificate serial: 0199FB7CAB010323AE9947BDFE634DCD981C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 08:01:15 +0000
Manifest this update: Sun 19 Oct 2025 08:01:15 +0000
Manifest next update: Mon 20 Oct 2025 08:01:15 +0000
Files and hashes: 1: 5sX-DGEXiD0BFlvf-Fmo0E_zIWA.roa (hash: 9QROXrOe8DbEbrWzP6N+sqZkzzd6XWEYKMJ32P4x344=)
2: vB0gk2YmtVdDxllFEt5C75-OkF8.crl (hash: ws66Z68SUL5zTZ40Hp9Wu6sUTDBxB5yJ/qEUvtZLXsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ab:01:03:23:ae:99:47:bd:fe:63:4d:cd:98:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1d20936626b55743c6594512de42ef9f8e905f
Validity
Not Before: Oct 19 08:01:15 2025 GMT
Not After : Oct 20 08:01:15 2025 GMT
Subject: CN=6f73fcd5b40f24c81daa79241bb53f8ecaba5992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:5a:bd:fd:be:cc:13:2b:c5:99:25:e7:0d:
19:e8:5a:11:26:34:ed:12:20:82:96:c7:93:9b:e1:
62:68:d2:d2:f5:ee:ba:a9:50:27:ad:73:e5:97:fe:
f6:58:fe:80:29:6b:ef:d4:f1:fc:22:c5:51:20:ce:
b5:47:97:37:ba:88:55:a0:f3:f4:b4:4e:db:c8:2b:
88:6a:18:17:01:e3:c5:bc:6d:9d:20:a8:c3:f4:ab:
e4:33:b8:78:38:76:f5:26:85:59:d9:cc:30:d4:19:
6f:a2:a8:62:c7:1c:a6:c5:3d:3f:ae:83:ec:ee:82:
ae:4f:eb:d8:d5:cb:aa:31:0d:0d:fa:e8:65:50:18:
65:15:fd:9d:7d:ef:5d:10:05:f6:e2:b0:4d:d5:b0:
a7:d8:43:d4:6b:ae:53:da:24:ca:84:98:3f:3e:a8:
76:8e:98:9f:c5:36:ed:06:9d:32:2c:49:78:1f:e1:
36:57:20:23:57:bd:26:34:da:3c:19:db:0c:2b:fc:
13:da:51:40:ba:11:61:f3:5c:61:43:a5:af:08:f4:
66:4a:7d:ca:9d:a1:b8:37:55:95:ab:6c:cc:9c:4f:
92:9c:30:76:ed:47:18:16:6d:e0:13:e3:c6:10:ac:
5d:a2:df:d5:d0:d7:ac:ea:03:ab:1f:7c:21:c9:81:
69:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:73:FC:D5:B4:0F:24:C8:1D:AA:79:24:1B:B5:3F:8E:CA:BA:59:92
X509v3 Authority Key Identifier:
keyid:BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:71:1b:0a:61:da:f9:b0:66:3a:5c:99:e7:ce:c1:e8:b6:4a:
e6:92:e0:34:fc:10:3e:54:e3:6a:ec:e0:6f:97:d3:16:3f:c0:
af:23:62:88:c8:f1:e1:1e:c0:32:54:6c:e5:84:7a:de:8b:96:
9a:9b:72:b1:fe:f0:62:d1:54:ef:b0:57:b6:15:22:60:51:b2:
77:6e:18:c9:5c:39:a3:9b:e5:97:1c:42:9b:7d:63:74:52:da:
a1:9c:af:30:8d:8a:a1:52:50:b0:7a:b1:1b:d3:b1:5d:81:4a:
f2:9c:07:2c:b8:a8:3c:2a:23:d9:95:ef:c9:b6:61:8b:bf:39:
a7:e8:b6:12:d0:55:43:1b:19:12:28:10:e7:42:97:1a:c5:ab:
fb:a9:be:0c:4e:e3:c7:72:8b:5b:a3:5b:07:57:28:74:6f:15:
04:8b:ed:62:77:fb:e5:28:e2:b6:0e:a1:e8:ef:7b:5e:d4:eb:
c3:fc:15:52:3f:44:36:0f:0c:a8:81:da:c8:25:12:ee:22:8c:
29:64:62:63:f1:44:23:7b:3b:8c:87:fd:76:45:1b:b4:14:74:
e6:0b:52:0d:22:ec:59:53:3f:21:a3:07:83:ef:8b:ac:2a:99:
60:a7:7e:fe:cf:e9:43:fe:c3:38:d9:20:11:2e:77:88:e3:ed:
42:7b:52:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:17 2025 by rpki-client