Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
File: vf3CTv25YU3JPpd3TOicHJcw5mU.mft (raw, json)
Hash identifier: JJKz2nHwufrJklpJkxsn3EH26Itb85PxUJd6DGdCk3Y=
Subject key identifier: 79:32:AE:D5:B7:E2:64:4D:4B:FC:45:70:3C:C6:F8:9A:14:BE:C0:47
Authority key identifier: BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65
Certificate issuer: /CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
Certificate serial: 0199FC2152936D71053737082DAA43B185E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
Manifest number: 45
Signing time: Sun 19 Oct 2025 11:01:06 +0000
Manifest this update: Sun 19 Oct 2025 11:01:06 +0000
Manifest next update: Mon 20 Oct 2025 11:01:06 +0000
Files and hashes: 1: Lg4eCFYIYf5ZVutlcdxYXCP2T1k.roa (hash: /UYXd+Jxi7mk5U3i4C8s/Xff/x03jpYmnvrS9R7HXwg=)
2: vf3CTv25YU3JPpd3TOicHJcw5mU.crl (hash: +FWtCR8v3knNhypNiLJ/YQLqLx0ML/R+q8s7ipCoLgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:52:93:6d:71:05:37:37:08:2d:aa:43:b1:85:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
Validity
Not Before: Oct 19 11:01:06 2025 GMT
Not After : Oct 20 11:01:06 2025 GMT
Subject: CN=7932aed5b7e2644d4bfc45703cc6f89a14bec047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:e4:e0:fb:2a:19:68:1c:39:f3:0d:20:77:
86:bf:1d:83:f3:55:1a:bd:53:2d:76:1e:51:35:3c:
6c:5f:aa:57:f3:21:d5:1f:97:82:46:16:8f:98:a5:
bf:a7:dc:79:28:41:c4:24:4b:1e:2e:fb:e8:8a:74:
98:ba:15:62:8f:51:17:f8:ed:ac:1a:16:e0:d1:82:
f6:4d:52:7e:12:93:66:42:bd:cd:9c:1c:4b:76:19:
ce:2d:e0:c5:4c:73:05:51:6c:b2:f9:dc:94:80:c5:
35:2a:2f:69:03:c1:c0:f7:c0:38:2b:7f:e8:c1:2b:
b6:f0:ea:f6:31:25:b6:64:58:6a:7c:be:e7:23:fb:
1e:1a:80:13:49:fa:ba:85:2c:59:1f:bd:18:ad:ba:
ad:b5:74:a1:2d:1c:23:d6:e7:5c:bb:84:19:48:27:
cb:cf:57:6a:dc:14:91:57:88:11:7c:11:8a:26:e9:
f8:64:33:81:0a:c8:2b:86:a8:1a:38:c9:f9:52:31:
dd:51:11:e6:42:a2:06:53:e6:e5:e0:a0:4d:55:38:
80:a5:c9:a5:7c:fd:d6:ad:9f:ce:d5:d3:2c:b5:49:
92:03:76:66:94:07:ec:91:5c:2c:65:a8:4e:29:25:
62:40:53:42:f6:5e:c6:41:41:21:ef:96:d9:d2:d4:
ca:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:32:AE:D5:B7:E2:64:4D:4B:FC:45:70:3C:C6:F8:9A:14:BE:C0:47
X509v3 Authority Key Identifier:
keyid:BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c6:e0:bc:1c:f8:3b:64:fd:e7:bc:77:ad:63:33:a3:00:e6:
16:9e:de:a1:41:08:52:3d:24:71:a1:07:74:c9:08:d0:c1:1c:
f6:98:1c:5e:6d:78:01:e9:cf:ed:4e:98:b8:44:07:ac:87:a3:
cb:8e:5c:ed:86:0d:88:3f:6e:88:e0:56:7a:87:74:c0:d1:b7:
aa:92:8a:0f:8e:95:8d:ac:fe:40:7e:01:eb:1e:6d:83:a6:34:
6e:ef:b5:e2:d9:2f:ea:be:a5:bb:29:1a:86:8b:e7:6f:44:40:
1c:4f:03:c1:cb:81:de:ef:0c:11:8c:b1:d1:e9:23:24:75:0c:
d5:16:0c:4d:c1:81:9d:f7:65:32:73:fe:90:03:44:77:d6:75:
41:d2:aa:e5:d7:90:25:ad:12:cb:06:50:14:48:70:25:57:c0:
62:bf:8c:70:9f:05:b4:2b:fa:d3:cb:4d:00:f5:63:a0:30:08:
73:53:1d:be:a0:6d:4f:bc:dd:de:1f:1a:3c:88:44:e2:32:46:
73:8e:a4:57:d3:a5:4d:6c:99:ab:78:3b:1e:e9:58:d0:2b:4b:
c5:d9:94:b5:ca:85:b9:8e:06:44:46:6a:a7:35:69:1d:77:d8:
f3:d9:ee:23:be:2e:2f:3b:52:ca:c8:11:fd:3e:91:0e:76:f9:
4d:d1:e5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:38 2025 by rpki-client