Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
File: vPVGNoDRS2RYax1bRlZjvLV35pM.mft (raw, json)
Hash identifier: cnWCmqSdczbqktG8spKNL17zlrJW2AXVX5BqBqfDC5U=
Subject key identifier: F6:9F:E4:A9:DC:88:26:37:15:12:AE:57:2F:B0:71:46:27:6B:9B:AA
Authority key identifier: BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
Certificate issuer: /CN=bcf5463680d14b64586b1d5b465663bcb577e693
Certificate serial: 0199FAA16D9915C637405C9D70EAAC7F1D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 04:01:47 +0000
Manifest this update: Sun 19 Oct 2025 04:01:47 +0000
Manifest next update: Mon 20 Oct 2025 04:01:47 +0000
Files and hashes: 1: uVkbwn7y_5MMeq7i0JNXRtOhxHs.roa (hash: ENXYHNx7P9jtVpFvO/C3/8L3MM9tHfB0gwOuIrKil9g=)
2: vPVGNoDRS2RYax1bRlZjvLV35pM.crl (hash: TDm/bVob+j6qtRQGAWa2aRecfrIFjsLDvqr/x2vRWQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:6d:99:15:c6:37:40:5c:9d:70:ea:ac:7f:1d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf5463680d14b64586b1d5b465663bcb577e693
Validity
Not Before: Oct 19 04:01:47 2025 GMT
Not After : Oct 20 04:01:47 2025 GMT
Subject: CN=f69fe4a9dc8826371512ae572fb07146276b9baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:85:7a:59:a1:13:7f:18:0b:f6:2d:14:bc:
96:aa:eb:fc:c8:89:c1:8a:29:96:55:f4:7a:35:72:
be:29:ee:58:b5:dc:49:e5:6c:be:c3:94:6f:7a:2d:
aa:fd:2f:4b:f5:89:b9:c1:ce:05:08:97:c1:9e:d3:
e9:0f:38:89:5e:ed:ac:4b:20:d5:28:99:24:53:ae:
d0:1a:7d:47:c8:0b:98:2c:21:53:36:c9:7d:e0:32:
dc:fa:c1:2b:3e:f0:a1:ae:f4:0e:72:0d:ac:42:ea:
1c:f4:1b:3b:a3:12:e3:25:05:bd:86:0b:c3:3b:21:
d9:16:c0:c8:9b:ec:14:4f:14:ed:5c:fa:4b:62:5c:
c3:fe:d1:de:2a:6b:85:4a:50:50:d9:47:36:14:66:
0a:82:27:18:0c:07:1b:f5:f2:c3:bf:7c:22:01:a0:
45:97:67:db:e0:17:63:6c:77:8d:80:6b:ad:98:90:
39:39:e6:f9:c9:fb:e4:11:4f:f8:b2:fa:88:ad:03:
66:c9:66:d2:c2:2b:c5:0e:3b:43:8e:5f:1a:e8:c8:
c3:0c:2f:2d:e3:6b:f4:e6:22:72:a7:21:f1:69:21:
7c:66:9c:5e:e3:0b:41:95:db:d3:3f:ff:3a:10:5d:
10:af:cf:43:68:40:47:a3:1d:ce:c4:c3:23:fb:44:
57:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9F:E4:A9:DC:88:26:37:15:12:AE:57:2F:B0:71:46:27:6B:9B:AA
X509v3 Authority Key Identifier:
keyid:BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:aa:d9:ca:76:26:c3:bc:5d:b0:77:19:4b:5e:8e:cb:13:a2:
b8:4a:16:08:c8:ac:9f:95:87:cf:cf:c2:ea:1e:ad:49:3a:d5:
8f:39:11:2d:37:3f:2a:e9:10:bc:05:af:d7:e5:ab:77:f8:3b:
ee:c3:eb:7a:c2:60:3c:84:7c:df:4a:1a:e4:56:b6:7a:59:9d:
44:fc:c5:5d:73:d0:01:95:5f:7f:09:4d:74:df:a6:fd:49:1c:
e3:86:1c:29:13:b9:d1:aa:c0:f0:2a:a2:8d:fd:51:4b:5e:73:
3f:9a:bf:16:d4:a1:6a:b4:9f:c7:e9:fc:70:79:42:da:19:0c:
b7:34:78:8a:77:1d:58:af:8e:68:1e:c3:19:ab:ab:d8:2b:ae:
db:c0:fb:72:c1:86:9b:e1:ae:6e:f2:07:f0:ba:8b:86:2a:c2:
1f:3f:ae:7e:2e:b8:4d:cc:fa:d8:22:0e:51:19:6b:2c:36:a3:
73:d5:4c:b4:f6:1d:75:4c:d2:5a:54:49:eb:e0:6b:27:e7:52:
cd:23:c8:f4:a5:dc:99:e0:be:f3:d8:c6:33:f2:80:3d:0d:db:
e4:42:b8:74:57:0d:e6:18:3b:12:29:48:c8:cb:93:12:2d:b5:
1c:8f:e3:8f:d6:0e:6c:8e:5a:0d:0a:88:f0:62:fa:e6:26:5f:
b7:ff:42:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:43 2025 by rpki-client