Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
File: vaYQQ1QkhQlrDfQ1HMDal383cN0.mft (raw, json)
Hash identifier: SjQ59Kvv7wz9Fugh1Y9J20oNvfj9RbtPOwuWb6LyBXM=
Subject key identifier: D5:6B:14:9F:58:96:EF:01:AA:4D:24:F9:CD:7A:A5:00:9C:E3:A9:1F
Authority key identifier: BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
Certificate issuer: /CN=bda61043542485096b0df4351cc0da977f3770dd
Certificate serial: 0199FB7CE932759FC09BEBA71C1A074CB165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 08:01:31 +0000
Manifest this update: Sun 19 Oct 2025 08:01:31 +0000
Manifest next update: Mon 20 Oct 2025 08:01:31 +0000
Files and hashes: 1: RYZ_HUggvvOzHTuXBACbgajQpo0.roa (hash: Fp6s79hRrwq+bZ12gZrNnH0nQeo4puoviWIdP4EjMXQ=)
2: vaYQQ1QkhQlrDfQ1HMDal383cN0.crl (hash: iKaGcpbKSfrD3h8VHtoN29MpuVrQrWICvOXImpw09Ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:e9:32:75:9f:c0:9b:eb:a7:1c:1a:07:4c:b1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda61043542485096b0df4351cc0da977f3770dd
Validity
Not Before: Oct 19 08:01:31 2025 GMT
Not After : Oct 20 08:01:31 2025 GMT
Subject: CN=d56b149f5896ef01aa4d24f9cd7aa5009ce3a91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:df:4a:6d:f0:65:25:2e:56:ba:9d:93:a4:20:
fa:12:dd:74:0a:f2:55:69:63:f5:3c:61:4c:e5:65:
0b:dd:15:d2:d8:8d:a4:4b:66:58:93:26:b4:d0:2a:
56:33:57:b8:51:44:20:82:df:3f:6c:f5:2b:d3:99:
a5:cd:71:92:9d:38:4c:8d:92:1e:27:56:fd:4e:4f:
0d:fb:95:04:6d:5b:14:91:52:8d:02:e0:54:f7:c4:
46:d6:ee:c6:4f:34:66:11:24:f6:6b:28:07:80:94:
35:bc:65:35:ca:95:18:92:cb:cf:fb:cd:47:e6:65:
d6:a0:e0:c3:37:a5:9c:e6:fb:39:cf:dc:f7:a5:87:
3c:01:74:4d:14:b1:9b:92:91:4e:9f:03:e0:48:f0:
18:96:d4:fc:f9:77:cc:f2:60:ff:9e:b8:64:57:fe:
4a:42:1c:24:1f:b0:39:65:37:d9:dc:74:be:f4:f5:
b1:df:43:3c:7f:2d:b8:bc:8d:66:a9:df:ba:ae:2e:
27:31:d6:d4:41:05:77:27:cf:91:c5:97:eb:55:95:
89:01:f2:2e:b1:3c:f3:54:d7:1d:dd:bc:09:4d:98:
b9:27:c7:51:57:d5:85:90:ee:86:86:f9:1e:94:2f:
54:ed:07:57:02:2f:4e:d6:63:7f:60:66:c7:59:9d:
29:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6B:14:9F:58:96:EF:01:AA:4D:24:F9:CD:7A:A5:00:9C:E3:A9:1F
X509v3 Authority Key Identifier:
keyid:BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2a:5a:50:e1:f6:e3:e7:83:b5:c2:5f:a0:63:f6:9a:61:a1:
73:2b:7b:6b:21:35:2a:d2:6f:d7:46:3e:3f:29:f2:2e:2a:69:
fd:fe:71:cd:94:dc:cd:fc:e0:c5:a8:70:d5:50:bc:05:68:71:
d6:a7:76:84:b4:6b:58:a8:30:04:25:f4:fe:bb:7a:1b:3a:1c:
49:f0:ea:8a:47:14:f0:4c:3f:78:a5:e7:50:c5:d5:65:d8:85:
40:d2:2b:40:a4:32:75:48:57:e7:97:13:c9:b6:26:8a:37:e4:
b2:1a:05:69:8e:88:a9:66:c6:74:cc:8a:a8:30:3f:43:6a:fd:
b3:84:3a:91:6b:86:23:66:e3:78:b6:a9:e3:25:74:7a:88:18:
a5:41:06:29:01:48:10:22:8b:39:73:80:f9:36:87:39:bb:4a:
b7:b7:10:33:e6:41:25:e5:25:18:02:ab:59:9c:b0:7a:31:08:
01:5e:97:7e:34:7b:dd:69:2e:5a:0c:6a:8a:e7:1a:5d:8f:f9:
63:8c:4c:e7:8d:6b:9d:69:97:ec:c4:b3:33:c0:83:48:47:e3:
e2:e2:a3:2a:80:75:61:56:1a:2f:09:67:bd:83:a4:79:cf:24:
b2:e8:23:90:e9:05:f9:d0:e0:89:81:53:4d:97:da:aa:1d:5b:
be:d8:ab:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:06 2025 by rpki-client