Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
File: vklD9SA9Q0YKE61OqdfVuVDGE80.mft (raw, json)
Hash identifier: MRjkLGGdOd20cgjIoywmdTeof++sSWtuSlg41Bo/g0A=
Subject key identifier: CC:7A:4A:4F:C7:51:32:14:3B:68:BF:C7:C1:96:18:F6:0A:7A:54:37
Authority key identifier: BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
Certificate issuer: /CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Certificate serial: 0199FD3444E8CAFCB80E05EF51287E8D9004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
Manifest number: 15CB
Signing time: Sun 19 Oct 2025 16:01:25 +0000
Manifest this update: Sun 19 Oct 2025 16:01:25 +0000
Manifest next update: Mon 20 Oct 2025 16:01:25 +0000
Files and hashes: 1: FvmWK8AMx-teHQ5tWkhhyLwCTdQ.roa (hash: coWDehO4MQ177+hdG6n28lrng5GzRH0clwFKkBo/jyg=)
2: P0eLHT9-M-aTFtL_3Zf0a5B6Ndg.roa (hash: uyQciIXo2hsIiWCjmOsDyTK0I4LR9Xab2ALuXJDMpzQ=)
3: s1Gqcb4cma0dzStLOOm8HvEO5jQ.roa (hash: NwYmvG8onNhwCfDmhQjAdYoUGMe+Y6N54avr4BG3ekE=)
4: vklD9SA9Q0YKE61OqdfVuVDGE80.crl (hash: I4MgEpIx/N+7w5udj2Xk7nAubJ/vOcWUinxErTHYciI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:44:e8:ca:fc:b8:0e:05:ef:51:28:7e:8d:90:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Validity
Not Before: Oct 19 16:01:25 2025 GMT
Not After : Oct 20 16:01:25 2025 GMT
Subject: CN=cc7a4a4fc75132143b68bfc7c19618f60a7a5437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:c8:91:9b:64:f7:ff:e5:06:47:fd:46:13:
24:60:94:a6:0e:48:30:2f:5f:3f:1b:50:ab:b6:29:
02:13:09:10:73:62:34:68:a4:6b:8f:53:04:04:cd:
cc:a7:3f:69:ad:d5:38:70:d0:a5:0d:a5:ae:84:a6:
c4:9a:7f:da:9d:cc:57:9a:9f:70:f4:19:64:ea:6a:
b6:b3:6e:3e:db:2f:05:34:8d:cf:c6:14:54:ef:36:
f0:82:aa:cc:6f:87:75:0e:1e:46:fc:5a:ed:1d:7c:
20:26:fd:0f:63:10:e7:9e:07:e6:4a:d8:9b:73:cf:
c2:9d:70:7d:ee:b7:67:6c:10:2c:87:97:80:3e:13:
db:18:13:47:bc:42:21:1c:34:7b:c4:f6:1f:ea:31:
6f:14:fc:e0:01:55:c0:5b:8c:bd:f8:f5:77:f9:f8:
1a:0e:0d:e4:d7:91:61:f0:fc:19:f0:d5:71:5d:61:
43:d2:a9:ca:7a:36:8a:38:1a:8e:07:d5:cd:75:31:
4c:30:5b:30:29:4d:63:01:1d:63:8a:a8:21:85:8a:
c5:bd:d2:6f:bd:f7:fc:4b:99:41:88:47:97:20:12:
7c:b0:1f:a3:9a:ee:29:a4:cd:49:7a:3b:66:78:d3:
e6:13:23:43:95:64:5b:86:f7:88:eb:12:2f:e9:f0:
23:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7A:4A:4F:C7:51:32:14:3B:68:BF:C7:C1:96:18:F6:0A:7A:54:37
X509v3 Authority Key Identifier:
keyid:BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ff:07:0b:36:84:3c:8d:87:53:d7:46:ec:55:18:68:23:8f:
ec:fc:15:da:0e:20:96:9d:d7:d4:54:10:3f:94:ce:ae:ba:b1:
b3:82:2a:23:c7:6d:b8:42:b3:93:5d:f3:cf:b5:5e:d4:48:9b:
c9:66:b8:41:0b:76:9f:cf:01:ba:d3:f0:af:8c:c1:e7:c2:7e:
f6:a1:85:78:2c:26:cb:ea:d2:47:49:5c:68:e0:24:7d:cf:43:
5d:d7:e9:af:ed:aa:04:f8:26:de:f6:93:53:6f:e6:e7:45:f8:
78:15:fb:eb:e7:09:97:cf:9e:6d:72:f9:fe:45:0b:0c:a8:47:
9a:36:5a:59:17:ad:f8:ef:b5:b7:7b:01:09:22:4f:35:67:21:
23:00:4d:91:b3:93:cd:b1:24:1d:ba:d3:91:1e:56:84:ea:3d:
0c:f7:d8:f8:70:e1:1e:7d:36:38:7d:95:f6:fc:1c:1a:10:97:
27:3a:06:d6:3c:b5:c6:19:bd:24:c3:70:7e:49:7d:36:31:b1:
2f:b4:7a:3a:51:7f:29:f1:84:ae:31:ca:a4:c8:10:1b:37:a8:
97:c8:96:cf:1b:4c:e6:30:42:6a:7d:9b:b6:60:e5:b7:eb:a4:
71:07:20:85:80:16:58:14:3b:60:48:0d:f2:fe:2e:c1:7d:83:
26:cf:1d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:12 2025 by rpki-client