Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft
File: vYqFV99_ssQY-OvxfAoe8GJddKM.mft (raw, json)
Hash identifier: SoNIl2lhkjKWcWU8mvJfgLlluOf6Moy+aO2LCATG0Zo=
Subject key identifier: 19:4A:1F:CE:5A:F3:CD:15:14:27:C6:36:28:88:58:0D:8E:69:8F:65
Authority key identifier: BD:8A:85:57:DF:7F:B2:C4:18:F8:EB:F1:7C:0A:1E:F0:62:5D:74:A3
Certificate issuer: /CN=bd8a8557df7fb2c418f8ebf17c0a1ef0625d74a3
Certificate serial: 0199FD6AD3EE3DA376A20EF6C42FDF922A94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft
Manifest number: 0686
Signing time: Sun 19 Oct 2025 17:01:00 +0000
Manifest this update: Sun 19 Oct 2025 17:01:00 +0000
Manifest next update: Mon 20 Oct 2025 17:01:00 +0000
Files and hashes: 1: 1-F1dC3gm9bPEhI6Q-p2D7L1QBrg.roa (hash: daRs+QD0gbPIEc7NEpV/tWArongeaf2OpCfMozGCDfE=)
2: vYqFV99_ssQY-OvxfAoe8GJddKM.crl (hash: e+bXjsAQhanc9dDtpQH/upqrELABF2FHC/QD30DH/pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:d3:ee:3d:a3:76:a2:0e:f6:c4:2f:df:92:2a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8a8557df7fb2c418f8ebf17c0a1ef0625d74a3
Validity
Not Before: Oct 19 17:01:00 2025 GMT
Not After : Oct 20 17:01:00 2025 GMT
Subject: CN=194a1fce5af3cd151427c6362888580d8e698f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e5:41:26:fb:51:fc:24:52:6e:34:67:6a:55:
ed:7d:7b:e9:cb:55:be:b7:7d:d7:63:26:46:24:98:
bf:55:be:95:48:99:18:ab:bd:68:24:4a:79:5d:72:
f5:67:c2:91:25:31:a9:57:b0:63:16:a0:0b:8b:1c:
da:d8:7c:8f:77:47:ce:aa:8b:07:d8:c9:fc:30:1e:
3a:32:f3:ad:a7:ea:6f:90:ca:59:0e:23:c4:21:fb:
8f:51:58:41:cc:21:7f:3b:35:50:04:3c:e7:06:99:
e9:0a:58:c3:0c:3a:dd:87:5b:52:57:c4:ec:52:67:
76:1b:09:96:6e:c7:5f:4d:8f:0d:61:5b:38:5e:9a:
22:1e:88:2e:00:94:60:ea:28:c4:6c:43:7d:75:1a:
2e:8b:cd:aa:62:12:71:c3:6b:f9:37:ea:77:ab:c2:
bf:75:3e:40:bc:90:8e:27:b8:f5:77:e4:a3:ec:f5:
c7:75:73:9d:13:f4:e7:f9:69:06:2e:3e:3e:35:79:
bf:23:eb:71:c6:de:df:83:35:e7:06:67:2e:78:b4:
39:f6:d5:4b:8f:03:98:1f:81:42:17:dc:32:05:0a:
22:77:03:8c:a0:50:cf:10:24:87:73:8c:73:9d:e7:
b6:30:aa:6d:4d:72:c4:c1:3f:80:19:26:a3:fe:8b:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4A:1F:CE:5A:F3:CD:15:14:27:C6:36:28:88:58:0D:8E:69:8F:65
X509v3 Authority Key Identifier:
keyid:BD:8A:85:57:DF:7F:B2:C4:18:F8:EB:F1:7C:0A:1E:F0:62:5D:74:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:66:cb:23:3a:e2:16:90:4e:cf:82:c6:13:8f:09:b0:19:1c:
a8:a9:7f:4d:f9:12:f3:4d:74:4d:01:e2:de:90:bc:3d:5e:d5:
19:eb:c7:23:53:cf:dc:4b:2a:67:f0:07:ee:c3:8e:8d:f7:8d:
cc:eb:c8:f8:0c:d9:6a:78:37:1b:3a:fb:ab:51:76:53:95:6c:
44:5d:85:07:e1:38:89:0c:69:8c:73:ec:d7:97:7e:99:31:ac:
5f:48:59:d3:c2:c5:e0:79:a8:12:9c:2d:c0:0c:8b:09:8e:2c:
e5:8c:c4:be:23:b4:b9:8f:4e:bd:aa:52:a2:a1:1d:61:5e:ab:
22:ee:6b:1a:1d:60:b8:49:8b:61:16:ed:71:29:0c:41:8d:e9:
e7:d1:7e:15:1a:25:2b:94:c5:43:e0:de:25:f5:b8:c6:e6:45:
49:8f:d2:53:0f:b7:7c:9d:f0:79:86:99:22:bb:e7:3b:e8:eb:
9a:ef:ed:41:29:ce:5b:b0:5d:f0:36:f4:4a:fc:da:13:cc:f5:
4f:cd:d1:8d:68:7a:04:d6:b5:df:4b:13:8f:ff:e5:75:d4:d5:
8c:08:5d:21:b0:05:41:a8:a3:18:10:d1:45:1f:af:8a:a7:da:
97:c6:ab:5c:09:3a:64:e9:03:b8:11:dd:69:23:ef:b0:cd:4d:
37:77:3d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:01 2025 by rpki-client