Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
File: vx1ZdLTlmcpy3MTawGbXcUIC78k.mft (raw, json)
Hash identifier: /ml2xKzfEnH4NEwrVl7pB8Ml6zkccdt+Ccx6Sw1Qb0I=
Subject key identifier: 37:FE:B3:6D:81:72:6B:3E:BD:00:50:32:77:35:97:F2:22:4A:77:8C
Authority key identifier: BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
Certificate issuer: /CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Certificate serial: 0199FD34628E0DA8367DFB9E5E6C3B7C01B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 16:01:32 +0000
Manifest this update: Sun 19 Oct 2025 16:01:32 +0000
Manifest next update: Mon 20 Oct 2025 16:01:32 +0000
Files and hashes: 1: oj5pO6PbAIedrwIhX-SgXkuxPgQ.roa (hash: chkdnhybp0jJ1hG80xmgFXkOcgLkze7nqAVVBuJ+bhU=)
2: vx1ZdLTlmcpy3MTawGbXcUIC78k.crl (hash: eCfzKmrKT9gMBgI9QWwExv6ZCezqzEbtraJg3EB0yFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:62:8e:0d:a8:36:7d:fb:9e:5e:6c:3b:7c:01:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Validity
Not Before: Oct 19 16:01:32 2025 GMT
Not After : Oct 20 16:01:32 2025 GMT
Subject: CN=37feb36d81726b3ebd005032773597f2224a778c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cd:54:1f:e2:fe:43:e7:4e:d7:07:4c:b9:8b:
c2:8c:df:41:5a:ff:59:eb:26:81:c5:2b:25:06:51:
88:d0:9b:8e:4d:6e:2e:bc:3f:1f:75:9f:82:15:53:
81:34:4b:33:cc:8c:da:80:e3:58:ec:54:f0:2c:5d:
fb:ec:b2:be:16:d4:25:81:07:07:6c:8f:96:b5:75:
ab:27:a5:03:65:e9:93:7f:ac:08:6b:d3:40:b9:ad:
9f:b0:52:14:9a:1d:a1:bc:88:61:98:95:eb:56:93:
f8:92:18:7f:c9:5b:91:3d:f2:08:e5:bd:f8:d9:b7:
6c:26:dd:b3:e5:c3:3e:3f:ee:d2:6a:08:14:29:26:
58:e6:d5:1c:1a:da:f9:50:89:0e:28:0e:96:5c:2c:
39:81:1f:0d:a0:49:c5:6b:3c:5f:1e:e0:aa:0f:7d:
e2:c7:12:4c:50:f8:5d:c2:f5:86:ff:52:70:44:39:
ba:8c:27:fd:60:9b:d4:26:28:11:9f:c5:fb:ed:bc:
f9:c3:70:be:6e:89:1e:a3:98:ce:04:63:63:d3:9f:
b8:65:19:5e:d5:3c:07:78:f5:02:9e:24:b4:90:b9:
7a:fa:77:04:a2:e2:54:08:10:d6:9f:ef:62:0f:54:
57:4d:e6:de:95:9f:0d:9f:78:46:b0:92:57:12:75:
88:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FE:B3:6D:81:72:6B:3E:BD:00:50:32:77:35:97:F2:22:4A:77:8C
X509v3 Authority Key Identifier:
keyid:BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1e:2b:18:bf:7d:e1:a7:a6:1c:1f:cc:4d:d3:5f:cc:16:52:
d3:95:68:f4:41:8d:19:55:00:a8:b0:64:06:77:f9:7c:27:8c:
01:5f:86:bc:52:36:08:5c:cb:33:51:36:85:c2:51:c1:53:43:
eb:c6:0f:ec:f0:33:fd:4b:04:65:1b:d9:b0:3b:a7:df:29:17:
7e:6c:e8:12:d4:ee:e8:c7:10:fa:25:da:30:59:3d:79:14:8d:
89:2e:0b:97:64:37:84:59:d8:cb:6c:8a:d3:4b:05:04:2a:96:
45:8f:10:d7:ff:52:64:7a:c7:e3:e1:2f:20:d9:dd:03:91:0d:
08:47:36:e1:dc:62:fa:28:93:55:8d:50:e4:aa:67:0d:40:67:
10:46:b8:72:44:5b:db:5e:67:32:47:a7:5f:29:16:7a:55:e7:
36:89:90:ba:e5:5a:d9:d3:12:14:41:7e:9a:42:37:2b:99:2e:
0e:b8:aa:53:9d:45:ed:d3:5c:55:d3:57:fa:5e:08:62:ee:1a:
9c:d6:e6:f2:f7:dd:96:9a:ab:d6:22:4c:9a:bd:79:07:ae:c3:
02:f4:84:fc:02:31:ca:ec:8b:d7:62:3c:28:10:91:ae:5b:ba:
cf:45:ad:65:e4:54:a4:9d:2d:29:e3:33:12:ce:6c:72:89:d5:
79:d9:25:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:08:58 2025 by rpki-client