
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
File: vfyN37hBh58OUw3OO3-Fgn8MGT8.mft (raw, json)
Hash identifier: ncPSilbuk7GPnwNZ6BRm1TU8g3j2FW6hF9W+71tmoAI=
Subject key identifier: EE:89:9A:93:BF:48:85:77:51:0B:CB:0C:39:AF:E2:DC:57:D8:1E:BE
Authority key identifier: BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F
Certificate issuer: /CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
Certificate serial: 0199FBEA9DFD096AB5CAB9B0D47A55ADDC2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
Manifest number: 0662
Signing time: Sun 19 Oct 2025 10:01:21 +0000
Manifest this update: Sun 19 Oct 2025 10:01:21 +0000
Manifest next update: Mon 20 Oct 2025 10:01:21 +0000
Files and hashes: 1: evKF7Ghixw06TsX8m9WS1kttuTQ.roa (hash: C0t0ubGvyf/fMEfN+yYg9iML6okU33nNE7cYDrXAdGg=)
2: vfyN37hBh58OUw3OO3-Fgn8MGT8.crl (hash: DQjWAOG+Cy5JJYBkdkGTFVcziwLLAJVd6m+yR42Ezno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:9d:fd:09:6a:b5:ca:b9:b0:d4:7a:55:ad:dc:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
Validity
Not Before: Oct 19 10:01:21 2025 GMT
Not After : Oct 20 10:01:21 2025 GMT
Subject: CN=ee899a93bf488577510bcb0c39afe2dc57d81ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:7f:09:ec:28:57:d1:fd:4f:39:17:0d:6a:
73:19:85:12:18:39:73:23:57:18:6d:1b:83:e7:a1:
68:42:7e:29:73:d4:7c:95:24:07:c7:6b:c9:bb:ef:
d6:2c:1e:34:3a:ab:b5:66:25:19:26:35:ea:cf:f5:
74:02:4d:a3:f8:92:17:27:a9:c6:7b:25:9f:41:bd:
98:4a:d2:2f:e3:bc:ab:fb:58:8b:a9:69:e0:e3:56:
3c:89:3c:10:9f:a9:59:35:e0:73:51:39:60:c4:35:
ae:bb:49:de:73:41:08:b4:6b:d7:92:a0:7d:85:66:
e1:32:e9:1a:8f:39:92:e1:74:12:21:e7:96:f8:6e:
05:ae:7a:bf:24:d9:f3:92:3b:f7:17:5b:d4:a2:6d:
57:9d:c4:88:8d:92:27:f1:1f:1a:68:89:04:36:f0:
9f:45:fd:53:cf:ca:5f:54:90:02:18:b3:da:49:43:
91:bc:17:9e:aa:6c:2c:b2:56:7f:84:92:b7:b1:93:
9c:27:31:39:a8:90:4c:17:4c:df:9c:5a:92:02:f0:
27:2f:1b:ca:ea:50:31:07:e5:00:58:92:f7:a5:47:
a1:d7:35:ff:26:01:60:51:1e:b9:24:a0:db:2a:c7:
24:36:1e:1b:20:d6:01:ff:9e:e4:32:44:7a:4d:a7:
64:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:89:9A:93:BF:48:85:77:51:0B:CB:0C:39:AF:E2:DC:57:D8:1E:BE
X509v3 Authority Key Identifier:
keyid:BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:64:d4:95:58:a3:f0:0f:02:68:e8:49:8a:5d:a1:5f:b2:e0:
6b:f7:08:2d:ba:6e:08:bf:3a:36:6f:5f:48:4f:d7:30:f2:80:
05:04:29:c8:29:7d:1a:2d:f1:8d:7e:0a:a6:3d:f8:bf:91:df:
23:18:7b:e7:56:41:dd:22:5e:13:b3:fc:e2:f3:b9:dc:a6:2e:
03:63:0e:8a:e7:bb:eb:d9:0f:2c:84:78:23:02:b0:9c:19:ce:
f7:10:59:f3:d4:b7:ba:b2:88:09:f8:55:6e:4a:d7:55:ea:08:
47:6e:4a:d6:e2:5e:9d:3b:6f:b6:ce:8a:64:84:6e:c9:83:fd:
ee:ed:5a:c0:8d:2f:16:0c:1b:ca:a1:ec:5a:09:79:86:ba:8f:
59:0a:c4:46:66:24:b9:08:a6:65:66:a7:7f:bb:76:ed:d9:e9:
43:d8:f2:01:50:70:11:19:ea:2d:30:1f:27:53:46:c4:81:1e:
32:f1:96:fd:5b:99:3b:5f:00:16:a0:46:ad:90:bd:35:b7:3a:
3d:8e:f2:6c:e8:6f:08:a6:47:d6:dd:61:4c:63:5b:87:b9:e4:
aa:77:87:46:87:30:8a:78:6a:7a:01:8f:67:32:24:2d:32:46:
64:82:7d:1d:8d:ab:25:ce:29:b4:66:59:b2:11:84:fe:88:ee:
34:5a:46:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:54 2025 by rpki-client