Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
File: vttqTtOT2KO3UH-Wo4vuDEyLR38.mft (raw, json)
Hash identifier: iDb2ZcFSx2T6AqAqGCbDSQcZ9ehZE4fhbDkCPcmVKjI=
Subject key identifier: 66:6A:A6:9F:5F:D1:DD:49:65:A7:B4:98:10:DB:16:60:F4:18:E8:51
Authority key identifier: BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
Certificate issuer: /CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Certificate serial: 0199FFC8BE1EB062B864C8E5643188E11D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 04:02:49 +0000
Manifest this update: Mon 20 Oct 2025 04:02:49 +0000
Manifest next update: Tue 21 Oct 2025 04:02:49 +0000
Files and hashes: 1: 70lNK5fBDtyKP1-Uoyim5AlDIhs.roa (hash: j96/AeWDc3evjhceJaK+DEno6uY4hCQMsDxAEfX1LUM=)
2: vttqTtOT2KO3UH-Wo4vuDEyLR38.crl (hash: A72jhi8tjkTZ+rIqEFlCJQIlvxQGwqqu9zjU42zUh6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:be:1e:b0:62:b8:64:c8:e5:64:31:88:e1:1d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Validity
Not Before: Oct 20 04:02:49 2025 GMT
Not After : Oct 21 04:02:49 2025 GMT
Subject: CN=666aa69f5fd1dd4965a7b49810db1660f418e851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:ba:bb:47:71:cc:6f:2a:ac:10:38:60:9c:
19:75:be:54:65:11:4f:c1:18:2f:de:4b:df:c2:9b:
21:21:3d:a5:57:31:11:e5:c6:4a:b0:d5:71:04:4d:
b2:16:af:88:ad:7b:ad:4f:93:d0:05:e3:11:50:62:
78:33:bb:b5:a2:99:b4:1c:27:9f:e1:f9:db:98:67:
96:00:fa:26:8e:b0:ca:60:75:4e:39:a1:48:7e:29:
d1:65:a7:f5:a8:c3:4c:68:92:44:7f:05:44:79:5f:
d1:d0:4d:77:34:a2:58:08:15:91:e7:ab:54:ef:63:
15:55:c8:71:41:b3:34:f3:ef:35:15:ac:55:1c:b8:
97:af:4e:cc:6f:8a:3d:51:b7:eb:47:3a:ea:21:55:
75:0b:f4:69:f5:b9:40:e9:7b:92:52:a3:fe:6b:8e:
bb:63:a5:5c:f4:5c:b9:e7:e3:8b:a9:07:73:7a:c6:
c3:fa:1a:b8:2c:06:ca:ce:39:c4:2d:0b:64:a6:86:
06:81:8d:db:de:0a:25:8d:e5:07:42:e1:0c:de:00:
58:e8:32:19:9a:ac:36:c6:d2:21:7f:aa:57:95:4a:
7d:9b:7b:fc:70:b4:7b:0e:3f:40:44:d7:83:5c:bb:
cc:92:bf:a5:bd:dc:91:06:3a:a5:13:42:b6:16:b0:
ea:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6A:A6:9F:5F:D1:DD:49:65:A7:B4:98:10:DB:16:60:F4:18:E8:51
X509v3 Authority Key Identifier:
keyid:BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a8:69:a6:4a:de:91:0b:9a:bf:bc:7f:1d:f6:e1:f6:c6:3a:
82:f8:55:80:87:59:57:52:06:67:f8:13:59:e5:60:4a:14:71:
a9:18:76:b1:d8:09:59:7f:09:7b:f4:32:2e:31:f2:26:f4:c8:
3e:26:f7:77:57:b2:7f:73:83:9e:b5:f5:6c:f9:9c:3a:52:4e:
a3:10:70:c3:65:66:d8:e9:85:d2:30:9c:12:7c:8c:88:a8:67:
73:06:1a:dc:e2:e0:fd:fc:ac:f9:da:62:b5:ee:fd:27:e2:c9:
05:57:90:ea:70:06:25:28:46:58:36:e1:75:c6:87:2e:96:31:
0b:bb:d6:99:1e:da:b0:29:2a:51:2c:fd:5d:38:7c:d6:dc:d4:
e8:86:0d:79:7f:36:d9:aa:d1:9f:fc:ab:c5:2b:fd:3d:64:a5:
2c:b1:33:25:ac:27:8f:47:4b:d7:78:e6:1e:f8:e2:49:7c:e1:
47:ea:67:f5:df:55:c6:73:38:c1:ee:f4:76:43:9e:59:df:5c:
1a:00:d8:d0:45:26:b2:db:c5:39:9c:db:11:9c:c5:de:64:d5:
98:0e:d7:72:81:05:2f:3c:f1:7a:91:64:d2:cb:be:22:61:a1:
29:73:4c:18:6f:84:84:38:47:cd:b6:40:61:1e:9a:7d:7e:73:
e8:de:03:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:58:55 2025 by rpki-client