
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
File: vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft (raw, json)
Hash identifier: m8cg89h04PAVfcjhMFxhnWnQPMRT6iAIqWrVuomrqq8=
Subject key identifier: 65:F6:D3:6C:DD:B8:61:5B:2E:01:87:22:B3:F5:CA:11:4C:C9:F7:B1
Authority key identifier: BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
Certificate issuer: /CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Certificate serial: 0199FCFD77DF43D61E6E606EDD35F16C62B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 15:01:33 +0000
Manifest this update: Sun 19 Oct 2025 15:01:33 +0000
Manifest next update: Mon 20 Oct 2025 15:01:33 +0000
Files and hashes: 1: SReOpAhCLmuOcAyk55_tk_b6gzU.roa (hash: HeVQ3nZoCRM6Iyc21jnOVqYiR72eDfZp5jwY3EJ/nAk=)
2: vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl (hash: APRjO5GwIF0ic5Yj/t5R7vkLiVPEJ6WC+rAl7MZlzuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:77:df:43:d6:1e:6e:60:6e:dd:35:f1:6c:62:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Validity
Not Before: Oct 19 15:01:33 2025 GMT
Not After : Oct 20 15:01:33 2025 GMT
Subject: CN=65f6d36cddb8615b2e018722b3f5ca114cc9f7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c9:a4:4f:3f:87:7e:8b:db:e8:47:5e:32:d7:
c0:1a:4f:e5:06:28:10:ab:f1:dd:72:d8:29:ef:0c:
62:79:6f:2c:24:df:bc:89:0d:77:6e:e4:62:13:29:
e5:55:09:7e:e3:da:7a:78:0d:03:c7:90:82:32:00:
b5:60:b2:36:1d:be:c7:68:c4:44:9d:7a:c6:5c:19:
df:4d:20:5c:cd:1a:bd:61:51:b7:c3:44:00:e8:0b:
76:4c:cf:0d:e3:f8:51:fc:85:0a:0b:80:2a:70:0a:
eb:f7:6b:81:0b:ff:2b:da:97:21:f8:77:df:76:76:
b7:00:c9:76:21:80:5e:25:f1:6b:bc:f9:62:b9:9d:
33:a9:36:34:ef:03:7c:79:50:98:b5:26:80:5e:ec:
34:49:cf:35:e0:bf:c0:5c:ea:8b:ed:bc:bb:dd:17:
8b:7f:af:d3:07:df:8e:d6:d8:c5:20:34:9b:4c:84:
65:7b:37:b1:d8:ac:e1:0d:3a:31:17:1b:f4:8e:79:
a8:1b:51:92:b6:a9:00:59:f2:40:b2:9f:3c:0a:c9:
73:77:f8:39:e1:6b:c6:5c:a6:b1:36:db:c3:92:e1:
1b:96:aa:d8:84:3d:c9:e4:9c:38:3d:39:a2:4c:03:
e3:b1:0c:6d:68:34:09:7d:bf:eb:60:48:f6:d5:b7:
39:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F6:D3:6C:DD:B8:61:5B:2E:01:87:22:B3:F5:CA:11:4C:C9:F7:B1
X509v3 Authority Key Identifier:
keyid:BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:df:f3:88:b5:d3:8c:17:ce:61:74:dd:80:f8:22:93:b8:44:
49:b1:58:c4:81:04:be:3d:d3:f1:fc:45:78:f4:09:e4:3c:58:
b4:ad:ed:f0:ec:c4:a3:f5:3b:39:f9:93:fe:d9:88:5e:58:af:
c3:27:02:8b:20:6b:f3:39:25:88:c9:22:2a:db:56:08:c9:57:
2d:31:6f:d4:ee:34:32:04:e9:18:bd:37:7e:93:38:6d:f1:64:
62:2d:b9:16:f9:29:d2:7b:65:a6:bd:4d:a1:a3:17:55:cb:e6:
86:04:17:ef:98:d8:b4:c6:a5:46:bb:f8:c2:ff:69:4d:b6:18:
d8:08:be:43:57:d8:bd:17:78:94:ba:e9:27:45:2a:d7:cf:1a:
2f:f5:4c:2a:ec:34:7c:5a:e8:73:df:35:0f:70:d7:ac:89:73:
85:21:20:2f:ca:b8:ea:6f:e8:89:f7:15:69:80:2d:91:89:fa:
50:d1:23:fa:47:61:2d:66:11:1c:09:78:5d:3f:65:d6:2e:28:
64:14:72:15:bc:d2:34:6a:6f:f0:4b:b6:89:bf:61:50:3e:6c:
0b:13:d3:a9:38:c7:fc:a6:e9:77:be:60:95:e5:4a:15:5f:4b:
c9:96:bb:f2:49:15:38:33:18:26:54:97:c4:cc:73:ac:05:0d:
90:c3:6d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:39 2025 by rpki-client