Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft
File: vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft (raw, json)
Hash identifier: R4sUcEY0280WQ+pX+U3yiVA4nlGiL0WpjdXzXiRz1kc=
Subject key identifier: D2:2C:DE:0B:BD:27:08:CF:E3:7F:E2:9E:0E:05:F3:B0:7A:E9:58:A4
Authority key identifier: BC:77:CB:89:64:C4:ED:60:14:48:A4:36:86:85:BF:08:DC:B5:E1:F4
Certificate issuer: /CN=bc77cb8964c4ed601448a4368685bf08dcb5e1f4
Certificate serial: 0199FDD8D43FBAFB8B6BBD13B9AE6728C8DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:01:09 +0000
Manifest this update: Sun 19 Oct 2025 19:01:09 +0000
Manifest next update: Mon 20 Oct 2025 19:01:09 +0000
Files and hashes: 1: vHfLiWTE7WAUSKQ2hoW_CNy14fQ.crl (hash: KSKrT2PudH8Pazhb6Tf+aFZIjlDb3x1BxfzALIj9/os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d4:3f:ba:fb:8b:6b:bd:13:b9:ae:67:28:c8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc77cb8964c4ed601448a4368685bf08dcb5e1f4
Validity
Not Before: Oct 19 19:01:09 2025 GMT
Not After : Oct 20 19:01:09 2025 GMT
Subject: CN=d22cde0bbd2708cfe37fe29e0e05f3b07ae958a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:74:43:d7:13:85:ba:9f:a4:b5:b4:36:25:20:
cc:87:27:93:d8:db:3c:39:7c:0f:9d:3e:c6:13:da:
0b:69:52:09:a7:e2:86:60:39:2b:a7:6e:ae:d7:e8:
90:09:50:49:d3:4c:aa:22:65:2e:31:d5:47:e8:26:
5d:b7:59:58:8a:55:00:ca:5b:da:6f:2c:e5:79:fe:
91:08:ee:98:1c:60:26:bb:9b:99:14:ba:7a:e4:a6:
40:9f:27:83:b8:84:1e:ee:ec:82:67:1b:cb:7b:cb:
d9:0b:23:5e:62:c8:7e:23:43:3e:4f:b5:c2:2a:ec:
3e:dd:34:ad:ce:9d:52:f9:06:d7:fc:f8:84:6c:f0:
3d:b2:44:7a:a0:af:ec:c4:e8:ff:e2:a9:e4:47:a6:
a9:35:02:c1:67:44:5f:86:03:0a:b1:89:37:00:7d:
4c:da:2d:ba:2d:6c:54:0d:4d:9b:16:78:0b:c9:f1:
0c:cf:8d:da:fb:2d:d0:4b:be:ee:7e:48:51:79:e3:
9c:a8:59:33:67:03:f7:96:ed:2c:3b:ed:5b:73:c4:
e4:b9:c9:30:0c:63:18:5b:8a:11:49:80:b3:12:85:
45:78:f6:b6:90:0f:c0:41:56:d7:0b:8a:24:36:83:
d3:59:c5:b9:c0:77:97:5d:f1:28:aa:17:9f:bb:5a:
b8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2C:DE:0B:BD:27:08:CF:E3:7F:E2:9E:0E:05:F3:B0:7A:E9:58:A4
X509v3 Authority Key Identifier:
keyid:BC:77:CB:89:64:C4:ED:60:14:48:A4:36:86:85:BF:08:DC:B5:E1:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:64:ba:3b:72:84:91:f4:a6:40:34:c1:1c:65:cf:60:66:bc:
c3:ce:f6:9d:af:f2:2d:3f:80:0b:0d:c1:b7:81:b8:a0:21:6e:
79:7e:5f:c1:1d:79:d6:d2:e0:87:a5:82:02:11:f6:74:57:2b:
41:a8:2e:68:9e:74:78:ab:74:68:b8:2b:63:96:7e:7c:d0:1f:
60:24:88:92:e0:ff:3a:57:d8:43:a6:e6:26:5a:70:0a:1f:c3:
61:99:61:86:07:20:2a:e0:ce:4f:65:05:ec:5e:38:17:f3:c4:
cd:12:fc:6d:d9:3b:0c:f2:d0:43:bd:2b:af:fc:57:ab:ec:b3:
d3:3c:af:5a:69:1a:d8:1b:de:25:b6:6c:b9:d1:7f:4f:93:31:
a5:12:4a:32:38:dd:e2:02:d1:f7:ad:34:80:5e:7a:e4:f4:71:
9e:59:c4:ee:0e:48:24:56:7b:2a:5e:5b:d8:26:34:9f:7f:cf:
15:3a:7a:b0:0b:cb:90:a3:bb:45:f7:9b:66:64:e3:e7:cd:3f:
c3:52:3d:32:56:de:0f:49:d5:89:5c:b4:36:71:b3:9a:60:a7:
1c:ba:d8:e7:23:6b:8e:da:b2:a7:2f:51:bf:45:71:57:e9:47:
60:1b:ff:dc:22:d7:2e:60:89:97:bc:7d:7a:eb:bc:cd:23:86:
22:ed:a4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:52 2025 by rpki-client