Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
File: vG0u13lNMhfPqv4crVP3Vbgs46k.mft (raw, json)
Hash identifier: Hm+tZtNK8PwtI+Pn7TTEamXmD/kwJSMKt8Sul+Lz4Yc=
Subject key identifier: 1C:C7:DA:3E:ED:70:4E:72:1A:5F:4E:2A:DF:2C:DF:F8:48:03:9E:68
Authority key identifier: BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
Certificate issuer: /CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Certificate serial: 0199FD3422DCC8B1D7107F47C45BBA0E86BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 16:01:16 +0000
Manifest this update: Sun 19 Oct 2025 16:01:16 +0000
Manifest next update: Mon 20 Oct 2025 16:01:16 +0000
Files and hashes: 1: Rfx73to5lynfa5P988aJIcpZHW0.roa (hash: fb46D6K33gqqGx/M4AgtMP1UJSgJ24dkYkKRuFAfTRM=)
2: vG0u13lNMhfPqv4crVP3Vbgs46k.crl (hash: SiHMBDodC9GqA/PhekFEOypEifxCuTfaBg0XHrYhs7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:22:dc:c8:b1:d7:10:7f:47:c4:5b:ba:0e:86:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Validity
Not Before: Oct 19 16:01:16 2025 GMT
Not After : Oct 20 16:01:16 2025 GMT
Subject: CN=1cc7da3eed704e721a5f4e2adf2cdff848039e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:2a:40:10:05:33:f4:d2:e7:2d:f5:f8:c7:
f1:de:7f:6c:8a:a3:81:67:38:ba:65:01:4d:84:4c:
d7:5e:c4:ee:a2:5b:fc:d4:c4:71:16:a1:53:d9:21:
cd:ce:43:92:78:8a:30:f1:c4:cd:a8:56:e8:f7:3a:
02:02:c5:36:e8:e7:67:06:6c:0f:35:e9:4e:2e:11:
75:bf:5d:90:5f:41:5d:1e:16:6d:db:f3:49:c6:57:
e9:75:77:af:d1:46:21:95:52:c1:cd:68:98:8b:01:
bb:07:39:a4:05:b0:ed:bd:df:f3:da:e1:84:a6:95:
94:45:ea:83:ea:c8:88:3a:c6:05:2b:11:51:90:14:
de:58:22:45:53:24:28:83:7a:a4:47:b1:8f:df:8e:
1b:2b:be:c1:b2:ec:10:14:2b:b0:0d:e7:2c:96:e9:
23:7a:44:5f:68:eb:30:12:d8:a6:5b:19:3d:4e:9d:
87:08:fc:91:19:8f:56:ad:79:bf:48:8c:cb:48:09:
bf:6c:2b:5b:51:f2:1e:2b:0e:47:70:65:2f:a0:97:
49:18:4f:49:c8:63:55:15:3c:62:12:f1:9a:d7:b2:
98:e9:2c:5a:7e:a8:77:93:6a:2b:bb:16:37:e6:cd:
17:eb:95:9a:4d:81:2a:ce:02:87:a4:0a:d2:52:3c:
ad:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C7:DA:3E:ED:70:4E:72:1A:5F:4E:2A:DF:2C:DF:F8:48:03:9E:68
X509v3 Authority Key Identifier:
keyid:BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:63:a5:d6:22:0c:80:f7:98:18:37:97:c5:f7:91:e6:1b:84:
fd:a6:1b:ba:1b:13:a3:c0:75:d8:f6:db:23:a3:7a:41:26:54:
0f:19:82:f8:4e:2d:b3:01:83:67:d2:46:a4:92:92:f1:55:f8:
fa:90:70:c2:fd:4a:2c:db:58:c7:ed:e7:4b:72:44:6d:3d:f1:
cd:0c:bf:42:3e:10:8c:ad:53:f8:51:4b:77:d3:90:02:9f:c8:
1b:ae:07:9b:be:4f:21:a2:fd:f1:29:e3:0f:af:d7:75:19:8e:
e6:8e:d6:ac:80:12:1f:7e:ac:59:1e:88:f7:7d:b3:9b:ad:25:
92:3a:97:c4:84:28:42:d8:eb:97:fa:6a:35:37:f7:d0:e7:c0:
eb:c0:bc:1f:9e:fe:0e:f9:6e:b9:82:22:f6:56:b0:9b:bc:5c:
26:75:cb:0a:62:ae:03:fe:6f:31:9e:54:99:81:e7:87:ba:c9:
7b:66:c7:4a:99:3a:a3:cc:8f:98:7d:b7:ed:63:1a:0f:41:bf:
de:f7:10:48:a4:5f:34:10:40:4b:62:e5:4a:2e:8c:0a:11:83:
0a:ff:5f:3a:06:2e:1a:d5:bb:45:82:1a:77:d2:9a:5d:42:b6:
d4:4f:c9:40:05:af:c3:5e:94:4b:1f:99:9b:3b:a2:fd:49:24:
ee:b3:0a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:45 2025 by rpki-client