Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
File: vKDsWVZDJCN0INUGubSY11LuIWg.mft (raw, json)
Hash identifier: TkcaNtAgdtZWTGoV7M2JSU7wnQQfKf4p+IfwrGfj+Hw=
Subject key identifier: B0:82:5C:EB:45:87:F4:EA:81:C6:0A:87:45:8E:95:00:E2:E0:45:48
Authority key identifier: BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
Certificate issuer: /CN=bca0ec59564324237420d506b9b498d752ee2168
Certificate serial: 0199FC8FBCCF002AFBA38EAD6F3E2FE8B537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 13:01:42 +0000
Manifest this update: Sun 19 Oct 2025 13:01:42 +0000
Manifest next update: Mon 20 Oct 2025 13:01:42 +0000
Files and hashes: 1: 4Yqz6mzAxsTp7LTA9pLRdzvqp7A.roa (hash: Ow3YpmTpRMl6qMkXjave/Z2C+8qskJo+DojTdIc7TV4=)
2: angMmzMX4gcbPlkGiqliyl-4RsY.roa (hash: EA5h2yHtnaMB3WqoR9kfvdgGUE89WgrdN7IrWKjGg8w=)
3: quctJA6JvCwqA-qZHXeVYB1FfY8.roa (hash: ktXd2zEikg+b61S+QwkN+l6BxFbDccaraJMDVmopSSI=)
4: vKDsWVZDJCN0INUGubSY11LuIWg.crl (hash: DGDrYZEjUQ/mIKzgNTpHHco5Cwm6025vNbBUgQ/NbsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:bc:cf:00:2a:fb:a3:8e:ad:6f:3e:2f:e8:b5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca0ec59564324237420d506b9b498d752ee2168
Validity
Not Before: Oct 19 13:01:42 2025 GMT
Not After : Oct 20 13:01:42 2025 GMT
Subject: CN=b0825ceb4587f4ea81c60a87458e9500e2e04548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:39:c7:fe:1b:5d:93:20:b0:66:ca:70:b5:2c:
51:b0:d5:54:31:e3:c0:ed:c8:11:8b:1e:d8:44:88:
1e:17:a3:6a:a1:ab:6b:30:6e:9b:57:ac:ea:ab:b2:
c0:7b:f6:0f:bb:34:e6:85:91:ad:33:a8:0f:c5:fd:
61:56:34:8f:9b:4a:0f:8c:7a:61:47:3d:21:3d:73:
9e:9e:42:78:0c:be:9d:8f:0e:7f:a7:8f:a1:2d:f7:
83:9d:97:8f:c1:0d:12:66:11:79:70:29:bc:9a:2f:
36:f7:76:11:3a:10:67:4b:b2:44:08:53:b6:75:a8:
8b:1b:37:03:8f:a8:d2:5a:93:df:29:09:07:9e:55:
f1:4e:78:c1:e3:46:4a:62:c1:b5:a5:38:df:45:56:
8a:65:88:a1:3d:3f:0c:2b:65:8b:e8:83:44:26:b2:
a3:2b:78:e1:01:8d:31:a0:6d:9c:4d:2f:1b:10:30:
49:f4:f5:f4:9a:c2:79:f3:92:89:1d:f9:96:5a:c5:
ff:97:f5:ed:b9:d1:b3:b9:e0:f9:9a:67:0f:55:25:
8b:7f:87:ec:fb:53:c6:6f:38:77:f7:39:4a:e7:c8:
ac:7e:f3:85:15:57:7a:03:f7:e7:cb:fd:ca:73:a1:
8b:36:d7:86:51:e7:b7:b4:a9:52:12:8c:2c:e7:74:
31:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:82:5C:EB:45:87:F4:EA:81:C6:0A:87:45:8E:95:00:E2:E0:45:48
X509v3 Authority Key Identifier:
keyid:BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:32:fc:62:a6:e6:55:2d:52:b2:bf:e5:74:82:d0:4d:7f:2f:
39:e5:de:df:35:1e:8a:6f:3d:4d:9c:bb:77:8f:09:75:e9:ce:
65:10:c8:b4:93:0b:e5:14:e0:0e:26:71:10:22:1d:6a:20:41:
f8:66:55:96:a1:45:45:8d:e2:f6:ec:96:3a:5c:6d:60:e2:de:
77:af:40:3e:0a:73:68:36:86:24:b5:f3:ff:cf:0a:b5:11:98:
af:d6:76:4e:03:90:cb:1a:f7:17:91:d0:61:1a:7a:2a:a2:ce:
85:e1:48:e5:f8:ec:58:92:a3:69:7e:47:25:dc:72:fe:db:be:
5b:ab:c1:3e:f1:09:e0:6f:9a:ee:07:b8:b6:3d:84:a6:6f:27:
d5:34:f3:16:90:ae:ed:38:d5:fa:c2:00:02:4f:14:e4:3b:0e:
8a:59:a3:9a:df:25:79:bf:dc:bd:52:f8:f1:23:72:ad:6a:95:
26:d2:4e:46:ef:01:d4:12:06:ef:3c:de:80:32:55:2a:e5:35:
b1:e8:3e:ad:6e:29:5f:2d:36:85:c4:c7:20:90:63:74:a6:34:
d6:31:a5:7e:5d:0d:cb:da:c9:f0:aa:09:dd:9e:42:05:c7:47:
10:05:4e:d7:5b:e7:00:85:78:e1:ba:55:9f:7b:a1:84:12:7c:
34:c5:da:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:57 2025 by rpki-client