Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
File: _-vVS_BapQ7OnFJtDNVd5ivbEfs.mft (raw, json)
Hash identifier: F/xEwcI3pzJWnN0idwHA1JWNZ133si9o8rqXaEqKPOc=
Subject key identifier: CC:38:08:D2:AB:FF:D0:FE:EF:A4:8E:81:1D:5D:E2:28:86:79:3F:83
Authority key identifier: FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB
Certificate issuer: /CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb
Certificate serial: 0199FFC754F4557BCCFF72565EE8D207D02F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 04:01:17 +0000
Manifest this update: Mon 20 Oct 2025 04:01:17 +0000
Manifest next update: Tue 21 Oct 2025 04:01:17 +0000
Files and hashes: 1: JL56luCvuDGX5I8C7rCb_vRgTps.roa (hash: VNaKz+fumiDvVVA3InCplAYx5jTevb5UEEZ//o1jyAo=)
2: _-vVS_BapQ7OnFJtDNVd5ivbEfs.crl (hash: agfGIGZSkHLOzaAD8cwHQz8koUHxQEUBRbW/ZEMczu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:54:f4:55:7b:cc:ff:72:56:5e:e8:d2:07:d0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb
Validity
Not Before: Oct 20 04:01:17 2025 GMT
Not After : Oct 21 04:01:17 2025 GMT
Subject: CN=cc3808d2abffd0feefa48e811d5de22886793f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c7:da:88:de:d5:bf:5c:db:70:a0:64:8f:04:
d5:7d:4a:4a:8d:db:45:0c:ab:d6:b1:54:52:fd:86:
e8:d4:d1:0e:9d:63:c3:a7:83:16:38:d9:71:26:b5:
04:04:dd:e6:57:32:70:d1:dc:a9:5d:5a:f0:ef:62:
bf:1a:30:bf:58:18:62:65:d3:0e:77:0f:e8:d1:3d:
b3:6f:23:e7:5b:d9:98:06:73:03:33:c1:9f:5a:ea:
32:25:5d:c4:a8:53:77:2d:92:8f:05:da:75:44:c4:
ae:8b:70:38:f7:22:04:74:e8:1e:65:3e:e3:fe:3b:
68:0a:03:0d:2d:bf:77:b4:19:cd:b3:8f:98:30:39:
bf:84:8c:c6:ff:05:79:71:8a:f0:18:cf:dd:79:a1:
59:b3:e6:8d:ac:b4:14:a6:f1:62:b1:de:3c:76:6c:
b7:1d:56:8b:81:6f:2e:08:65:f4:dc:bc:a8:c2:5c:
f7:50:f6:1c:26:cc:a4:6e:45:1a:65:37:af:fa:ba:
d0:26:01:c8:ae:1b:1c:fa:a2:b6:21:c0:ee:2d:82:
81:f2:8d:22:68:b4:3f:29:3d:52:e8:98:7b:6d:5f:
ee:68:bc:1b:3d:58:97:9b:26:77:a2:d4:3b:69:3e:
ea:da:3b:01:7d:26:5f:f8:68:6e:91:49:54:39:63:
49:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:38:08:D2:AB:FF:D0:FE:EF:A4:8E:81:1D:5D:E2:28:86:79:3F:83
X509v3 Authority Key Identifier:
keyid:FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ee:90:b8:6e:59:44:84:1c:b4:b0:d4:03:fa:f1:f0:f2:f3:
2e:e5:82:58:bb:a7:46:87:b1:49:38:9f:85:ec:fb:f1:a8:1d:
b4:a0:4c:e8:16:bd:ab:a1:93:f6:54:91:24:ac:35:3b:f1:69:
57:79:22:a3:3f:86:3a:7c:7c:13:2f:df:1d:7a:53:b6:ff:1c:
e1:f1:81:16:ef:9d:0a:7a:fa:ec:f6:c1:4a:cf:16:22:c2:33:
ed:ee:41:dd:ef:65:15:fa:1a:53:6f:fb:1d:48:03:1c:f4:16:
bb:81:05:b6:09:97:52:01:fd:f0:ba:15:10:3b:27:84:5f:b4:
a3:e3:7c:94:fb:c7:d1:5c:b0:f6:12:ba:dd:98:96:b5:a4:76:
1a:1f:cc:58:0b:ff:90:7d:28:3d:79:a3:7f:0f:da:fa:40:cf:
0b:d9:77:53:9c:25:1d:4e:78:03:35:8c:07:b3:4a:73:47:cd:
8b:11:bc:34:cb:52:c4:cc:31:70:2c:48:86:4a:59:41:44:7c:
1c:85:7f:cc:90:b9:16:08:ff:46:12:3a:c2:82:0d:2f:32:9d:
e2:b7:35:66:fa:4d:c6:b5:1d:25:74:ea:52:f5:1c:72:64:80:
f6:47:a6:7f:13:15:9f:37:f0:e8:74:f4:5f:f8:a1:ad:f2:24:
9d:06:8a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:08:46 2025 by rpki-client