Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
File: 1vvg67NTA0y7YyjrPo4_zTYLL7s.mft (raw, json)
Hash identifier: AzRxHbjOPgY981oGTyF6u2gMZuSwPWhEEi19pAmL8FI=
Subject key identifier: B9:4C:AF:84:23:EC:EA:56:9A:6A:09:80:D3:62:7E:6A:48:E6:A5:50
Authority key identifier: D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
Certificate issuer: /CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Certificate serial: 0199FBEC021B01944085FD18EBACA91B1A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:52 +0000
Manifest this update: Sun 19 Oct 2025 10:02:52 +0000
Manifest next update: Mon 20 Oct 2025 10:02:52 +0000
Files and hashes: 1: 1vvg67NTA0y7YyjrPo4_zTYLL7s.crl (hash: JsulMi5s9AQQRiWc195dbHPeHvYtJvJ6ou4U8KoLD80=)
2: ruk9oKCw5z4NLnJ9yGyr_UCfoEY.roa (hash: 3E2wFt0mctq9eZeC5gr+9q8G9wNZ7Xmn3ppu8VejkKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:02:1b:01:94:40:85:fd:18:eb:ac:a9:1b:1a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Validity
Not Before: Oct 19 10:02:52 2025 GMT
Not After : Oct 20 10:02:52 2025 GMT
Subject: CN=b94caf8423ecea569a6a0980d3627e6a48e6a550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5d:e3:16:9b:88:ff:7e:ee:07:6e:be:9c:f7:
17:7c:50:57:bc:a5:fa:48:0d:ee:69:ea:e5:37:2a:
5a:57:74:f2:29:20:f0:f5:91:5f:e6:4b:40:8f:e2:
41:50:e7:85:33:02:22:03:d0:e3:db:2f:1f:35:71:
82:57:32:dd:a3:7c:38:7f:ab:aa:d3:88:23:94:e4:
82:a5:13:3c:ff:72:2e:6c:b9:d5:03:a4:72:e7:5c:
1d:56:6f:b1:e9:32:2f:ee:3b:39:f4:a6:c0:85:46:
a2:18:8e:c0:7a:86:44:eb:7b:f2:eb:d1:d7:ec:ef:
9d:91:22:1c:0f:0a:e1:b8:71:09:e2:3b:c3:b6:26:
8e:22:c2:d5:7c:21:c7:60:49:97:e3:5a:17:41:50:
2e:0a:51:a7:30:11:76:b1:4c:70:2f:c1:10:18:a0:
a0:68:a2:00:3b:a0:89:06:b9:ac:a4:99:97:e5:ea:
ba:e8:fc:0d:8d:e2:c2:a5:4f:fa:2e:65:28:56:27:
fe:ad:43:b1:ee:9d:31:c5:76:0a:d4:84:05:f5:42:
27:de:57:64:8b:ec:fd:ac:53:f9:ee:49:5b:b6:7c:
53:05:21:41:91:95:70:86:ec:15:13:f8:83:54:e9:
d7:b1:9f:6f:1f:b4:31:ce:af:39:b1:b7:82:9c:a7:
73:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4C:AF:84:23:EC:EA:56:9A:6A:09:80:D3:62:7E:6A:48:E6:A5:50
X509v3 Authority Key Identifier:
keyid:D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:51:7f:5f:4c:ab:65:8a:f3:9c:15:e4:e2:2e:36:1e:33:1e:
b3:03:a9:bb:d9:4a:49:c2:13:1b:84:82:e3:4c:f1:79:19:75:
ac:84:73:85:8d:30:b2:3e:82:ab:24:d0:d3:ee:fd:8b:d3:0c:
7c:8c:02:12:2b:8e:73:21:4b:b8:27:8f:9c:ef:f1:72:a2:07:
37:04:69:aa:65:48:df:c8:8a:4e:e6:29:b3:bb:1f:a6:9b:59:
b8:1d:c0:3c:86:a3:c5:32:0f:3c:e7:99:df:aa:fd:c1:37:05:
bf:31:75:c5:00:ae:5e:b5:b5:72:c3:14:28:d4:11:89:6d:81:
23:39:73:4b:02:8d:4a:1b:a0:0b:0c:6b:f8:ce:3c:96:18:ae:
79:78:12:89:8b:38:30:76:93:18:f7:75:81:da:65:d4:76:df:
59:5b:8a:e0:ff:17:b9:9c:d9:42:34:e3:6b:ec:e6:37:58:cc:
60:42:4c:3b:06:71:51:75:f8:a7:80:46:49:2a:60:bf:48:52:
ec:9a:76:13:fe:28:b4:11:23:a2:e3:71:cc:3c:4f:5c:a2:8b:
4e:68:f5:4f:71:b1:70:dc:7e:8a:af:81:02:e6:9c:d1:8e:75:
82:bf:31:15:6f:76:33:12:7b:1b:36:1e:de:25:91:40:4a:17:
bf:3b:75:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:14 2025 by rpki-client