
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
File: vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft (raw, json)
Hash identifier: 2jslpbsFo1ktlo6I75MZqpDgIeeQkJLtaQAPwEkFRwY=
Subject key identifier: 38:C4:DD:63:E9:71:9B:12:E4:97:FF:6A:D5:A6:96:0D:9B:3F:19:53
Authority key identifier: BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
Certificate issuer: /CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Certificate serial: 0199FBEB9AEE9C29153779F3C79FC4EBFBD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
Manifest number: 0D13
Signing time: Sun 19 Oct 2025 10:02:25 +0000
Manifest this update: Sun 19 Oct 2025 10:02:25 +0000
Manifest next update: Mon 20 Oct 2025 10:02:25 +0000
Files and hashes: 1: 5xqkx7rxr0A4ZoZWTCOMeWbUwt0.roa (hash: 4Hck3JY+pm1ENmjLoSNCLwI2ygQA04QrM7UO64TPQ/E=)
2: Tf-7kei6W8Gb1yTlztC-z7hqkGM.roa (hash: A3Jg7NsFsBNEFPdV1BOzgwIAFoCzktMr6ou5P5ENzQU=)
3: vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl (hash: 66Y1cu6pTRTe0Rh/xf+3RgqeSJu7eThgGrMyWR4OqtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:9a:ee:9c:29:15:37:79:f3:c7:9f:c4:eb:fb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Validity
Not Before: Oct 19 10:02:25 2025 GMT
Not After : Oct 20 10:02:25 2025 GMT
Subject: CN=38c4dd63e9719b12e497ff6ad5a6960d9b3f1953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:85:a8:7c:14:d9:42:f3:c5:f3:c7:44:f1:
aa:de:33:76:0f:30:c9:4d:56:cc:de:ed:99:53:9d:
8e:01:39:48:ff:67:d8:16:45:29:1d:cf:55:c1:eb:
81:62:8b:5b:20:2b:4c:12:d1:d6:0b:cc:7b:14:c2:
9d:1c:4a:6c:19:ea:f6:ce:7a:d4:5a:ed:40:c7:81:
a5:3e:1a:11:1d:b3:ee:c4:68:59:9d:2a:49:3d:71:
35:36:b2:7c:f3:05:4d:bf:e0:ea:3c:18:8b:ff:f1:
8c:b3:cd:87:6d:1e:d4:ef:1b:e6:f5:ce:dd:04:64:
17:68:d3:19:5f:00:a3:e0:f5:06:c7:20:92:75:f4:
bd:aa:05:b9:b6:f6:d0:d7:b2:04:37:33:2f:44:8d:
c8:da:61:2c:17:1d:cf:ec:97:21:40:51:f1:d8:0f:
66:8e:17:6e:13:a7:1f:39:d2:76:fa:2d:50:c4:12:
91:4a:14:6d:b5:ba:a4:b7:f1:8c:58:2d:62:a5:44:
fb:75:9a:63:10:3b:09:a0:fd:68:13:b6:3a:d1:e4:
8a:b9:54:d5:a5:cd:26:55:d2:29:c5:cd:0a:c5:b7:
d4:62:3b:b1:31:85:3c:4b:59:be:aa:2b:dd:31:a5:
d8:c8:d8:23:ec:bd:48:d0:ff:dd:50:18:c3:0e:e2:
52:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C4:DD:63:E9:71:9B:12:E4:97:FF:6A:D5:A6:96:0D:9B:3F:19:53
X509v3 Authority Key Identifier:
keyid:BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7c:ab:12:26:58:21:85:5c:0c:5b:5c:42:c4:a5:46:9b:e4:
5f:61:98:c1:d7:1f:40:b9:9a:08:54:6d:98:9e:7d:3e:0a:30:
21:df:b5:57:2e:86:a5:2e:da:52:68:04:1b:08:3d:00:a7:a5:
81:fd:b1:2f:10:59:81:26:96:67:51:43:e4:69:6e:71:ab:a0:
9b:28:6b:26:63:ae:8e:d2:ea:c5:19:62:fb:de:9a:2e:eb:6d:
f5:f2:53:4f:d4:5f:5a:99:f5:06:bb:d2:e1:82:a4:44:5a:27:
5f:6c:2f:5a:eb:f2:b1:b4:bd:b5:96:38:bf:55:38:2b:35:0a:
a4:a6:77:fc:a6:54:6f:96:d7:3e:f1:d3:dc:99:10:0e:ae:c8:
1b:b5:db:11:30:a4:40:83:e4:b3:28:ed:25:7a:9e:be:6d:cc:
10:43:ea:f6:bc:90:66:4e:c7:43:70:b8:0b:e8:08:1a:d7:fe:
eb:dc:bc:e7:00:74:a7:08:6a:af:ee:46:c7:13:8f:d3:ce:06:
57:51:90:53:cf:06:50:a6:8b:ad:d5:83:26:a6:5e:23:9e:a7:
e9:6f:13:01:79:a1:26:47:af:ca:66:cf:a1:4f:85:fe:f8:81:
31:69:28:78:ab:0b:e8:ea:ea:ad:63:28:c0:32:3c:f3:1b:8c:
94:2d:6d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:21 2025 by rpki-client