Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
File: _vMpNgwbb8r79SU6ZX4-nX8iT34.mft (raw, json)
Hash identifier: 5jcNeOzFECCOo4Y3F8noGHm+jIdP8KZSTigPDkQ1Gcs=
Subject key identifier: 5A:D0:4C:18:64:D5:6C:5E:20:69:5F:83:C4:10:84:FA:53:79:57:7C
Authority key identifier: FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E
Certificate issuer: /CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e
Certificate serial: 0199FCC61B9EC17C1FCE6DAF34C5E77F176E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
Manifest number: 0B1B
Signing time: Sun 19 Oct 2025 14:01:05 +0000
Manifest this update: Sun 19 Oct 2025 14:01:05 +0000
Manifest next update: Mon 20 Oct 2025 14:01:05 +0000
Files and hashes: 1: _vMpNgwbb8r79SU6ZX4-nX8iT34.crl (hash: ZXLwD9mzxludN4fbE3o9hIl66pTf1nBpokxsA5CGqSk=)
2: sal7PYLJIpSNgfzX-mHBx92eZY4.roa (hash: y0fWbs+KX+1LX1FUo2i/E/BhGWNH/lzhBXcOY7rC0YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:1b:9e:c1:7c:1f:ce:6d:af:34:c5:e7:7f:17:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e
Validity
Not Before: Oct 19 14:01:05 2025 GMT
Not After : Oct 20 14:01:05 2025 GMT
Subject: CN=5ad04c1864d56c5e20695f83c41084fa5379577c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:05:c0:68:15:96:14:00:68:aa:a1:47:68:
59:71:bc:a6:b4:3d:ac:ee:af:a7:7f:da:3a:72:48:
d1:b6:59:8b:31:ce:00:74:a5:d0:bc:3b:65:06:2d:
4d:be:93:68:36:5d:67:59:ca:41:db:22:97:e4:17:
5c:a6:00:91:8d:1e:04:0a:46:9d:a7:f6:90:c7:e4:
87:03:0c:c5:e4:cf:9e:d7:9b:8c:21:04:14:09:a0:
cb:d0:dd:0c:0a:01:4d:77:f2:1e:d0:1b:9c:df:c6:
03:3b:7e:e5:a4:af:42:13:e6:3f:ec:f1:f7:08:57:
ca:49:07:8b:b3:6a:ab:fa:aa:df:53:0d:9d:7b:48:
25:4b:e5:7f:32:92:2e:2d:04:f8:1d:56:99:08:a0:
e4:13:47:95:68:9d:c6:35:78:d4:ff:5c:2b:6a:90:
f2:ca:38:0a:e7:bc:a8:6f:de:88:b7:3b:d7:9e:87:
b2:86:aa:49:a7:3e:1d:0f:93:9b:25:d6:23:64:0d:
5b:48:cb:86:d9:ad:5f:fc:fa:3e:b6:5a:ea:3d:e9:
fe:80:58:8a:e9:7f:23:a3:b8:a9:80:a3:30:9f:5f:
60:60:ee:db:ff:d2:7a:ce:27:19:24:96:84:d3:59:
53:9a:be:c0:8e:a3:6b:b5:92:da:ea:b1:bc:01:02:
66:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D0:4C:18:64:D5:6C:5E:20:69:5F:83:C4:10:84:FA:53:79:57:7C
X509v3 Authority Key Identifier:
keyid:FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e3:38:20:47:a8:dc:6d:65:98:45:80:86:55:93:d5:44:55:
be:08:62:e6:fc:c3:fa:71:8d:8e:ee:a5:5a:ba:87:20:d3:74:
02:41:43:98:0b:1e:70:02:7f:2e:43:2b:b0:99:18:6e:b5:76:
a0:cc:64:10:40:d6:32:57:d9:90:0d:8d:ae:20:3d:61:26:08:
ed:f5:98:cf:d9:ca:82:1d:39:19:21:2a:65:b1:fc:ec:fb:a9:
de:01:28:49:53:fe:e3:65:cd:18:14:f4:80:b8:fe:94:e8:14:
3b:64:2f:cf:16:4d:48:0e:bd:1d:77:97:c0:51:2f:5f:26:00:
f6:6f:49:d1:7e:81:ce:80:88:97:9e:6f:3c:fe:94:2d:2c:cc:
6e:9e:77:64:f4:6f:11:b8:10:b0:54:5e:b6:41:7f:e8:96:e5:
42:bd:24:f3:7e:d7:53:1c:fe:94:59:87:9b:c0:8f:ff:d4:e1:
41:d8:a1:e9:9b:a5:be:36:a1:38:dd:a5:12:27:09:11:47:80:
b2:98:47:af:64:47:21:9f:85:29:a5:ee:d5:45:ae:8a:b2:a5:
d8:3b:15:8c:32:2e:ce:3a:27:44:2f:1b:c4:61:54:86:8d:17:
72:49:aa:65:04:84:0a:fa:87:08:61:5f:f2:ee:92:43:17:13:
cd:b8:44:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:54 2025 by rpki-client