
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
File: vJjaCfCkWkCPW38brm2R4zM9VzI.mft (raw, json)
Hash identifier: seplsj/2mSdKC+kBZm6VvqiQJJtANhypz3iP4zQsILc=
Subject key identifier: 8D:0A:FA:28:5F:CC:BA:41:78:5C:58:E0:AA:EA:9F:8C:C0:C5:FD:96
Authority key identifier: BC:98:DA:09:F0:A4:5A:40:8F:5B:7F:1B:AE:6D:91:E3:33:3D:57:32
Certificate issuer: /CN=bc98da09f0a45a408f5b7f1bae6d91e3333d5732
Certificate serial: 0199FA6A91DD215D0D5281A05FBB4E4179D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 03:01:51 +0000
Manifest this update: Sun 19 Oct 2025 03:01:51 +0000
Manifest next update: Mon 20 Oct 2025 03:01:51 +0000
Files and hashes: 1: fxhyywtkkeQkBb1LWBBLmBYmdhw.roa (hash: JEDR1+B65jcWiXG9Txje4CaMRNTaWS3SE4CY6nIrNeE=)
2: vJjaCfCkWkCPW38brm2R4zM9VzI.crl (hash: tLhr/bw59Zv9vzUzdP1rx3v1RoVNqLeBpPKIgfMei7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:91:dd:21:5d:0d:52:81:a0:5f:bb:4e:41:79:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc98da09f0a45a408f5b7f1bae6d91e3333d5732
Validity
Not Before: Oct 19 03:01:51 2025 GMT
Not After : Oct 20 03:01:51 2025 GMT
Subject: CN=8d0afa285fccba41785c58e0aaea9f8cc0c5fd96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:69:ab:cd:96:b1:18:2c:54:74:5e:45:bc:
fe:82:55:23:cf:22:a1:ec:ac:cd:eb:92:a0:75:9c:
9f:aa:80:95:5a:45:bb:17:29:59:b4:1b:96:89:b6:
f3:51:7b:27:81:d1:ab:7f:57:f5:a5:7a:9e:55:0e:
ea:26:4b:8b:fc:4a:4f:c9:b3:e7:e0:b1:a5:f9:02:
16:1e:1d:88:b1:95:4c:34:08:30:93:fb:d2:f9:01:
88:f1:72:b7:f9:de:c0:02:cf:23:e8:b5:e9:c2:b9:
3c:8a:07:0f:fd:58:65:37:02:df:46:94:2d:ef:48:
dc:7f:d5:a6:b5:ee:a6:64:60:89:a6:83:a5:08:b8:
2d:4b:a2:c1:df:42:6b:40:c1:e2:73:73:e1:45:52:
fb:70:d8:7f:2f:94:a8:9c:0f:a6:62:9a:28:51:3d:
f5:45:48:3b:c7:ce:df:18:2a:a8:2b:9d:97:94:bf:
ef:00:96:42:ef:97:a8:ff:72:11:d4:cf:79:7f:fc:
02:33:96:18:e4:c7:7b:ea:d7:85:92:2e:b9:41:0d:
93:36:b1:6c:c6:0e:30:60:5a:b2:04:8e:19:20:f6:
e5:9d:9f:03:7b:64:8c:20:50:4e:8f:dd:13:81:e9:
e2:ee:2b:ee:ae:d3:b3:2a:76:ca:c8:03:fa:a7:2d:
98:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0A:FA:28:5F:CC:BA:41:78:5C:58:E0:AA:EA:9F:8C:C0:C5:FD:96
X509v3 Authority Key Identifier:
keyid:BC:98:DA:09:F0:A4:5A:40:8F:5B:7F:1B:AE:6D:91:E3:33:3D:57:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:6d:5e:75:90:12:4c:d5:39:a3:e2:36:3d:80:c6:8e:52:d9:
fd:f5:34:00:a3:d3:a1:25:fa:74:08:7b:ff:09:34:61:0a:2b:
d1:2c:ae:69:58:af:5c:f3:f9:53:9d:fc:a1:6d:c0:61:83:d2:
08:90:0b:99:4f:fd:4e:a6:03:c2:ef:30:dd:9c:a5:cd:66:fb:
28:fc:f2:fc:d7:c0:cd:11:f3:73:a1:b8:9b:39:39:05:0e:3e:
ca:af:38:c3:4f:f6:d1:a8:e2:62:7a:5d:f0:23:b8:c5:2e:d4:
95:ee:97:b0:8a:56:ba:b8:53:39:f7:56:c5:6d:2b:e3:cd:4d:
56:18:73:a7:69:26:cb:d9:c2:da:de:c2:dd:e5:38:d7:b9:98:
cf:83:d3:a0:3e:86:dc:58:e8:16:15:69:68:d9:d0:f5:be:c4:
b5:ee:c2:2e:2c:90:dd:59:22:e2:1d:4f:f9:da:31:24:b8:0f:
7c:7a:2d:d6:ea:78:00:da:e4:f9:70:26:e4:a9:9e:9a:2e:c6:
b5:80:a6:51:41:87:1b:dd:b0:cd:58:6b:39:11:9c:a1:1e:90:
be:a3:7a:87:12:b7:c1:0d:f6:d4:cf:51:19:63:75:fb:0a:e6:
eb:5d:c0:07:de:04:eb:71:b7:62:ed:e0:11:3e:ab:5f:7c:4a:
ab:de:f8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:57 2025 by rpki-client