Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
File: vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft (raw, json)
Hash identifier: 1Rg+2I7Wx5j2PJBGY9akG1AKaEnY6BFYtXoDFrDwO1I=
Subject key identifier: 69:36:10:2D:98:A7:5B:C2:C4:04:2C:52:7F:9D:FB:C3:5B:5F:51:64
Authority key identifier: BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E
Certificate issuer: /CN=bd85314d13c782c052dd022b3e4e20142b64170e
Certificate serial: 0199FCFD6BEA76EAE73DC9BA08A931C4E205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
Manifest number: 1275
Signing time: Sun 19 Oct 2025 15:01:30 +0000
Manifest this update: Sun 19 Oct 2025 15:01:30 +0000
Manifest next update: Mon 20 Oct 2025 15:01:30 +0000
Files and hashes: 1: 87DcvIoV9C57hb7DwzS0oT0QBdM.roa (hash: 1fwwbxC7tvmVRypNN1d4FXoCK3/5oiWQOQyukuAKNSE=)
2: vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl (hash: FIT+t4hPLYLFrvyVmBt7fy6bACs7VgmyXoSfvALkci0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:6b:ea:76:ea:e7:3d:c9:ba:08:a9:31:c4:e2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd85314d13c782c052dd022b3e4e20142b64170e
Validity
Not Before: Oct 19 15:01:30 2025 GMT
Not After : Oct 20 15:01:30 2025 GMT
Subject: CN=6936102d98a75bc2c4042c527f9dfbc35b5f5164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c3:ff:9b:4c:7a:b6:aa:bc:0f:78:5b:d4:18:
80:23:cd:c6:57:84:db:e0:c0:fd:d9:60:18:ce:b3:
26:84:ea:5b:3b:bc:59:71:0a:68:8c:17:be:cf:40:
b0:8f:1f:46:3d:d4:b6:2c:82:3b:b2:9b:8d:48:5c:
29:6d:2a:12:57:fa:10:4a:9a:67:06:37:02:ca:6c:
ed:1d:a0:5c:cc:e0:02:87:42:07:d0:02:b8:6f:e3:
d6:48:ea:02:85:8f:a4:94:61:79:33:ce:4f:b7:ea:
96:32:21:bd:74:11:e8:74:fe:2a:33:d4:c9:4c:17:
14:c6:c1:47:43:fa:4c:a3:45:75:1c:3c:1a:5c:01:
06:b3:8c:67:76:eb:d7:58:1d:72:6b:7f:31:00:87:
b2:e8:b7:66:62:22:8a:0a:9b:d8:a7:14:dd:af:8c:
d4:2c:92:63:83:e4:53:ee:b6:a6:a7:39:cd:3a:00:
b9:bc:eb:e5:a2:0d:3f:83:27:a4:af:cd:bf:b8:21:
90:62:f6:5a:31:35:2c:e6:fa:87:4b:73:8b:54:05:
ed:c3:5a:83:88:05:3e:31:2d:c9:e8:af:47:8f:fc:
d9:dd:ef:1b:30:47:e9:ec:64:bb:6e:48:4f:cc:7c:
8b:45:b5:58:85:61:8f:70:2c:a8:48:f6:5c:42:9a:
ad:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:36:10:2D:98:A7:5B:C2:C4:04:2C:52:7F:9D:FB:C3:5B:5F:51:64
X509v3 Authority Key Identifier:
keyid:BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:89:73:3b:22:8b:26:b1:b1:7a:51:4f:75:e4:fe:b0:d1:88:
52:1e:3c:b5:c8:d2:70:72:c3:61:ee:cd:3b:86:14:4a:9a:a5:
4a:0c:07:d1:26:ee:1d:9a:00:84:19:5d:ec:47:a9:ee:8c:01:
2b:0e:db:b6:38:5d:a5:88:32:08:fe:0d:88:61:05:52:b7:60:
b3:c3:a3:c2:40:d7:28:3a:17:74:c0:d6:d5:f9:a5:27:d3:d4:
56:5d:a5:14:7a:f4:c4:92:8a:af:3b:ac:fc:2f:1e:66:71:93:
b8:9a:60:9d:55:91:19:a2:ca:5c:71:d3:77:0b:3a:be:a3:8e:
0a:2a:49:7c:c6:9c:5c:33:5b:1a:e8:cb:96:fb:33:fc:aa:ff:
5a:35:29:7c:bb:ec:1c:8e:b3:99:f9:65:75:ab:37:70:06:35:
b5:ae:34:0a:24:f6:97:82:b4:55:cc:bb:4b:58:fd:c9:6d:a2:
47:a3:0b:6d:aa:38:ed:91:5b:45:37:a8:63:ab:be:f9:df:0b:
be:91:7e:40:88:f8:fd:2a:60:f7:7b:92:4a:1f:1c:ea:b4:f2:
12:f9:25:bb:bc:ff:1b:bd:b2:29:ae:c3:be:34:59:13:7f:3d:
89:04:3d:bd:db:b3:c1:e2:0b:46:ff:83:97:a1:e2:0d:1b:f8:
de:a8:e6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:45 2025 by rpki-client