Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
File: vEZLqdJjhfVN9iVKwkiSbTcERbA.mft (raw, json)
Hash identifier: 6jOvOHSm/Ml1NB4H/QNwKEVm5XkzCWBaCb2WcvFmz3c=
Subject key identifier: 26:AA:A9:9A:BD:07:DE:DD:30:BA:A6:BF:F5:ED:A0:29:AC:B0:F9:2A
Authority key identifier: BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
Certificate issuer: /CN=bc464ba9d26385f54df6254ac248926d370445b0
Certificate serial: 0199FCFD2F840A13C124C26794918F01F3CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 15:01:15 +0000
Manifest this update: Sun 19 Oct 2025 15:01:15 +0000
Manifest next update: Mon 20 Oct 2025 15:01:15 +0000
Files and hashes: 1: gAF5yk6vmaOq2Uung0D_8Gub1gc.roa (hash: eVAKmeO8heHGdx9Kcy2Kx3p7IXGpACADu9i5ILdct+c=)
2: vEZLqdJjhfVN9iVKwkiSbTcERbA.crl (hash: MSfRMauM9N6USknUqITE9LYwX+kMz6eNCMEYfRcDAOU=)
3: zyyxpnYwsTYjNu4Wy5twrx2x4fk.roa (hash: NQRYx+K4EclccAZE0WPjuwlvX5dADgQnuUhPYSSnRgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:2f:84:0a:13:c1:24:c2:67:94:91:8f:01:f3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc464ba9d26385f54df6254ac248926d370445b0
Validity
Not Before: Oct 19 15:01:15 2025 GMT
Not After : Oct 20 15:01:15 2025 GMT
Subject: CN=26aaa99abd07dedd30baa6bff5eda029acb0f92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:30:b0:f5:f8:c8:7f:0e:4f:3b:5a:80:c3:
a5:a7:ec:39:da:1b:67:d3:de:45:4a:b8:f8:ea:5c:
77:21:be:84:df:1c:0f:a9:b6:0e:c5:51:cc:c3:b9:
2f:1d:09:2d:53:e4:4e:5e:d0:ad:e2:49:40:0e:e7:
6e:60:81:b5:77:84:d9:1c:c5:ab:bf:95:59:84:26:
f8:90:4b:6d:14:52:51:cf:d4:ae:57:50:2c:e0:be:
5d:a8:24:41:15:61:01:58:b1:63:0f:e6:c3:3a:e3:
56:83:fd:c5:cf:de:b9:e8:23:ac:20:e9:ff:1a:55:
7d:51:bf:ff:73:f1:3b:1a:cc:9c:e0:2e:7e:94:83:
91:1d:91:ab:a3:e1:fb:38:92:fb:b8:a5:8e:e1:58:
d4:2e:64:de:8a:dd:dd:8b:be:b0:77:40:dc:09:fc:
b6:6b:cc:49:36:28:37:e7:24:0c:1f:cc:0a:9d:68:
3a:92:c2:49:0d:07:79:84:0a:d8:cd:01:a8:d8:98:
2c:2f:52:3d:c6:dc:e0:7e:19:b8:34:d8:14:cb:ad:
2d:f2:48:95:41:af:51:44:e1:63:e9:dc:17:3f:23:
22:7a:b9:3f:af:57:51:9d:84:d3:92:f7:af:bc:2d:
ef:eb:2f:3f:ab:34:e1:41:c7:6d:66:17:e1:04:e2:
81:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AA:A9:9A:BD:07:DE:DD:30:BA:A6:BF:F5:ED:A0:29:AC:B0:F9:2A
X509v3 Authority Key Identifier:
keyid:BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:99:c1:76:47:d2:16:b2:5a:30:29:02:09:2e:aa:32:28:c9:
63:f5:4f:8e:3e:5a:9f:fa:34:95:6d:74:57:ef:bd:2c:e6:dc:
7e:3d:0e:78:fe:f4:53:c4:d6:e6:12:24:5e:f9:0d:0b:d6:a9:
ad:09:e8:c6:d1:9d:9b:f0:be:87:e8:71:6f:ef:15:b4:55:28:
6b:6d:e6:fc:5f:2c:b2:fa:51:3e:01:d0:8a:b7:fa:80:b3:d5:
31:00:a4:36:af:26:db:03:07:f3:9d:17:bb:60:5d:c7:cf:a0:
26:e9:61:c5:70:23:1f:37:22:59:92:2f:ed:96:f6:ba:0e:f6:
fc:6a:30:f8:c7:1e:a1:4f:79:1a:61:5b:a6:8c:0b:64:59:d9:
ea:25:3e:de:fc:83:f9:0c:6a:63:84:53:17:26:16:c6:2d:f1:
23:37:6e:0f:36:2f:3b:a0:e3:03:c3:5b:ed:bd:bd:dc:61:05:
20:44:75:f1:48:6a:8e:67:84:0e:51:46:24:40:73:bb:df:5f:
34:91:43:01:cd:6f:cc:c8:e4:6e:da:92:89:4c:db:fe:b6:fb:
08:58:eb:bf:bd:99:d9:90:ed:fb:13:ea:08:7c:c0:11:e2:8b:
a6:e2:95:c6:db:12:d4:38:ea:07:b9:07:13:3c:4a:d5:92:4f:
0c:cf:7e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:36 2025 by rpki-client