Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
File: vK-LpZ96PF0A_grUVk2AUk33-pA.mft (raw, json)
Hash identifier: XzvCptPfGa/n+Cdpcan+zsvsgPhkmDRDIy7971xkcec=
Subject key identifier: AF:D7:01:72:C9:78:8F:03:14:93:2D:1A:B8:50:05:CE:B8:2D:42:11
Authority key identifier: BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90
Certificate issuer: /CN=bcaf8ba59f7a3c5d00fe0ad4564d80524df7fa90
Certificate serial: 0199FC219144A372FD60C745DA349410E90E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 11:01:22 +0000
Manifest this update: Sun 19 Oct 2025 11:01:22 +0000
Manifest next update: Mon 20 Oct 2025 11:01:22 +0000
Files and hashes: 1: A27u4uaTW6Wfn1YJN7sriqWyvlY.roa (hash: eRUT0mnKKp1D1eZhZRZxpjyCM3yHa+jgOt2PMVH/I+o=)
2: vK-LpZ96PF0A_grUVk2AUk33-pA.crl (hash: 2J0Z7UGXKLhA6ePoXXE18HpjgzJjIEuDmTIdfQqypB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:91:44:a3:72:fd:60:c7:45:da:34:94:10:e9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcaf8ba59f7a3c5d00fe0ad4564d80524df7fa90
Validity
Not Before: Oct 19 11:01:22 2025 GMT
Not After : Oct 20 11:01:22 2025 GMT
Subject: CN=afd70172c9788f0314932d1ab85005ceb82d4211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d2:17:68:f3:13:6e:4f:ec:f9:51:fa:52:99:
0a:5c:a0:7e:23:ba:01:ed:20:c7:d5:65:d3:76:c1:
cf:69:7c:f3:36:45:ad:de:54:a2:13:c9:da:f9:29:
b8:fa:56:af:f8:c7:0b:b7:a4:c7:42:91:3a:b0:67:
f9:bc:92:c9:96:81:46:5b:b4:d1:d7:60:18:f3:cc:
ab:8d:6b:50:ba:c0:14:bd:43:29:0e:73:a1:9c:3e:
30:12:0e:7e:c0:60:54:3b:e0:2f:c9:2d:81:68:f9:
3b:64:bc:6a:38:9d:52:a7:8b:83:36:5d:5d:4e:aa:
37:d4:b8:2a:72:ad:06:3a:3e:d3:67:b2:35:28:cb:
6e:57:d9:4b:c8:b4:85:1d:a4:7a:f7:cf:62:08:61:
fd:fb:00:fb:12:44:50:72:1b:c6:a2:d6:b9:9a:94:
fe:b8:07:47:a7:1c:34:0c:12:17:fa:eb:4d:aa:03:
95:03:d0:27:db:cd:23:d4:10:20:cf:82:92:82:32:
36:ca:0a:f3:07:15:41:e1:c9:f7:0b:b2:2c:39:5f:
7d:79:05:00:03:27:4a:5e:35:6e:a4:18:c7:5e:3c:
f7:fd:3c:f5:cd:8c:f7:12:6c:52:f1:5b:96:9f:4a:
82:67:dc:63:37:a5:c9:f0:f9:93:38:e8:89:18:5f:
4b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D7:01:72:C9:78:8F:03:14:93:2D:1A:B8:50:05:CE:B8:2D:42:11
X509v3 Authority Key Identifier:
keyid:BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:8b:b5:1e:0b:a8:54:7d:92:1e:68:4e:28:90:7d:04:3d:23:
fd:bb:5a:ec:44:7c:79:cd:1c:b1:dd:87:e4:ba:21:7f:c4:10:
ac:d1:76:14:7b:15:b7:a0:3c:4c:96:3a:9c:94:e8:63:81:0a:
8a:e4:7d:6d:79:f5:9c:04:1e:3e:d3:95:11:9a:d9:e9:a8:e4:
48:8f:82:eb:90:c5:a4:f9:5c:f4:f7:7d:62:2f:09:43:b8:cd:
b5:0d:24:1a:22:e5:40:cf:c1:fc:f3:29:1e:a9:dc:b2:2d:36:
da:2f:83:a8:82:d8:b9:3f:23:86:d2:b3:30:f6:b5:68:50:04:
4f:80:0a:17:d6:1a:7f:bd:c7:3d:e5:5c:7a:87:50:63:97:d8:
c8:95:3e:d5:2a:83:71:f2:36:7a:83:9c:dc:30:42:f4:f1:2c:
68:bd:40:2c:ea:b4:ea:d5:27:84:ae:7b:61:48:f1:4c:d4:61:
12:96:21:c5:3b:d8:f0:7d:5d:f5:6b:20:9b:79:45:cb:b1:46:
77:17:0d:0f:e2:b9:66:2b:69:10:01:78:6f:71:d0:c7:50:53:
bc:5f:25:d2:cd:4f:b4:fa:1e:57:e9:a2:77:fa:b7:b2:28:4b:
74:c3:6e:e1:5f:7c:a9:98:2f:08:22:b6:94:f6:82:95:51:64:
fe:2c:df:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:51 2025 by rpki-client