Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
File: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft (raw, json)
Hash identifier: 45uyRZlmMj9faU2mvtXKPEuVC+E+/+LyApevQZD/0U0=
Subject key identifier: 7B:BB:12:4D:1B:72:4F:1F:69:5C:07:48:0F:C6:B8:C7:7F:EC:9E:43
Authority key identifier: BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
Certificate issuer: /CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Certificate serial: 019A0147DECF461E53919E9A4289B8948C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 11:01:18 +0000
Manifest this update: Mon 20 Oct 2025 11:01:18 +0000
Manifest next update: Tue 21 Oct 2025 11:01:18 +0000
Files and hashes: 1: qBn6ockm6JSiEH-8udw_bpsms9g.roa (hash: nCADL7lFGk+Q6O3ajQCgcYhE2O5JRszPFiBp0Ov4f98=)
2: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl (hash: toLKO2q6YPWz99/x4ZUUZSz8eqcY3zlL3r0YKp0biDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:de:cf:46:1e:53:91:9e:9a:42:89:b8:94:8c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Validity
Not Before: Oct 20 11:01:18 2025 GMT
Not After : Oct 21 11:01:18 2025 GMT
Subject: CN=7bbb124d1b724f1f695c07480fc6b8c77fec9e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:14:d6:57:e4:9c:5c:ab:a2:c3:51:2d:45:b3:
75:35:ad:3d:4c:02:f7:ba:18:40:ed:d8:86:e9:eb:
29:c6:61:62:40:43:30:c9:2c:90:07:f9:27:8f:a4:
01:53:5f:f1:98:09:31:14:5c:ae:21:87:af:8c:3f:
e9:8e:ed:64:b1:d4:3f:de:a9:a8:3a:f8:5b:b2:01:
5e:0c:5f:f8:ec:c2:6a:55:50:86:49:6e:d2:3a:dc:
07:21:09:51:fa:4f:d4:3d:7a:6e:4b:ec:42:c3:69:
19:8e:a0:97:b0:4d:d3:7b:4a:32:cd:fa:e4:17:2f:
1a:3f:b9:0e:0b:66:6f:96:31:e6:3f:4f:56:98:d3:
28:ec:5d:79:25:38:0c:91:59:69:61:24:c6:02:b9:
df:84:65:69:06:e8:07:2d:20:e4:c6:be:d7:8a:30:
b3:30:58:12:ff:13:a0:48:8c:cd:a0:09:f1:48:87:
0a:f2:9a:49:ad:3f:c4:72:8a:80:a9:5b:5f:3f:ed:
d2:e0:69:06:d9:a2:ce:6f:0e:fb:8d:e0:58:6f:80:
76:10:be:bb:da:79:ba:b8:1d:d2:50:75:6c:fb:d9:
22:21:e1:4c:23:fa:30:21:0d:e5:11:6b:2c:a2:9b:
13:85:0e:8a:7b:f6:c8:ba:fb:1b:e3:c0:29:3b:c7:
ce:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BB:12:4D:1B:72:4F:1F:69:5C:07:48:0F:C6:B8:C7:7F:EC:9E:43
X509v3 Authority Key Identifier:
keyid:BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f1:d7:ba:aa:c2:ab:2a:cf:8d:28:e8:b3:49:f6:9e:78:2f:
f7:73:1a:d7:ab:e8:e8:69:fc:32:c9:5a:50:cc:99:8d:90:1c:
c9:f9:17:e5:20:a7:de:6a:a2:2d:3a:67:41:45:e1:cf:6c:f1:
88:cb:a4:73:e4:8e:49:74:bd:69:6f:bb:d7:9b:f9:87:3a:a1:
39:94:fa:44:4c:5d:39:a0:fb:54:e2:02:22:d1:12:00:89:68:
b6:4c:54:1c:fd:17:5d:15:2b:3f:fa:cf:bc:01:4c:90:c5:47:
d3:61:82:e3:e5:dc:d0:2c:b0:fd:8c:30:bb:77:ab:85:ef:d7:
59:44:6c:0f:b4:88:93:c5:a5:c3:bb:72:1a:60:cb:2d:10:f3:
88:d1:b2:76:1b:03:75:1c:b7:2b:ce:83:9a:b7:9f:28:19:dc:
6d:1a:99:bd:0d:a1:ff:01:5a:2c:55:48:88:0e:98:1a:1c:77:
e1:cc:bd:05:eb:a1:82:1c:60:81:da:c5:ad:2f:8d:7c:80:91:
9c:a8:6a:3f:b9:41:50:23:b8:4c:95:00:b9:34:83:eb:71:3d:
f5:2e:83:45:1d:ad:7b:b8:ce:7e:2c:a1:74:44:ec:6b:a2:81:
d5:2f:35:92:7e:52:68:6c:67:45:81:79:2e:1b:9b:65:f3:3d:
30:be:ad:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:56:41 2025 by rpki-client