Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
File: vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft (raw, json)
Hash identifier: nqTvGzQn+oRrh4LDoYEavdX0QHvdGzXJT/ODhphjdbw=
Subject key identifier: 15:0B:71:EF:FD:85:A3:66:06:DF:5B:87:DD:69:52:F1:A3:61:44:3D
Authority key identifier: BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32
Certificate issuer: /CN=bc888f053099fac3a55986447cb3b1038495f332
Certificate serial: 0199FAD8276B660228F39777F0A9B7193C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
Manifest number: 0ADB
Signing time: Sun 19 Oct 2025 05:01:33 +0000
Manifest this update: Sun 19 Oct 2025 05:01:33 +0000
Manifest next update: Mon 20 Oct 2025 05:01:33 +0000
Files and hashes: 1: aAkRe7Jm1-dx0uQ95bjB-xCoSJc.roa (hash: c881F7DVYDXIoCHO9T/789+rI+yYESWFHrY/FcifwTE=)
2: vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl (hash: ZRgpt1r7fHnEumi+rtdy5LuOKxKVmBggToLetC5jQeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:27:6b:66:02:28:f3:97:77:f0:a9:b7:19:3c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc888f053099fac3a55986447cb3b1038495f332
Validity
Not Before: Oct 19 05:01:33 2025 GMT
Not After : Oct 20 05:01:33 2025 GMT
Subject: CN=150b71effd85a36606df5b87dd6952f1a361443d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:1b:7d:e5:52:85:ba:86:55:ac:db:d3:f9:
89:25:d4:b2:9a:72:e2:d2:c8:80:df:24:42:2f:c8:
f8:6b:29:58:40:f5:62:09:e5:d4:2a:e7:6a:7f:34:
e5:82:12:33:fe:b4:be:0e:32:39:fe:7e:3f:95:37:
21:bc:a8:c2:86:d6:1e:be:91:30:8b:9a:99:27:2d:
85:b4:e2:73:d5:d8:43:36:52:1a:5b:de:20:3c:39:
b1:64:3f:d0:f2:60:7c:84:2f:f4:7b:be:0f:30:02:
18:93:80:11:2b:51:fa:68:dd:69:53:65:25:42:60:
8a:9a:10:8e:5f:d0:be:6a:ae:d4:8d:29:93:88:e4:
ae:ef:2e:46:dc:7e:9a:89:46:7b:e6:8c:ee:34:c0:
7b:cb:89:ce:70:1b:cd:91:3b:0c:7f:b7:ce:46:97:
08:e6:9f:a9:20:1b:f7:f7:e1:f7:d4:7d:8a:91:3f:
44:71:46:c8:f7:f5:ec:12:cb:37:44:52:48:88:c4:
36:9f:9c:9e:4f:6b:8a:10:e2:4c:c4:ac:6d:e4:75:
51:ef:da:9e:73:fb:18:96:00:12:d4:33:e1:1d:d3:
cd:78:2f:3f:9d:ba:ff:a4:ca:de:49:e8:97:ea:58:
eb:6a:e2:e4:c8:11:ad:7b:6b:5f:c7:26:9e:18:ce:
5b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0B:71:EF:FD:85:A3:66:06:DF:5B:87:DD:69:52:F1:A3:61:44:3D
X509v3 Authority Key Identifier:
keyid:BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ee:78:cd:f3:72:dd:b0:d6:64:ef:1c:1d:b5:5c:b5:00:db:
bd:dd:35:d3:12:0c:3f:53:34:12:9f:9f:c8:43:c9:29:0a:83:
a1:f9:d5:dd:2f:48:26:bd:71:5c:b5:d2:df:e1:e2:0d:64:16:
94:d5:82:19:87:d2:69:79:7c:98:eb:e8:57:e1:c1:9a:43:aa:
88:fc:eb:ca:05:3e:90:c4:dd:83:a5:54:5e:8a:db:01:36:e1:
20:a9:07:d1:6d:55:c3:d4:65:86:78:f7:31:54:72:37:4b:02:
94:2d:d9:41:3f:43:ab:0c:1d:1d:96:cf:d9:17:51:73:32:b5:
4e:62:d9:e2:7f:f5:a5:e8:b8:aa:06:15:ef:a4:8b:33:87:0c:
85:b1:89:40:de:2e:f2:9f:03:a6:3f:e6:e0:0d:ac:6d:3c:9d:
1d:e5:07:57:24:ab:01:26:48:2f:47:03:ad:ac:51:fd:34:55:
90:97:ac:b1:28:4d:b6:8d:4e:fe:1b:28:b3:0f:a4:f0:38:b2:
d2:cf:9c:22:01:a3:bd:6c:36:85:fd:16:50:af:a3:c2:e2:d9:
ec:7d:a5:f4:43:aa:97:49:d4:90:07:67:ec:d9:37:1d:ca:0d:
26:c4:c8:af:00:32:47:7c:91:b1:01:20:e7:ae:0a:94:0e:2d:
15:b1:6e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:47 2025 by rpki-client