Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
File: vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft (raw, json)
Hash identifier: 0kg5mN0HgKuzNtni2PWwTqp/B1L+YeZh5qDvM8QvY+I=
Subject key identifier: ED:E1:A9:D0:40:C5:B5:3C:05:D7:2A:E6:FD:E9:FE:DB:D1:07:36:67
Authority key identifier: BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58
Certificate issuer: /CN=bc75052b50256ba562904e6f134350d3e75ded58
Certificate serial: 0199FCC6AA37DBEB892BE155F81CCDC195F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:42 +0000
Manifest this update: Sun 19 Oct 2025 14:01:42 +0000
Manifest next update: Mon 20 Oct 2025 14:01:42 +0000
Files and hashes: 1: vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl (hash: TsPK7AfMXpkZ5MIiTyWWq0r5J48iWMzZ3zRJaxvgY04=)
2: yPRaM8Xt_LjcnEp6FMoPxSjubrg.roa (hash: 5MRfMsBo6t3UJiAKxq7MCbDbIZDyOCcBOja7hPHJABg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:aa:37:db:eb:89:2b:e1:55:f8:1c:cd:c1:95:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc75052b50256ba562904e6f134350d3e75ded58
Validity
Not Before: Oct 19 14:01:42 2025 GMT
Not After : Oct 20 14:01:42 2025 GMT
Subject: CN=ede1a9d040c5b53c05d72ae6fde9fedbd1073667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:5e:d7:4f:fd:14:04:96:7a:9b:4b:71:26:
e0:f6:57:b6:a8:31:69:d8:a3:9a:4d:68:63:25:15:
11:0f:90:4a:3f:0c:2e:a4:dc:e8:ba:d3:92:ad:6b:
94:fd:ab:33:b4:60:fe:ea:bd:11:15:d4:9a:08:1a:
20:d7:10:cb:23:d5:d2:b8:1d:f1:f2:40:b3:93:22:
36:72:d3:bb:60:92:24:c8:fd:63:d7:6e:ff:e7:66:
99:a7:6e:0b:b1:79:85:6c:8e:d7:fd:37:ca:94:c3:
02:e0:2f:58:34:eb:b5:47:35:46:97:07:76:29:8b:
75:03:e6:d9:89:d9:b3:58:3d:09:de:d3:ca:b1:92:
fb:d1:1c:f5:26:55:89:c7:08:7f:80:4e:d2:f1:f0:
63:a3:8b:0f:71:56:5c:15:0e:9b:f6:a6:ef:26:64:
8c:da:21:67:06:2a:d3:45:14:89:94:e9:6e:1b:bd:
90:d7:68:a1:0b:94:fa:0d:a0:4f:f6:13:17:93:7c:
02:c3:8f:43:30:4b:73:c3:81:22:31:d6:41:11:49:
3d:a4:c3:16:3e:60:5a:df:be:c5:78:a6:5f:94:ce:
aa:f3:97:dd:04:a6:14:34:3b:9b:9f:bf:5a:a7:69:
d1:29:db:3c:53:90:ff:88:44:bc:ef:5d:91:0b:f8:
55:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E1:A9:D0:40:C5:B5:3C:05:D7:2A:E6:FD:E9:FE:DB:D1:07:36:67
X509v3 Authority Key Identifier:
keyid:BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:99:d0:6a:9b:e2:0f:04:a8:06:5c:ce:c9:c7:83:48:d1:16:
4c:ae:09:12:ed:ee:61:27:63:6a:7d:07:c1:00:db:45:f4:43:
f2:32:c3:6c:23:0f:54:81:34:df:d7:ec:d1:85:2e:b7:e1:d2:
96:bf:ac:7c:24:80:d4:0b:3f:1b:04:3b:13:74:8c:05:92:bf:
59:68:c5:8f:b8:1d:46:9a:ca:be:5d:d1:ae:7c:96:bc:0e:58:
36:00:5b:72:99:0f:05:e2:d3:40:36:3b:d7:c5:ea:4e:fa:c1:
70:ff:db:e4:26:81:9e:44:11:66:02:ef:0f:f8:12:f4:c7:4f:
52:c4:db:86:4e:a7:32:b3:37:7f:4a:15:1e:54:6e:82:1d:40:
e4:00:b9:b4:91:f0:19:b1:db:96:55:55:aa:d6:9c:ad:82:e5:
03:3a:57:5c:98:35:1d:34:ec:63:7d:bb:88:9c:b5:95:1e:97:
5d:fc:22:56:4f:18:fb:cc:58:97:61:da:c7:d2:9d:13:a7:fb:
40:16:b8:e5:04:b8:2f:6a:fd:37:51:1b:53:d2:3c:19:3c:6b:
21:77:4b:ca:ca:a6:da:4e:e4:c1:fa:4f:a7:ce:d0:92:d0:73:
6d:92:1c:95:3f:29:bc:7c:a8:4b:85:0e:08:b6:36:61:7e:a1:
55:92:03:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:42 2025 by rpki-client