Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
File: vvZlBYLADbslkc7cKYwM08WWirA.mft (raw, json)
Hash identifier: XmuYMVhQ9go/WCwuwOE/IlfM/c/uCEYGVksbA8z2y9I=
Subject key identifier: 21:21:CB:3C:0B:CF:A9:3B:E7:EA:E5:D4:E7:FB:54:3D:BE:65:15:27
Authority key identifier: BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0
Certificate issuer: /CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
Certificate serial: 0199FC21934D539EC6C6A0D906C3B3B67BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
Manifest number: 15B5
Signing time: Sun 19 Oct 2025 11:01:22 +0000
Manifest this update: Sun 19 Oct 2025 11:01:22 +0000
Manifest next update: Mon 20 Oct 2025 11:01:22 +0000
Files and hashes: 1: VJcY17IQh2BSqR-lhhdapfFR2Jg.roa (hash: 42V4cyYK1j/bnIgnYxXURiJulSqpvLBcVAwt2BGPORo=)
2: vvZlBYLADbslkc7cKYwM08WWirA.crl (hash: 1zl1SKrRwnIqWFE/tOkHo1EC0Xr3kH66TGRaLjfBB4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:93:4d:53:9e:c6:c6:a0:d9:06:c3:b3:b6:7b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
Validity
Not Before: Oct 19 11:01:22 2025 GMT
Not After : Oct 20 11:01:22 2025 GMT
Subject: CN=2121cb3c0bcfa93be7eae5d4e7fb543dbe651527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:4f:3a:26:67:6e:20:fb:64:88:43:71:f5:
64:69:28:cb:65:57:a5:03:69:32:2a:38:0e:73:87:
fc:b0:ee:a1:7a:89:72:56:5c:4b:d7:07:94:3c:de:
0e:e0:5f:57:27:88:3a:ad:9b:fc:fe:bf:54:ca:a0:
b8:46:13:88:9e:17:b6:d7:2a:ef:50:71:08:e3:e9:
57:46:59:79:45:80:23:ce:2a:b0:77:9e:bb:be:6d:
35:a8:a7:1c:76:51:cf:00:b5:2c:78:8e:db:06:6f:
ba:29:cd:98:45:02:7b:9e:88:f9:f6:0b:60:ff:ee:
d7:07:d3:4e:f8:72:47:5a:f8:88:9d:28:d6:5a:68:
6e:a2:59:01:14:5d:78:8d:73:30:f7:a8:04:6d:73:
3d:45:d1:89:d9:71:85:20:29:af:f6:76:96:61:b8:
92:4c:4c:cc:db:3b:41:30:35:2e:ea:3a:a0:09:f8:
be:b3:9a:a2:8d:92:92:65:32:93:67:c0:13:11:ee:
03:19:a0:73:8a:6a:16:92:37:be:a8:37:42:c5:e9:
96:59:30:5c:c9:f9:9b:d9:ab:f9:7e:a4:fa:d3:05:
f5:e6:ec:ca:47:c9:26:41:55:65:d4:72:0a:e2:fa:
f3:d8:74:75:f1:c6:74:3a:b6:6a:81:df:e8:f0:ef:
17:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:21:CB:3C:0B:CF:A9:3B:E7:EA:E5:D4:E7:FB:54:3D:BE:65:15:27
X509v3 Authority Key Identifier:
keyid:BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:22:9d:04:d8:6e:72:ed:88:d9:cd:f8:fa:a0:71:8b:45:67:
3f:45:3f:c5:8b:b9:ef:60:bb:af:0e:6a:1a:1d:19:b6:2c:2f:
88:02:b1:43:8b:84:98:a6:ce:92:84:b0:ff:8b:9e:86:4c:54:
fb:36:60:6e:fc:35:22:5f:a2:27:c6:13:36:57:b0:6d:1d:99:
da:04:bc:4b:bc:25:2f:9a:b0:9e:19:3f:9e:36:da:7f:5b:75:
b8:f7:cb:e5:28:8f:49:13:01:00:21:c0:10:b4:94:c4:bf:b8:
a0:c8:97:f1:ce:12:c6:13:40:cc:34:eb:91:08:99:5e:de:f2:
42:fe:c0:d1:ce:cd:60:94:46:39:4f:4f:c3:88:8f:d3:40:0a:
94:54:26:6e:d3:82:58:35:27:bd:64:29:f3:b0:0e:3d:9b:32:
4d:d1:40:71:ed:eb:b3:7e:60:f9:c1:ad:09:99:6f:75:8b:47:
65:68:a4:05:85:c5:7e:95:9c:55:1b:64:21:43:f9:eb:60:55:
84:e8:5d:21:d2:7c:e5:f7:b3:9d:a0:35:2e:63:81:cc:6b:ca:
ad:37:b5:0b:65:59:41:5d:e7:66:e5:f1:cb:db:18:ca:5b:f1:
f5:db:3e:18:0f:a4:df:ff:33:4e:3d:a3:2a:69:ae:b4:e6:76:
ee:7c:31:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:40 2025 by rpki-client