Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json)
Hash identifier: xRpfnSMC4JjOQBB2nIn0sy5xI3eMt+Gp9GY3DWs+EiA=
Subject key identifier: 34:14:28:67:8F:7B:D3:3D:D8:95:4F:CA:C6:32:91:F3:CF:EC:57:AB
Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Certificate serial: 0199FCFDA0C2CB87B2F5C58343F235EC53B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 15:01:43 +0000
Manifest this update: Sun 19 Oct 2025 15:01:43 +0000
Manifest next update: Mon 20 Oct 2025 15:01:43 +0000
Files and hashes: 1: BF5uYM34somF3uKBjwVBv6TvSUc.roa (hash: LMQTKQzXnQ/SBYJGX5sPOQPjZo/gmRmiCPcpMivc64U=)
2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: BxGnUjVpWLzelHknRiuTb7ZnzRhC26i0IOaP6l07Xmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a0:c2:cb:87:b2:f5:c5:83:43:f2:35:ec:53:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Validity
Not Before: Oct 19 15:01:43 2025 GMT
Not After : Oct 20 15:01:43 2025 GMT
Subject: CN=341428678f7bd33dd8954fcac63291f3cfec57ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:28:13:a8:70:c7:c6:85:b1:06:a4:ad:4a:1d:
25:2b:38:4e:15:69:3c:3c:9c:34:83:f6:15:f8:9a:
60:c9:07:b0:66:17:3b:41:06:b2:59:fa:c9:80:bf:
7f:cc:85:26:90:49:6a:3b:7d:b5:cf:19:66:17:f7:
10:28:ed:83:af:fd:17:f0:62:df:59:2b:31:11:57:
5a:ca:a6:2a:33:56:b5:0c:e5:49:92:03:99:3d:98:
c7:cc:ae:8f:a8:7a:7a:f4:e1:c4:ec:d6:1b:31:9a:
85:2c:9b:bd:d7:87:02:67:d5:d2:55:34:aa:90:34:
1e:4b:e0:bb:2c:49:35:b1:ed:a4:5f:74:22:54:78:
0e:af:0e:6f:d4:43:b9:41:97:9c:5d:38:77:dc:f6:
19:f2:7c:c9:59:fc:bf:f4:85:d7:e8:dd:8a:d2:a3:
a2:b2:ba:f8:bf:07:e4:4b:4c:9e:be:29:2a:d8:fb:
8b:ce:12:b2:04:e4:21:c6:39:6f:2c:1d:06:e0:ea:
77:cc:59:49:08:a7:1c:55:6c:48:de:6a:d6:33:0d:
c5:9d:50:9b:a4:06:d8:ac:1f:e3:e4:4b:65:2f:ac:
1a:7a:b1:35:9e:5a:2b:fd:74:c5:5b:75:d5:b7:09:
1c:9b:dd:bc:35:41:98:aa:23:2d:9d:d5:b2:d6:0a:
bb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:14:28:67:8F:7B:D3:3D:D8:95:4F:CA:C6:32:91:F3:CF:EC:57:AB
X509v3 Authority Key Identifier:
keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1a:6a:ca:6a:4f:05:31:b0:de:ac:1a:c7:ec:6a:3a:5f:61:
0e:f0:af:b4:d8:bd:78:5b:d7:a7:bf:9b:4f:2c:ac:72:07:a4:
dd:e7:13:1c:9d:8c:f1:35:16:c0:e9:42:d1:42:92:9b:db:fa:
28:21:0c:3e:c4:b2:45:f8:62:56:67:f1:51:87:93:03:42:74:
38:42:5f:4f:0f:5e:12:a5:96:9c:d7:d4:59:a3:03:d3:68:48:
46:06:d9:83:2b:5f:73:0e:fa:36:94:bb:ee:d4:fb:c5:16:79:
f7:bf:03:2c:f1:19:fd:96:c8:ac:b1:b6:9a:e6:03:01:fe:b8:
85:1b:8f:80:80:93:da:79:ed:04:56:02:20:c0:41:47:5d:1f:
23:7f:f3:74:d2:5e:22:5d:9a:bd:02:1e:17:7d:6c:a3:52:d6:
a1:b0:d7:36:28:8c:5d:4e:7d:43:0a:d6:ff:2b:a5:b4:e5:bf:
43:51:5f:65:32:f9:d5:7d:37:f8:b8:a5:50:13:0d:d7:af:46:
ed:e7:be:a0:87:88:0d:ca:37:6b:85:de:b8:8c:49:ed:04:f8:
f0:ad:aa:e3:cc:48:45:ff:fb:97:29:ea:92:a5:16:cc:c0:8c:
28:08:87:bf:e5:64:fb:0e:5c:06:c4:91:ac:e4:1e:0c:6d:4b:
39:d4:ca:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:15 2025 by rpki-client