Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
File: vZctRCdupBAu9q7TDyrljpmz51E.mft (raw, json)
Hash identifier: plzsuT9k95CpD0UnaxEQS7z4CYIk5AG2ffYhcNYvpy8=
Subject key identifier: 03:1E:89:50:DD:0D:5A:9A:06:7F:0B:86:A9:D2:38:D9:20:25:30:31
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Certificate issuer: /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial: 0199FB0ECC9F944BA59DB884DD9F28586C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 06:01:15 +0000
Manifest this update: Sun 19 Oct 2025 06:01:15 +0000
Manifest next update: Mon 20 Oct 2025 06:01:15 +0000
Files and hashes: 1: vZctRCdupBAu9q7TDyrljpmz51E.crl (hash: RNIqmpszk8/k2SspKjTbI86j2LjJ40QcYRW8dD8A/eM=)
2: znul8D-ksNRhN2Cclb1d9oAN3m4.roa (hash: e1Z/F5VmaFQnbIQzB91uNx60SZ0/+TW0LayKFelguZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:cc:9f:94:4b:a5:9d:b8:84:dd:9f:28:58:6c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Validity
Not Before: Oct 19 06:01:15 2025 GMT
Not After : Oct 20 06:01:15 2025 GMT
Subject: CN=031e8950dd0d5a9a067f0b86a9d238d920253031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ff:04:a1:e2:dc:c5:a6:fb:76:86:64:53:45:
29:3d:62:2b:0a:41:68:a1:02:81:ee:bc:c9:5d:78:
b9:fe:83:76:b4:a5:6e:bf:39:ca:d5:44:44:ab:85:
8e:97:15:9e:6c:0b:4f:d2:b7:db:f8:29:5e:32:bd:
c4:66:11:ba:76:02:4f:c8:8e:61:8e:a2:4c:3f:55:
11:db:20:4b:d0:cd:09:ef:e0:0e:f1:f3:36:54:7e:
48:da:17:83:7c:96:7f:85:09:6e:e5:25:63:d3:e7:
a6:5d:53:9a:74:04:56:13:45:dd:be:57:d6:07:5d:
d5:c6:e9:c9:c0:eb:ce:b4:b5:77:91:25:4b:02:59:
fc:76:cb:06:1b:52:bf:e5:ab:05:db:da:22:4a:68:
9e:41:38:1c:26:fe:87:0d:32:71:11:b3:73:85:93:
76:8a:d3:e1:57:5c:38:fb:c3:26:89:01:65:01:fe:
a7:b7:49:40:77:01:36:78:05:24:6d:e0:0a:a4:20:
2e:5c:b3:e4:39:e7:68:8f:ac:e4:5f:33:4f:bc:c2:
aa:2f:18:24:fc:0c:de:51:ec:29:7e:ab:b8:a5:5e:
2b:31:55:87:82:2a:ee:77:89:ce:ec:e9:0f:7c:23:
d2:df:a6:db:7e:63:99:1e:fc:62:09:db:af:cf:bd:
df:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1E:89:50:DD:0D:5A:9A:06:7F:0B:86:A9:D2:38:D9:20:25:30:31
X509v3 Authority Key Identifier:
keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c8:c1:e9:25:b3:91:d8:c2:3f:4e:62:fa:a4:8e:c9:e5:0c:
30:d2:4e:b2:cf:42:50:f2:e6:1e:5f:02:9a:c3:a8:e3:af:9a:
1c:25:ab:1f:0e:ea:a8:2a:1d:f2:e1:52:4e:b6:91:c0:75:d4:
41:50:c1:93:70:d6:34:25:8d:96:99:f7:d7:67:6a:65:76:00:
ad:b1:9e:48:e1:1f:9d:1a:64:e7:2a:77:36:f2:e2:ff:e9:2a:
c1:b3:8c:6f:1e:45:39:b3:1d:4c:d3:64:d8:47:6c:e3:b0:84:
ec:07:cd:6d:35:44:28:b8:88:53:db:ba:1f:40:7b:cb:82:40:
85:ab:82:e1:34:df:5a:1f:22:58:cf:81:c6:2b:5e:13:be:5e:
9a:68:ea:0c:ad:d9:07:ce:5b:ab:3e:b0:74:42:55:f2:df:b1:
2f:6b:a7:ec:91:f2:3b:61:21:cb:1f:89:50:7d:97:ba:de:9b:
ec:46:65:54:c1:09:17:40:6c:68:bf:e0:fc:19:56:36:f5:13:
d8:28:74:3b:d9:b2:31:f1:ed:f9:1d:f3:40:2f:b7:e9:09:98:
e7:d6:2e:a1:33:24:9f:6f:54:aa:0c:4a:65:3f:69:3a:fe:59:
29:4d:79:51:7b:85:c7:01:12:b6:ea:6f:1c:0f:ec:8e:ef:fc:
1f:60:4f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:42 2025 by rpki-client