Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
File: vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft (raw, json)
Hash identifier: pC9TrjHH6t6fShamIIOrJ2TxVR+j9khOkv0Qd6e69yE=
Subject key identifier: D1:2A:ED:61:1C:99:20:3C:05:EF:45:A0:B1:FB:E1:56:B5:18:85:AB
Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
Certificate issuer: /CN=becec531e5c37756b828663f9cc20ad6217713ac
Certificate serial: 0199FEEBAD5FD2BCC5A6B61E0722D60E48D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
Manifest number: 1012
Signing time: Mon 20 Oct 2025 00:01:22 +0000
Manifest this update: Mon 20 Oct 2025 00:01:22 +0000
Manifest next update: Tue 21 Oct 2025 00:01:22 +0000
Files and hashes: 1: _d2EFT-OpH3an9-ei2qvPBIPUiU.roa (hash: vjR4Zv9+5SsZfFKRbF6P42t9rz0q1nIneBSdni9L3pM=)
2: ciNzVE1_d0-QMInDSswN3EHLVNg.roa (hash: Wmjyk4Nl2dmeXznw2MTEjEcjFaiybhooG5LGrJ1VKM8=)
3: vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl (hash: XbbD+2B3suk8cxrCmVHI6Y1tYKKCjTwP+NC718xs53I=)
4: yAQLvR2REqCYEITifDYxhFTzX4k.roa (hash: uZgm/9JfNjYwGkoXS3hlL76KCjtvK/3swtvi79WEUbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:ad:5f:d2:bc:c5:a6:b6:1e:07:22:d6:0e:48:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac
Validity
Not Before: Oct 20 00:01:22 2025 GMT
Not After : Oct 21 00:01:22 2025 GMT
Subject: CN=d12aed611c99203c05ef45a0b1fbe156b51885ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0e:82:34:ea:8b:4d:fe:f1:1b:c0:dc:4f:77:
87:9a:ff:5e:b0:cc:c1:6b:8d:e6:d6:c9:bf:49:19:
50:4e:fa:7d:01:6b:54:0a:cb:9b:7d:d1:65:94:85:
67:c5:98:d4:c8:54:29:03:b5:5f:9c:25:f6:95:6a:
6c:70:70:b2:c8:f2:24:01:ea:30:5c:70:1d:d6:7a:
ba:ac:f3:d8:91:a5:07:9e:13:cf:a4:bc:f4:5e:55:
59:43:9d:bb:3b:5a:da:0b:ab:1a:2d:d0:ae:f3:c9:
79:c2:4d:3c:c9:a1:bd:6c:eb:38:1e:a6:2c:56:63:
59:63:79:0c:4a:8d:8a:8b:60:45:d1:97:29:68:ac:
46:8b:27:42:c8:16:1e:29:c3:0b:7f:16:b9:f2:82:
3b:f7:b7:0d:75:63:c1:98:d5:63:bd:5e:c3:3b:b2:
18:0d:08:a0:6d:5e:e2:f0:41:44:54:fb:47:91:a1:
75:23:e5:de:5e:06:66:55:0a:c1:10:ad:e8:8c:1c:
ca:57:a7:8b:69:8b:9e:8e:8c:d5:c8:5b:ed:7e:4b:
a4:d2:f6:1d:8d:77:94:5c:7f:75:51:27:3a:08:37:
4e:6b:37:26:f5:41:da:7e:2a:eb:dc:fd:74:1a:f9:
de:d5:02:1b:f1:ea:a2:89:24:31:51:72:0d:53:cf:
a2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2A:ED:61:1C:99:20:3C:05:EF:45:A0:B1:FB:E1:56:B5:18:85:AB
X509v3 Authority Key Identifier:
keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b8:62:cd:2f:17:fa:34:93:3a:21:99:f9:b6:7b:60:61:a1:
25:5d:fd:91:ba:fc:13:cb:33:af:03:47:a9:16:5c:ed:11:81:
09:6f:d2:d8:d1:a6:f4:ee:4f:45:aa:86:09:be:05:2e:f6:89:
76:bc:e0:40:14:43:b5:04:c9:5c:74:29:a3:03:98:c0:a9:3a:
15:9e:51:ad:15:40:65:9e:e7:34:73:08:91:15:ab:23:41:2f:
a4:49:2e:ea:ce:fe:40:1c:9b:04:f5:0b:d5:96:7e:1d:c1:3b:
0e:9a:de:97:49:4d:2e:58:b5:68:e1:0d:e5:28:c9:25:86:72:
e2:fa:40:be:ed:e3:23:f8:8e:89:c0:42:e1:80:dd:b3:0f:c6:
09:9e:55:a3:33:8a:61:39:71:be:29:e6:47:dd:2e:90:75:fe:
e6:67:1d:35:94:f6:71:c6:b9:81:0b:9f:83:32:4e:84:fe:1a:
23:8a:c6:a6:e0:81:08:14:0e:e3:6e:9b:67:5b:6a:08:ad:a8:
ea:5f:fc:e7:0a:10:4a:e0:ee:73:e5:02:68:73:91:43:b8:d2:
e3:28:7a:4d:e9:52:91:4b:6c:12:2f:96:71:91:ca:85:8b:c6:
6a:11:04:a9:3d:ac:e1:53:38:48:29:19:6b:bd:93:0f:61:29:
31:96:44:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:30:16 2025 by rpki-client