Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.mft
File: vflgsO5rxdD2oMZKafL4Yln9zVg.mft (raw, json)
Hash identifier: kJoFpPJuIBH8R57RembBiSrTS+8QDsnMXWt7sozlci8=
Subject key identifier: 61:59:EB:9D:4F:B4:EB:C7:BA:9E:47:C2:F2:9F:73:7A:2F:27:5F:FB
Authority key identifier: BD:F9:60:B0:EE:6B:C5:D0:F6:A0:C6:4A:69:F2:F8:62:59:FD:CD:58
Certificate issuer: /CN=bdf960b0ee6bc5d0f6a0c64a69f2f86259fdcd58
Certificate serial: 0199FD6B347DF95C12DBBA272B0F269FB712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vflgsO5rxdD2oMZKafL4Yln9zVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.mft
Manifest number: 15BB
Signing time: Sun 19 Oct 2025 17:01:25 +0000
Manifest this update: Sun 19 Oct 2025 17:01:25 +0000
Manifest next update: Mon 20 Oct 2025 17:01:25 +0000
Files and hashes: 1: rEdLOhgJ5xMWvLwmv0wizm-cOW0.roa (hash: 5KEvRv7KqMLhpYGvFA0tU5bp6PFE1qlP3ELvibmeSX4=)
2: vflgsO5rxdD2oMZKafL4Yln9zVg.crl (hash: ysZisqbEmCY7EOXYMqzSfWkj61yDUUHE31Rg9X53lQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vflgsO5rxdD2oMZKafL4Yln9zVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:34:7d:f9:5c:12:db:ba:27:2b:0f:26:9f:b7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf960b0ee6bc5d0f6a0c64a69f2f86259fdcd58
Validity
Not Before: Oct 19 17:01:25 2025 GMT
Not After : Oct 20 17:01:25 2025 GMT
Subject: CN=6159eb9d4fb4ebc7ba9e47c2f29f737a2f275ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:8b:df:73:7a:e1:78:c0:e5:d8:3c:6e:40:
60:51:07:74:d4:45:8c:3c:74:41:c5:17:92:f4:7a:
df:fe:60:59:83:44:a5:dd:db:13:53:0b:f4:98:ff:
45:95:8f:da:bd:4f:80:19:42:8e:76:47:27:10:6d:
30:80:25:6b:a3:50:e3:96:2d:2c:33:99:84:a4:12:
28:56:e5:04:ac:3f:90:f8:4b:a4:e9:69:07:9c:b3:
66:cf:83:6a:7c:18:bd:04:f0:c4:c9:ba:c9:1e:9a:
05:ef:f0:c5:60:46:fb:e0:45:37:ee:b9:6d:83:ae:
9d:e8:09:62:e7:89:9e:e7:15:f0:d5:57:23:d2:46:
c0:a6:95:f6:24:2c:fe:2f:a8:ce:ae:0b:db:44:85:
05:db:f6:f0:ec:05:36:24:89:39:16:24:d1:28:6d:
be:af:da:ca:79:e6:1e:6f:17:4f:c0:34:df:ab:e8:
84:56:9d:59:67:d0:06:ed:33:09:18:e3:96:74:92:
80:cc:88:82:bb:d7:73:96:ec:39:b4:32:f0:5d:56:
b5:9c:ad:ba:34:22:fc:f7:f3:5f:9b:2f:7d:82:c1:
b6:52:d1:03:46:e0:d4:37:b6:09:24:79:e2:5e:75:
55:ba:38:90:11:45:ab:ed:b7:24:e8:30:43:de:02:
68:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:59:EB:9D:4F:B4:EB:C7:BA:9E:47:C2:F2:9F:73:7A:2F:27:5F:FB
X509v3 Authority Key Identifier:
keyid:BD:F9:60:B0:EE:6B:C5:D0:F6:A0:C6:4A:69:F2:F8:62:59:FD:CD:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vflgsO5rxdD2oMZKafL4Yln9zVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2c:35:cb:f2:90:3b:4b:58:c9:ad:89:ff:16:40:dc:af:cb:
23:4b:fd:1f:5a:e5:32:70:d3:93:0e:f1:b8:76:7b:83:dc:3b:
93:de:df:e6:0d:65:5b:7b:a0:48:2e:7d:67:71:8b:f9:fc:f7:
71:cd:e5:41:ed:76:8e:0c:42:78:c7:14:99:b1:0a:dd:79:46:
bf:35:7d:cd:ac:7f:52:e9:8a:01:f2:2e:88:1a:ed:8b:1c:63:
90:c5:51:86:c1:6e:14:16:54:50:e1:29:af:34:8a:b1:cf:59:
f0:a9:97:ab:f7:13:60:33:7b:fb:93:f9:64:d9:12:00:9a:f1:
37:92:89:66:71:33:c3:f7:92:ab:ee:4d:28:ef:31:02:29:ce:
86:9f:ba:ac:4b:b1:23:c7:85:08:80:75:04:4c:22:1e:9e:7a:
59:59:07:07:68:9c:5a:ae:2d:77:e7:7c:f5:dd:88:3c:50:81:
ce:53:1a:f9:da:17:b8:b3:41:b1:de:8b:02:aa:c1:3d:e4:97:
98:6f:94:fe:ad:b5:6e:05:3d:62:9d:a2:62:ae:b5:a6:1c:c1:
ed:e5:09:f0:12:ff:53:bf:f1:db:49:81:bd:f1:0e:98:7d:5c:
47:81:ff:c4:6d:97:cf:94:22:e9:f6:b4:c8:0c:da:9f:ad:72:
f3:3f:44:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:47 2025 by rpki-client