Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
File: vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft (raw, json)
Hash identifier: 3GJlevnpJIS35dRBeUGZm+y+VJja6vYuLXvRPhzSLMU=
Subject key identifier: F3:F2:46:98:6C:BD:2C:69:E2:54:AD:EC:52:E9:C9:00:A0:5D:17:31
Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Certificate serial: 019A022280C39F744FC647EC8444DFEA5825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
Manifest number: 16EA
Signing time: Mon 20 Oct 2025 15:00:06 +0000
Manifest this update: Mon 20 Oct 2025 15:00:06 +0000
Manifest next update: Tue 21 Oct 2025 15:00:06 +0000
Files and hashes: 1: 2_V6lJnSbHp-dXL7YMoo09f6snw.roa (hash: OhjwpaD5BnWeaMwPzsn2/JlXIUwI6tpxdz7vTY63lGM=)
2: vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl (hash: 2C2/U9f32mDmhIptS34u3BH8YZ53n3mPEyppxbW4zNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:80:c3:9f:74:4f:c6:47:ec:84:44:df:ea:58:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Validity
Not Before: Oct 20 15:00:06 2025 GMT
Not After : Oct 21 15:00:06 2025 GMT
Subject: CN=f3f246986cbd2c69e254adec52e9c900a05d1731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:89:56:d2:35:2a:22:2a:17:66:ba:5d:4b:a8:
4a:6f:17:09:8c:f3:bf:78:ec:67:fe:b4:37:b2:ec:
d2:19:ca:69:2b:f1:ed:c3:98:27:12:28:cf:3b:f9:
d3:5d:7a:29:2d:24:c4:fe:c6:11:2f:59:04:39:ff:
39:03:bb:34:f9:a0:0b:78:ed:93:7c:be:e7:6d:ff:
cd:8d:3d:28:55:21:74:d0:d5:c7:c9:33:b0:d9:1f:
96:bf:87:c1:7c:9d:67:c3:10:24:04:92:d4:d7:22:
08:40:9c:50:f1:90:51:d2:64:19:cd:1a:06:b5:91:
6e:fe:63:c7:68:ff:2b:97:1c:01:98:8a:f3:7d:21:
e1:c4:2b:50:6b:11:58:9c:d2:7d:6f:f3:88:4e:fa:
38:3a:5d:38:53:c6:d0:35:d4:98:07:b2:06:ff:46:
e0:10:d5:38:91:c6:a5:d4:4d:8d:71:3a:db:af:ab:
9d:4f:7c:de:c1:f7:6b:45:73:f9:cf:09:45:f6:42:
64:ec:80:77:6b:ff:e9:27:1b:ff:bd:25:3d:c8:a4:
45:7d:20:fa:f4:9a:2d:04:8f:91:1a:5f:00:0f:3b:
82:05:3f:01:b9:59:67:bd:e7:37:43:d7:95:18:f9:
ab:10:fc:26:50:73:82:7b:ea:3a:34:d4:d8:d3:e6:
57:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F2:46:98:6C:BD:2C:69:E2:54:AD:EC:52:E9:C9:00:A0:5D:17:31
X509v3 Authority Key Identifier:
keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:de:c9:f7:a1:87:04:f4:9d:a3:75:67:fc:5e:83:1e:89:18:
17:bf:45:7e:c3:55:db:02:be:36:e2:18:df:9d:a0:7e:08:b2:
8b:7e:19:ec:d6:57:5e:68:3e:7d:00:f4:e5:7f:20:ec:d1:b5:
e5:1a:c6:15:45:56:96:36:ed:6f:7a:91:fd:5a:2e:25:78:b6:
50:9a:2e:0f:5f:f4:43:0a:7a:c6:69:32:0a:32:e6:a3:17:db:
c9:fa:aa:d1:e6:5b:ea:e0:d5:71:b1:9b:50:2f:e2:e3:81:9c:
dd:a9:e5:09:d7:41:fd:7d:8c:4c:0e:eb:a8:59:2b:41:81:c1:
a7:f7:7a:5b:31:ad:66:c8:d9:11:dc:9b:c5:fa:3c:7a:e2:cf:
fe:89:a6:c1:a0:2f:0e:f2:4b:97:b2:c2:a0:18:66:b1:df:dc:
cb:10:56:4f:60:11:0f:ac:13:de:2c:19:ac:59:dd:f7:0d:08:
c3:58:8b:51:36:1a:11:f3:4a:0a:86:3f:bc:50:cf:7d:5e:8a:
a7:d6:17:b4:76:01:00:1c:2f:26:a4:df:fa:27:88:7f:3e:8f:
f7:38:47:f6:2a:ad:05:81:cb:e8:8e:0e:2e:36:d5:67:1c:f0:
c7:4a:88:84:67:21:19:97:36:02:37:20:7f:55:c5:4c:12:e8:
16:84:bb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:33 2025 by rpki-client