Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
File: vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft (raw, json)
Hash identifier: Pg9GXQZAl344zsA7idAnNUJtDJgyfnX5mI7qPeKyX/8=
Subject key identifier: CC:ED:25:51:4C:E3:FC:3F:E9:07:90:F5:B9:E2:D0:D1:EC:7C:1C:68
Authority key identifier: BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
Certificate issuer: /CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Certificate serial: 0199FEEBDF4E458F0CEEECEB6BF673ADE765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
Manifest number: 14F1
Signing time: Mon 20 Oct 2025 00:01:34 +0000
Manifest this update: Mon 20 Oct 2025 00:01:34 +0000
Manifest next update: Tue 21 Oct 2025 00:01:34 +0000
Files and hashes: 1: Sf4JDKtmxmTCB0tTVfdGGPNzKJE.roa (hash: TM/ueYP3efRi0gGmWlRzw9T+QccRhYDTBK2qLm6mLxw=)
2: j55rwmP0M5U3k7x3VXFxJgSVySg.roa (hash: 5VX+pyc2hFJtXaEa0bGAy71RA09akkBJFD4zo26BAY8=)
3: vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl (hash: Z7WOre+Pl4mqBLmnai4kTetIuPdbvq9lWmUEFgeDwJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:df:4e:45:8f:0c:ee:ec:eb:6b:f6:73:ad:e7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Validity
Not Before: Oct 20 00:01:34 2025 GMT
Not After : Oct 21 00:01:34 2025 GMT
Subject: CN=cced25514ce3fc3fe90790f5b9e2d0d1ec7c1c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:fe:1e:21:d0:a9:cc:bb:88:fe:8d:62:05:
0f:3a:69:7c:1a:62:17:6e:51:df:f0:15:59:2c:ac:
ef:84:09:e9:ae:f6:00:d7:45:35:9c:09:b2:c7:29:
af:0a:51:69:3d:d9:9c:2f:8b:53:69:85:07:75:88:
05:29:e0:be:11:a8:3b:47:d1:6f:05:28:c8:4b:09:
28:10:ce:72:f7:44:56:0e:d4:79:64:10:36:cc:ec:
4d:8c:38:42:33:fa:07:bd:60:27:43:14:d4:51:3b:
60:47:88:20:a7:80:f3:93:1a:63:5d:26:11:b6:e7:
ce:a6:e8:c5:98:98:29:14:29:02:b8:c8:56:5e:aa:
61:e0:15:55:82:5c:89:10:a4:fd:b8:b7:17:ff:e9:
41:55:79:a0:cd:6d:63:3b:71:27:8b:6a:94:96:ff:
c1:be:1f:ad:47:bd:00:07:2b:4b:91:20:38:b4:b8:
6c:6e:b1:10:d9:2e:93:d2:90:49:1c:68:28:78:12:
a3:e0:a4:c7:b9:8a:89:4f:60:81:1e:92:41:ef:69:
f2:f0:e2:b7:be:d3:47:55:01:ae:7e:35:d9:49:d1:
13:b3:ce:ae:5c:a7:1e:ab:2a:96:39:93:60:8f:56:
f0:28:53:a9:8f:f8:67:05:91:3b:55:52:b9:6f:57:
e4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:ED:25:51:4C:E3:FC:3F:E9:07:90:F5:B9:E2:D0:D1:EC:7C:1C:68
X509v3 Authority Key Identifier:
keyid:BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:23:0c:48:ea:b4:ef:b8:05:c3:37:50:e2:ca:5f:c0:08:14:
ec:c4:f5:df:ac:3c:19:a9:94:e0:6e:a6:7e:b7:ee:91:62:f5:
b3:d4:bb:09:cd:b1:ec:8d:c5:b9:7d:d6:f0:24:07:9d:1c:90:
af:55:f1:d6:58:f5:ba:77:ad:74:d8:4c:81:9d:0b:a5:87:1b:
41:37:64:cc:79:29:a3:86:3c:92:7a:63:d4:95:b5:21:d6:5c:
2c:c2:22:ba:94:33:e7:36:d5:eb:f3:7f:32:08:36:c1:b2:8e:
e3:f6:10:cb:73:4d:69:cc:a8:c6:65:58:21:27:85:4a:e1:e7:
10:37:05:0d:a0:1a:83:49:56:32:9f:4d:2f:ba:2a:0d:7a:a0:
a6:eb:71:b3:93:df:97:58:5c:01:9d:fc:69:77:7b:11:11:ad:
9f:47:3d:5b:59:5c:a0:ee:8c:5d:d1:f8:75:7d:38:fe:96:ed:
fa:29:9e:7e:e0:83:6f:06:88:01:02:b8:18:f2:56:47:e3:f7:
89:81:e0:98:1f:ae:08:8a:5d:21:a2:63:81:d7:49:ae:e2:43:
c0:8e:6c:d2:24:bc:fa:f1:1f:fc:9d:07:d2:86:ab:ae:b4:1f:
34:fc:c8:92:55:31:7e:a1:cc:49:5d:c1:ae:23:3b:6d:91:3f:
d2:0d:3d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:23:33 2025 by rpki-client