Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
File: vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft (raw, json)
Hash identifier: 26Su0c+M9lySplee5cp0D0wWQsuCAf+WFCu7gHLzupA=
Subject key identifier: D3:CA:F5:01:5A:F9:F1:BA:02:B7:08:22:47:45:64:AB:01:89:E8:0F
Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
Certificate issuer: /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Certificate serial: 019A025A038DCD80EA984C751FA0B32C603A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
Manifest number: 16EA
Signing time: Mon 20 Oct 2025 16:00:44 +0000
Manifest this update: Mon 20 Oct 2025 16:00:44 +0000
Manifest next update: Tue 21 Oct 2025 16:00:44 +0000
Files and hashes: 1: 3alv3XwEbOFu7iiK8LFbOce6T6M.roa (hash: 0D37DkikXSNhNHk7nw4gpplDRFgdjXDIi3MfBRU1TWY=)
2: QfCE84C5mXjE3pc-vv8Z3PN8Ftc.roa (hash: fWz5/zlEwc/FfIJ7uTaCeiVlT5ulVNUEAcYZgSkvI+4=)
3: UKSPoLqIB9OwePcX6MiaKIQ_BKk.roa (hash: r2Jdc8SrerX8AADHr5ZXdXpVsMbJMBhTSOZg2PzUZsc=)
4: XuYgpmXug2q0Cu_sdJBe-1XGD2I.roa (hash: joQ8DCTmx5DI+ZzMDXT+0TtQtcaVPpX4LENPUyxWUVI=)
5: bl1f-poGtLSo5yagSqXyluvVirs.roa (hash: cpYv0yRUyLmXhceQZE6Ke54aLJ1RjsI2p0KUhTzYBqQ=)
6: dYt1KKj4tCGLif9Uw-PUq5XSPt0.roa (hash: VRn5rOavF3Z1TUQt1A8oCfFVCQrXkGJKkkqLjlnItNg=)
7: vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl (hash: +vWTCpDu58EGrQ0R2G+51InCk5JYBUvGji/cWAArZis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:5a:03:8d:cd:80:ea:98:4c:75:1f:a0:b3:2c:60:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Validity
Not Before: Oct 20 16:00:44 2025 GMT
Not After : Oct 21 16:00:44 2025 GMT
Subject: CN=d3caf5015af9f1ba02b70822474564ab0189e80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:9f:67:45:96:78:a4:fc:fc:51:29:18:07:
61:86:ff:90:18:fb:a6:69:c2:0c:ba:47:40:61:3a:
1e:e2:f1:21:64:ff:7e:11:17:a2:4c:97:af:13:8f:
d6:e5:f5:1d:68:a5:01:aa:c4:a4:58:16:e3:2c:97:
01:a1:2c:8f:96:f7:4c:47:46:c9:c2:36:7b:2d:99:
db:76:f2:d3:3f:65:13:35:31:ad:62:f9:72:84:68:
ed:c7:07:fd:48:b4:69:b9:c9:75:c6:58:3f:bf:d6:
a3:7c:05:5c:36:42:7d:aa:88:a7:d9:53:38:30:b7:
78:06:5d:0e:ee:d7:3a:b6:db:98:62:70:5c:68:0e:
93:1b:5f:10:25:60:6c:1a:4d:de:fd:0b:41:b2:52:
1a:f3:67:3d:0d:ea:05:59:a8:4c:37:48:b8:da:ff:
eb:93:f3:df:47:09:16:15:53:ba:b4:b6:49:6f:2f:
fe:60:9f:1a:c7:05:f8:47:cf:1b:90:33:db:a7:1f:
b8:ee:b5:ee:ae:fd:76:1a:da:f2:a6:4f:68:1e:93:
38:4c:8c:54:4d:99:37:e5:14:89:f1:ee:8d:9e:45:
0e:16:35:a2:82:5e:60:cc:db:5d:7e:e8:fa:e4:cc:
ff:ca:6a:9f:92:19:c3:c5:67:17:ae:08:4b:e4:10:
bd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CA:F5:01:5A:F9:F1:BA:02:B7:08:22:47:45:64:AB:01:89:E8:0F
X509v3 Authority Key Identifier:
keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4e:0d:6b:46:f3:78:f8:46:83:6b:95:3a:2d:06:b5:2d:4f:
cb:06:9b:0e:a7:4e:1c:52:ae:4f:e8:29:1a:da:c9:1b:ef:02:
82:e4:5d:dd:0f:75:e0:d5:d8:1b:d8:06:2f:b3:02:32:12:c1:
91:ab:f0:89:69:71:06:62:68:8a:fe:63:17:83:63:82:a8:75:
36:6e:50:85:22:36:60:c5:60:df:86:b1:b4:06:06:16:cc:d9:
29:ce:4f:02:71:03:0d:3b:ff:86:c0:70:1c:2c:a2:86:aa:4c:
17:66:25:81:99:77:88:52:a1:f7:42:7c:fe:e7:00:aa:af:27:
e1:22:d3:5c:9f:fa:1c:0a:8d:aa:3d:2c:25:57:f8:67:da:27:
4e:84:e3:bc:cd:bf:24:df:85:56:b9:1c:25:11:3e:0d:16:ec:
b6:db:ea:42:13:db:de:5c:a7:42:49:e8:64:f2:e9:2b:47:47:
21:e1:31:ef:2d:f3:0e:30:0b:5a:85:fb:a5:b4:85:fb:cd:d8:
c2:37:25:98:24:45:ce:f0:ee:3c:bf:ef:68:95:c6:9b:e3:1d:
5a:23:05:38:ad:be:24:19:7a:69:66:16:7f:82:d4:c8:b5:77:
bc:fe:ac:c7:c7:c4:0c:29:85:9f:a6:a1:71:72:8e:2f:67:b1:
1f:6d:fe:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:41:36 2025 by rpki-client