Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json)
Hash identifier: BgCNK3M/dK947Bi2lpglmjjMoG74EV6ZZyZE2yiDVPk=
Subject key identifier: C9:60:8A:51:EC:82:FF:37:4A:F4:1E:93:26:A4:6C:B2:27:B7:94:42
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 0199FD346D53C66740D67A44E1281DFE9A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 16:01:35 +0000
Manifest this update: Sun 19 Oct 2025 16:01:35 +0000
Manifest next update: Mon 20 Oct 2025 16:01:35 +0000
Files and hashes: 1: FG-qCrDb70MUjmpPeG_ABqm2g4I.roa (hash: hYgrw8pe3ohnrPXEYOqOtmTKKEz+HL/P8NWGWnKRQYA=)
2: hsH2HQBoiRDw665UcWSV1lTXYOg.roa (hash: 3M/n4+ffcKMFrGFddlkXam66igSrpB60cTzmDDLi+7s=)
3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: iQ+7bLOHcmBog2C2+ZCNJKLWYwjBxtRfa6jaNBK5YxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:6d:53:c6:67:40:d6:7a:44:e1:28:1d:fe:9a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: Oct 19 16:01:35 2025 GMT
Not After : Oct 20 16:01:35 2025 GMT
Subject: CN=c9608a51ec82ff374af41e9326a46cb227b79442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:86:10:28:23:7d:02:04:1f:d3:1d:79:29:
a3:cc:9c:c6:13:a0:29:5d:bc:34:cf:ec:bd:5d:a5:
0f:80:52:95:f1:ae:dc:83:0a:e3:67:74:56:31:d4:
be:f8:a8:ee:9a:0b:33:f4:74:00:5c:d1:68:7e:6a:
ee:83:29:cd:f8:8b:97:93:18:42:e7:fb:ae:84:a1:
34:35:94:bf:ac:33:80:e6:09:2f:8a:2c:bd:ca:d9:
b3:17:ee:69:82:7f:79:7b:cf:45:16:44:ea:1c:e6:
6a:96:0c:55:4a:e2:25:9b:3f:07:5a:b9:e8:56:2b:
4e:f7:f2:2f:81:53:f8:a5:6d:05:c5:a4:bf:03:6d:
db:24:ed:4c:8b:73:4f:6b:34:7e:f7:8e:c6:fa:05:
91:9f:4c:7b:e3:66:5e:a9:df:74:88:f3:6d:a4:fd:
27:99:da:9c:ed:04:ed:33:1a:32:6a:24:22:5e:b4:
d3:6f:47:be:93:9f:af:9b:32:54:74:a7:d4:5b:2d:
6c:16:bc:bf:4e:38:cc:46:2d:13:75:ec:68:79:58:
99:2f:6e:26:cb:dc:f0:35:57:89:b3:bd:80:90:37:
b6:8a:32:32:98:be:d3:e7:a7:6b:eb:26:c8:4a:44:
31:e6:3f:17:15:ed:7e:f4:a5:a0:b7:9c:0d:d2:0a:
49:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:60:8A:51:EC:82:FF:37:4A:F4:1E:93:26:A4:6C:B2:27:B7:94:42
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:07:25:2c:47:6c:40:ab:9c:16:bb:e6:94:1f:c9:90:c1:44:
9f:b3:52:83:e6:c9:6c:ad:d2:19:fa:61:84:61:0c:2a:37:f8:
b6:bf:7e:99:3b:4f:69:58:c5:15:2c:be:55:9a:ab:5b:b8:75:
b1:21:3c:fd:b4:86:ca:ba:a3:66:c5:24:f3:b7:51:0e:f4:7a:
53:42:17:41:12:58:37:8f:b9:00:66:47:32:86:60:d0:af:cc:
1e:a1:6b:fe:e9:6c:2b:02:9c:3d:b1:89:ee:42:01:25:01:84:
ea:fb:c6:eb:d4:59:05:ab:65:be:f8:c1:98:9b:ea:14:5b:02:
b8:d0:63:3e:20:9a:60:5b:d4:1c:88:4a:7d:d1:e6:34:2d:7d:
d1:49:fb:a5:da:40:9d:3a:b7:ad:71:a6:ed:95:18:97:9b:df:
e7:62:ee:de:e0:61:75:87:90:1a:be:f7:f9:f4:88:90:b6:0d:
f4:b1:29:ad:65:f6:c3:60:1f:77:7d:e9:19:e6:6e:b2:be:84:
93:e3:9f:1d:23:80:70:5f:44:d7:e6:86:a2:ad:f5:86:4b:15:
9a:08:93:db:5b:73:2a:d9:7f:80:df:88:ba:58:9a:b5:36:b4:
10:22:87:d7:29:68:da:b2:1a:3b:de:7f:99:fc:36:a6:de:80:
fb:67:6e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:22:53 2025 by rpki-client