
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
File: vyYxqJlAx3n72dojGh0umEDJx8Y.mft (raw, json)
Hash identifier: hZVoIFinDvz3W8m4zpXf/zHL6hGsOx/AH58r+Z/KhTY=
Subject key identifier: 18:FA:41:34:4A:34:3B:B2:F4:8E:D6:45:7D:22:C0:32:B8:CF:A0:8C
Authority key identifier: BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6
Certificate issuer: /CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
Certificate serial: 0199FCFD2D3E36647E011459C35731CFDA03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 15:01:14 +0000
Manifest this update: Sun 19 Oct 2025 15:01:14 +0000
Manifest next update: Mon 20 Oct 2025 15:01:14 +0000
Files and hashes: 1: DEn4JQPghs2T3ZxJbDlQm6KWdJI.roa (hash: L1xxxOCLHdiHBvdX2bAU1yEEGqFCGIfW3cUmFenxpnE=)
2: vyYxqJlAx3n72dojGh0umEDJx8Y.crl (hash: MbZb0CXSJX32tZ9IYa4an4gkl21Wlnny6ozVh/yn+bE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:2d:3e:36:64:7e:01:14:59:c3:57:31:cf:da:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
Validity
Not Before: Oct 19 15:01:14 2025 GMT
Not After : Oct 20 15:01:14 2025 GMT
Subject: CN=18fa41344a343bb2f48ed6457d22c032b8cfa08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:32:a1:61:fa:89:bd:e2:df:b2:ea:5b:b6:0a:
6b:53:cf:89:b1:7d:45:9b:5c:95:b1:76:f4:c3:88:
61:75:4d:67:58:21:96:20:80:6c:67:ca:92:70:58:
cb:87:3a:d5:fc:f8:c1:c2:85:4f:6a:b8:d0:52:ff:
8a:bc:c1:ee:57:af:17:9a:57:6d:85:ca:fe:76:65:
c0:c7:06:0f:45:91:b4:25:43:0c:39:57:55:86:c2:
5d:f0:51:4a:6e:c7:b6:c3:5d:c2:90:c8:de:dd:84:
fd:2c:0f:ee:50:5d:c0:ff:85:08:40:9e:a6:f3:59:
36:22:ec:23:76:f3:2a:9f:3e:3c:0e:e1:c9:79:a4:
4e:54:83:52:06:aa:46:aa:2c:aa:a7:90:d7:a5:27:
ac:64:e5:39:05:7a:81:a6:9a:d5:6c:fc:00:eb:04:
52:a6:56:a8:d7:59:13:66:9f:90:f9:2d:be:78:6b:
d2:ff:37:9e:97:45:f9:9a:c2:e2:37:7c:da:15:8b:
1a:3b:90:48:eb:3d:6e:17:85:59:18:84:67:32:7c:
f0:86:a5:80:f9:27:13:aa:36:4c:33:d9:b8:a2:6d:
be:5e:9a:40:9d:98:8d:1d:78:ce:07:c6:99:33:2a:
90:53:f3:22:07:50:b1:62:6c:a4:87:93:d7:1f:5e:
2f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FA:41:34:4A:34:3B:B2:F4:8E:D6:45:7D:22:C0:32:B8:CF:A0:8C
X509v3 Authority Key Identifier:
keyid:BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:06:f7:f8:7b:5e:c6:bf:89:0e:42:69:35:24:a1:e3:cd:f6:
c9:27:92:c8:3f:8b:f6:69:f6:83:de:c9:d7:c4:9d:cf:79:ae:
4d:70:fb:8b:68:8a:d5:df:b0:7a:c2:41:9f:73:2a:a2:ad:47:
05:cf:6c:fb:43:84:3a:9c:62:ca:50:91:af:84:9a:9a:e1:b3:
d1:0a:b8:f2:3d:09:51:9a:b0:61:85:71:7a:43:9f:bc:59:1a:
0c:23:95:f9:7d:4c:55:89:39:d7:7f:37:93:ca:62:f0:5e:91:
ce:26:9f:b0:44:89:d4:76:d6:2f:38:8d:bb:09:ac:89:4e:81:
69:a5:6c:19:45:a7:97:79:42:82:5d:dd:ec:b9:75:4d:3e:99:
f6:23:d7:ac:d6:56:f2:9e:1b:31:c0:6d:d8:10:7b:72:2b:eb:
1c:b5:41:d4:38:a9:2a:c2:0f:52:d0:a9:aa:7a:1a:f6:29:05:
76:a7:6e:ca:2a:07:e6:16:b5:2a:24:ad:14:df:a8:38:bd:30:
26:46:07:df:59:c8:e3:38:12:f3:6a:6d:00:f5:33:de:f1:79:
b2:e9:6d:cc:be:6d:8b:a2:ec:20:52:dc:fb:c6:f5:05:cf:3e:
97:6e:1e:d6:78:71:2f:d7:74:76:ad:7b:d3:68:ff:11:c0:25:
54:5e:13:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:44:45 2025 by rpki-client