Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
File: v-NULdY_7SUN5ctl9uykh-f0eEc.mft (raw, json)
Hash identifier: aVfDU3o7e5s6tq/45s/Ulrn+9Ksm5EKc+P2IM/TW5HM=
Subject key identifier: 65:98:CE:F6:9A:D1:E8:C0:C1:AF:5B:8E:CB:88:3D:F4:79:47:A9:93
Authority key identifier: BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
Certificate issuer: /CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Certificate serial: 0199FE7E02E2321A8F8B653D335F7409B7D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 22:01:35 +0000
Manifest this update: Sun 19 Oct 2025 22:01:35 +0000
Manifest next update: Mon 20 Oct 2025 22:01:35 +0000
Files and hashes: 1: 7_ycmg0-2tzp7CIdo8gplL9a278.roa (hash: XEoDI5Kr97fRLNGyRswSpfdzIPuYNKJgNWwTLw/sOpg=)
2: u42E-rWAmQgBLYpngQke_W6nUiE.roa (hash: skcKb420yoQzvUX8+CNyJl60MwIyb91kXhUGkdXKV9A=)
3: v-NULdY_7SUN5ctl9uykh-f0eEc.crl (hash: MUarA5B3M89XvQXT6O/Pesg4Fv2lth5cJ6d+NmgmMlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:02:e2:32:1a:8f:8b:65:3d:33:5f:74:09:b7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Validity
Not Before: Oct 19 22:01:35 2025 GMT
Not After : Oct 20 22:01:35 2025 GMT
Subject: CN=6598cef69ad1e8c0c1af5b8ecb883df47947a993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7a:87:49:ec:5f:e1:c8:e8:ab:c8:02:79:85:
1c:25:b9:40:a3:b0:56:06:16:20:c4:0a:70:29:2a:
37:a6:df:09:b4:b3:61:4b:e7:0b:c2:f5:54:f9:11:
6e:30:a8:a8:71:71:20:cd:e5:3d:74:f2:81:29:84:
eb:36:1f:2d:99:e5:4d:0e:c9:6c:19:91:4d:e7:ab:
f2:fb:cc:1a:d4:af:98:5c:13:22:d7:9e:27:8b:43:
9d:be:ff:16:b1:45:dc:86:5e:38:8f:4a:a2:10:ee:
87:59:ec:81:f1:d3:91:db:77:34:87:8a:b5:40:4b:
b2:91:54:d4:d2:72:6f:6f:8d:96:ce:41:85:61:48:
f4:2f:ef:d3:41:ee:db:89:ac:0f:ee:93:5c:9e:8c:
20:e2:56:b5:41:02:df:64:a5:13:a3:75:3b:da:af:
3e:f9:95:a2:80:0f:e2:8f:4a:57:ee:f0:aa:c6:19:
9d:59:74:da:6f:15:84:6f:2f:b6:9f:21:7a:3f:5c:
b3:52:6e:9e:bf:0f:f7:fc:af:24:88:64:1a:49:9e:
dc:a8:1b:b8:c6:f6:53:51:aa:90:45:b1:6d:69:ed:
1c:ed:cc:19:aa:25:d0:74:de:5c:ff:70:31:8c:84:
7c:c1:c4:5e:53:45:1c:87:73:63:3a:65:81:51:5e:
ae:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:98:CE:F6:9A:D1:E8:C0:C1:AF:5B:8E:CB:88:3D:F4:79:47:A9:93
X509v3 Authority Key Identifier:
keyid:BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9f:ff:ab:2d:e2:bd:94:e4:47:b8:cd:0b:0f:6a:01:14:de:
63:ca:b9:a4:14:fa:24:06:46:5d:97:47:03:73:ff:ba:c0:4d:
c5:ca:0d:bf:f0:d9:a3:26:6a:eb:cf:8f:4d:74:6b:3b:ef:27:
57:3d:9f:f7:a6:38:b1:19:33:bf:6a:41:09:a5:14:09:10:e8:
a6:a5:c7:77:1b:3e:73:eb:77:0d:f4:6d:09:31:73:9b:80:4e:
60:14:66:44:11:44:6b:e1:f3:76:88:08:5e:d5:2b:dd:40:82:
9b:85:d1:fb:cb:f3:f5:64:e4:ac:cd:20:23:f1:ba:e3:e0:3e:
72:ad:e3:dd:9e:de:a8:e5:80:67:73:52:86:e7:c5:68:28:20:
64:a9:bb:33:9e:06:7e:d4:13:34:df:b2:12:8e:3c:a7:0e:f5:
e9:43:4e:43:11:d8:db:91:6f:41:b0:05:48:a5:0a:6c:fc:ee:
2c:8f:ea:3a:b8:73:bb:67:71:58:4f:7f:05:01:c2:58:bb:75:
a3:76:78:3e:cc:9d:58:3a:ff:36:73:d0:33:ea:92:8e:98:4d:
89:c6:01:02:d1:d8:de:92:37:e5:49:f7:69:d7:c2:d4:f3:9e:
7d:2d:ca:33:6c:8d:94:4d:07:5f:ba:88:50:46:20:2c:06:47:
20:3a:92:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:12:00 2025 by rpki-client