Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json)
Hash identifier: wywVG52Vv9ijhWzBFiGu+/EQbjAqg4/oQ7W5kVnjtEA=
Subject key identifier: 9B:6D:8A:F6:FA:2F:7F:72:95:9E:E0:22:45:D5:43:52:91:7E:05:7C
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial: 0199FC588F77C9C2AA1F851D8C126430A380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 12:01:26 +0000
Manifest this update: Sun 19 Oct 2025 12:01:26 +0000
Manifest next update: Mon 20 Oct 2025 12:01:26 +0000
Files and hashes: 1: OTqu6ofFTyzK0xc5jrx6KgXbQ7M.roa (hash: McteydyUGW+LpPCexm+O1QefOp1oYc2XsREa8UjCVIA=)
2: dKgonROO4xpKslqbxO1osnY3m3M.roa (hash: Hl3GLighJnfdP7Jed7jsC0ysJmCVrDY4pvlKDvOdEYc=)
3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: 8kOBexKdkolgixXvKj17IkwEjoyBEULGMwuUtZJSz68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:8f:77:c9:c2:aa:1f:85:1d:8c:12:64:30:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Validity
Not Before: Oct 19 12:01:26 2025 GMT
Not After : Oct 20 12:01:26 2025 GMT
Subject: CN=9b6d8af6fa2f7f72959ee02245d54352917e057c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:ce:67:f2:4b:69:c5:27:4d:8e:5a:8b:d7:
19:aa:38:b0:1a:fb:33:72:d4:1e:b6:76:d6:25:c4:
17:5c:34:08:a9:49:a0:81:5e:ca:36:d7:ce:b4:2e:
59:8a:36:08:5a:67:e0:d3:2c:60:38:a5:1e:ee:50:
65:6a:35:5a:52:81:33:3c:da:fb:16:27:cb:1a:c5:
89:05:64:16:80:58:74:41:98:54:f0:64:bb:2e:67:
56:3f:1d:7f:c2:26:0c:5a:bf:7a:50:29:a6:ec:7b:
94:13:51:dd:26:27:d2:7b:d0:41:39:a4:50:a9:1d:
73:6f:4c:50:77:86:6b:c5:2f:bc:6e:93:18:73:2e:
fe:8d:be:03:8c:7a:87:2c:83:c0:89:b6:1d:22:e0:
fb:d1:4f:8b:a9:7e:23:02:05:e5:a8:72:9a:20:4c:
0b:59:fd:d4:7f:d0:b8:c5:30:68:7a:cd:9a:fe:a0:
60:ef:87:ce:a4:39:1b:3a:39:d8:45:b2:ad:fc:97:
80:ed:f6:40:04:63:ef:3d:94:97:e3:67:33:db:c4:
90:73:74:3d:64:14:3c:03:56:18:0f:54:54:7e:40:
ac:4e:e7:48:be:a3:24:ca:6c:b0:ee:e8:ae:b9:54:
8a:62:0e:a2:5e:3a:16:5e:fb:48:48:b1:5e:cb:db:
78:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6D:8A:F6:FA:2F:7F:72:95:9E:E0:22:45:D5:43:52:91:7E:05:7C
X509v3 Authority Key Identifier:
keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:30:87:4d:32:09:bb:6d:60:ee:91:c1:39:fe:ee:29:9d:24:
96:83:80:83:40:9b:43:b2:8d:f7:52:55:bf:9b:2c:69:01:22:
f3:2b:e3:15:d1:e3:f9:c1:de:67:2b:89:64:d9:1c:68:ab:5b:
d4:e7:4b:ba:f6:07:b6:4b:d0:ce:64:11:8f:95:8a:37:87:79:
75:2b:48:1f:52:39:13:a0:99:2f:91:d3:d6:c8:ab:b9:a7:fc:
76:3a:af:6e:ba:24:cb:66:16:12:4a:d0:e6:db:e2:ad:d9:a0:
60:7e:94:fa:19:55:c1:ad:a2:ef:33:16:44:97:4c:41:2a:14:
eb:9b:9b:f9:d5:a8:e2:3a:2f:7f:78:5d:39:a8:3c:cd:db:23:
5b:51:3d:cf:ce:c3:3a:a9:2b:52:04:d2:2d:21:38:67:bf:34:
ec:1b:d8:a0:dc:83:e3:75:51:46:db:eb:ef:19:64:58:f0:07:
d0:2d:24:3c:2f:01:a0:9a:53:a3:8b:1d:e2:f2:7d:e0:ac:26:
af:ac:4b:bb:a4:8a:7b:65:94:b1:14:65:27:43:3c:04:ec:2b:
89:6b:fd:d2:b6:b3:34:a5:b8:14:07:c6:00:83:5d:a6:28:bb:
af:10:91:c0:5c:50:42:41:90:90:b4:08:a4:bf:9e:15:55:e0:
47:9a:4e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:14 2025 by rpki-client