Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
File: 1-vcGbaCaViJCYORuom3Jyx26jjc.mft (raw, json)
Hash identifier: fVBNlgTxiDB4m+yqGDZ00w8Zrjnc4DzEMqDJtHofVXM=
Subject key identifier: E1:0C:0F:7B:A5:C5:9E:21:0B:92:A0:B7:9F:C9:CA:67:D8:73:FC:66
Authority key identifier: FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
Certificate issuer: /CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Certificate serial: 0199FC216F968163521744DEDFB0D23F3AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
Manifest number: 1226
Signing time: Sun 19 Oct 2025 11:01:13 +0000
Manifest this update: Sun 19 Oct 2025 11:01:13 +0000
Manifest next update: Mon 20 Oct 2025 11:01:13 +0000
Files and hashes: 1: 0npgtCw2cniYZRSczr6L1wq2NDE.roa (hash: 7qLMTW4Hb0+zjkcR3VjQ/z+HhWTfAgpVarVUL4CErX4=)
2: 1-vcGbaCaViJCYORuom3Jyx26jjc.crl (hash: A8M9bZXQbFW0v73kkfQHxd1IAws4Xi5+9nhQcSqF45k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6f:96:81:63:52:17:44:de:df:b0:d2:3f:3a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Validity
Not Before: Oct 19 11:01:13 2025 GMT
Not After : Oct 20 11:01:13 2025 GMT
Subject: CN=e10c0f7ba5c59e210b92a0b79fc9ca67d873fc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:23:82:8e:46:43:d5:a2:89:2e:b1:0e:ee:
4e:f9:d6:4d:1e:80:79:29:34:eb:8e:3e:aa:17:fd:
cc:cd:af:a2:b6:cf:64:79:36:0e:77:dc:7a:62:0a:
45:2f:0f:1c:d6:62:cf:fa:d8:13:2b:c4:29:30:fa:
36:76:f4:1b:0e:ee:f7:8d:66:2c:9f:45:82:57:72:
d3:1e:c1:51:83:d4:3a:32:5c:36:b0:39:f4:90:d6:
65:ba:d8:49:17:a1:11:ed:17:74:db:84:bc:2b:dd:
f0:76:49:ff:e1:1d:71:3f:89:64:a0:cf:70:c8:af:
a3:4f:cc:e2:2f:d4:e0:1e:a6:8e:ba:24:9e:9a:83:
ec:b9:d1:7b:12:cc:b3:bc:5a:c4:f3:0d:c4:6e:17:
83:ee:e0:d9:3f:33:3d:35:6a:14:22:18:ff:c2:2b:
1e:5f:9a:3f:85:a1:2c:46:6b:75:a0:f5:5e:ff:f2:
d1:6b:d7:63:c8:a9:1c:1b:44:d9:af:20:e4:1a:50:
5f:2c:bb:6c:16:23:b0:1a:5e:14:5a:02:99:3e:c7:
26:3c:db:8c:d6:82:77:40:51:b1:22:48:1f:3e:d4:
81:0e:a7:dd:c0:4c:a3:0a:c3:ca:54:34:53:d7:89:
e9:38:c2:0f:65:12:9a:50:49:46:38:63:fb:24:41:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0C:0F:7B:A5:C5:9E:21:0B:92:A0:B7:9F:C9:CA:67:D8:73:FC:66
X509v3 Authority Key Identifier:
keyid:FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a1:4c:0b:9c:ca:bc:6b:87:f8:7a:29:4d:2c:23:b8:10:1e:
ab:de:49:26:77:ab:d0:d1:2d:a7:b7:13:b7:84:2e:43:eb:8e:
95:e8:cc:d2:d3:e7:20:c0:e8:29:9b:fa:4f:97:53:ec:d8:39:
d6:50:b9:10:7e:61:ad:23:c7:24:2b:16:32:05:2d:11:be:be:
ee:8a:72:c4:05:29:70:9b:cc:ff:60:fb:59:bf:09:b9:b4:72:
a1:6e:70:e1:d2:ea:b4:ba:98:cb:5a:23:87:35:77:b3:4e:5f:
2d:46:91:b8:f8:0c:7d:4f:4f:fe:a8:9c:f8:ca:a2:56:ff:cc:
aa:a1:5b:99:4e:c7:a9:fe:8e:7a:77:9b:13:34:27:4c:0d:d6:
5b:b3:ab:d3:04:41:98:37:e5:04:b9:82:bc:5c:1b:25:cc:67:
47:38:13:a1:f1:4d:b6:bf:fb:cc:ba:f1:20:cb:5f:9e:93:f8:
f5:6e:4d:50:88:a0:03:87:14:df:38:e2:2b:fc:79:c9:1d:94:
d4:7b:6f:1f:55:3b:c8:af:4b:e4:1f:4a:ac:e0:f0:af:de:e7:
75:33:05:29:06:6e:ff:20:83:ba:98:cf:06:f1:1d:ad:a6:e5:
05:84:89:1a:67:08:70:6d:c1:32:10:d3:51:4b:39:79:f6:8e:
86:70:f8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:46 2025 by rpki-client