Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
File: vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft (raw, json)
Hash identifier: gQDjByn52RJkGVmik6uXCAx9c6y8OSJM608TEo2QuP8=
Subject key identifier: 06:46:15:41:07:E7:0B:E9:EB:43:E1:C2:AF:4B:56:B1:85:38:35:57
Authority key identifier: BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9
Certificate issuer: /CN=bd82e60d072e5185435a900e323f463806d433c9
Certificate serial: 019A0034FA273094A649007B1A92F94BAC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 06:01:03 +0000
Manifest this update: Mon 20 Oct 2025 06:01:03 +0000
Manifest next update: Tue 21 Oct 2025 06:01:03 +0000
Files and hashes: 1: vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl (hash: LTWZm+twBMWtDb3TLLDEaBVPGbKcjpM7cJvWh+g0BkA=)
2: zHFsSZojvy_X7uL-vPL2okM6zhI.roa (hash: n8rylT6z4CcEms6K9HKeeDe6KPQo1phvGPnzqc1vlUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:34:fa:27:30:94:a6:49:00:7b:1a:92:f9:4b:ac:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd82e60d072e5185435a900e323f463806d433c9
Validity
Not Before: Oct 20 06:01:03 2025 GMT
Not After : Oct 21 06:01:03 2025 GMT
Subject: CN=0646154107e70be9eb43e1c2af4b56b185383557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8b:08:60:c7:59:03:98:3d:7c:83:19:63:01:
3e:89:4c:44:8d:ab:50:d3:3f:68:95:ca:86:79:cd:
8c:80:d8:99:ba:d0:17:34:9e:d8:e4:42:c2:92:59:
4f:be:f3:9f:04:96:88:78:15:7b:56:b4:c4:50:95:
18:5d:d5:a2:a4:93:bf:3f:ce:d2:3a:c0:0e:56:9e:
75:e6:8e:6f:b8:ce:31:0e:5a:b5:2f:c4:c2:e7:94:
fa:38:94:0f:6b:c1:a4:4f:fa:f7:2e:0f:8a:c5:0a:
14:60:30:a4:fe:80:a7:62:04:9f:1c:16:09:86:71:
30:08:34:b5:b2:91:c9:4c:81:84:be:4f:80:59:5f:
12:82:ef:1a:c3:ba:89:73:f3:42:24:0b:8d:93:49:
62:e1:19:24:2a:1e:9d:03:95:3b:e5:74:41:8c:81:
ee:f7:0f:cf:05:98:46:ff:f9:84:60:b1:58:5c:0d:
46:0f:46:10:3f:6b:6f:84:10:67:0f:75:e5:67:b5:
2b:7c:00:00:93:dc:ed:5f:43:38:f6:cb:d3:34:fc:
88:09:91:9a:d0:b9:6e:17:53:ac:bf:13:48:7d:c6:
93:25:86:1d:a2:88:d4:59:28:8e:f2:ba:7b:da:65:
79:b6:08:cc:a9:64:4a:77:9d:7b:03:80:4f:bd:40:
9c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:46:15:41:07:E7:0B:E9:EB:43:E1:C2:AF:4B:56:B1:85:38:35:57
X509v3 Authority Key Identifier:
keyid:BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:71:56:dd:62:76:fa:ac:50:77:79:67:e4:f3:ad:2a:f0:2f:
d3:a6:04:b2:72:42:76:96:b3:ec:8a:10:20:18:b8:43:3f:61:
45:92:93:74:c1:51:9a:84:d0:a1:31:0d:60:49:52:8e:1a:62:
08:8c:b3:2c:ac:7c:58:f5:2f:e4:79:d9:2d:e5:00:92:e4:88:
57:f1:71:b5:cc:0a:b7:8a:77:88:97:c0:a4:44:ed:3f:35:25:
eb:6b:b6:d3:43:f4:52:c7:8f:ce:18:05:91:2e:34:24:17:39:
9e:a4:54:52:91:71:df:6f:41:a5:1e:d3:94:37:a6:17:b2:aa:
22:3f:7f:a9:d4:20:59:58:82:84:fb:8c:4e:5a:1a:d4:27:db:
1b:dd:ac:d2:fa:03:2f:e8:46:18:5d:b1:b7:a9:b4:51:e7:b1:
ad:6d:de:37:25:80:f1:83:80:8a:ba:af:d6:d9:70:45:8e:35:
57:89:13:42:74:75:97:35:03:10:9e:6a:83:c9:e6:2c:c4:c9:
c3:d0:59:fd:1f:ee:f8:55:94:8b:57:54:a2:b5:19:29:5c:9e:
4d:42:33:76:cf:b1:16:fa:ce:f4:0e:2e:a4:0e:d5:e0:f6:76:
e2:e7:d2:34:b1:ec:f2:c7:6e:be:62:ff:f5:30:11:76:8d:1f:
9b:00:d8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:30 2025 by rpki-client