Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
File: vE4hsn1vhOvdiIxo55zlVchG2ss.mft (raw, json)
Hash identifier: 9Htkh7YYA7DnDqbrLrPeUOslZA6SiX4BwFjWUxMN/j0=
Subject key identifier: FC:86:A6:26:7D:EA:DF:23:C7:48:6B:A3:98:AD:E4:FC:C2:8F:A8:F5
Authority key identifier: BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
Certificate issuer: /CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Certificate serial: 0199C4C4EB8FD25C722E5B0E5328FC58575E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
Manifest number: 16C7
Signing time: Wed 08 Oct 2025 17:01:03 +0000
Manifest this update: Wed 08 Oct 2025 17:01:03 +0000
Manifest next update: Thu 09 Oct 2025 17:01:03 +0000
Files and hashes: 1: F3kOmnX-kEtjSilXO2Pe0L_37Jo.roa (hash: lIJ2C488mP6Ma0OF6csW3I8GzUd4jiMp8CCjsO6b5Eg=)
2: Po0728QWErCTmXCeFPKP0UlTEug.roa (hash: IpBaviswNtBt65qOWaQEl9AqBmhUCEIpYlrqfl+L76A=)
3: vE4hsn1vhOvdiIxo55zlVchG2ss.crl (hash: uTBb85bT1JdJmS/jZ83b0nN0eYVCsF3wT5lW8vwJFf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:c4:eb:8f:d2:5c:72:2e:5b:0e:53:28:fc:58:57:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Validity
Not Before: Oct 8 17:01:03 2025 GMT
Not After : Oct 9 17:01:03 2025 GMT
Subject: CN=fc86a6267deadf23c7486ba398ade4fcc28fa8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:7d:9e:c9:4f:84:9c:86:4d:f6:8b:41:40:
f0:2c:6f:1e:7d:a2:68:16:d0:ce:7f:eb:e9:d2:b1:
a8:59:2e:1e:d9:5b:1a:18:6f:dc:07:35:01:52:ff:
e1:e7:d7:a3:2b:fd:f0:53:2f:a2:a9:1d:02:5a:2b:
0a:83:58:9a:97:22:71:17:9c:37:5d:21:97:78:71:
0c:c8:c9:c1:cd:8a:15:79:cc:57:e5:e0:0f:65:4a:
75:69:33:27:49:77:6f:57:d0:60:2e:42:07:bf:c7:
2e:df:73:c8:b9:a9:fd:e2:4a:43:12:ff:c2:09:53:
b3:df:69:67:88:7d:e7:f3:64:06:c3:62:70:5f:c7:
47:59:dc:fd:07:d6:85:74:00:e8:c2:fc:cb:66:7d:
5c:04:68:73:a1:eb:3d:bb:ad:3d:19:bb:35:74:21:
90:d2:b2:7e:ba:35:43:2b:5b:53:52:72:ec:df:5c:
d9:65:0d:f8:cb:05:c7:43:45:2f:7c:00:24:97:ff:
60:a5:fa:cc:1a:04:64:d5:5a:52:ec:80:63:9e:50:
64:e5:3d:d8:58:ad:c1:0b:b5:2c:8b:13:65:a8:c5:
e7:d0:7a:c5:36:1a:47:ed:78:df:6d:ec:cc:d5:39:
20:e5:e8:d1:3e:e9:cf:37:60:35:55:e2:8f:df:95:
9b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:86:A6:26:7D:EA:DF:23:C7:48:6B:A3:98:AD:E4:FC:C2:8F:A8:F5
X509v3 Authority Key Identifier:
keyid:BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:49:e5:34:26:ba:2a:17:17:f1:90:ca:d7:e6:31:9e:56:31:
25:91:10:3c:ef:cd:14:1b:19:12:61:a3:f0:e3:23:c9:60:a7:
58:c2:bd:3c:95:b2:fc:ff:06:8a:7d:a4:26:e0:dd:3a:40:e2:
b6:d4:88:4c:28:39:c1:d1:e1:31:00:d2:c2:fd:c2:fe:60:b8:
6c:50:b8:c3:2e:3b:dd:ac:c1:57:36:d2:9d:bf:e8:ae:fd:31:
9e:c3:e4:f1:74:2c:90:2a:8e:6b:bb:c2:9c:c5:03:23:29:dc:
03:0f:a7:d8:59:0b:a3:98:34:3f:fd:b4:e2:71:70:18:10:b3:
73:41:99:9f:b1:2e:fa:10:47:f7:f0:fe:c0:76:36:54:f6:7f:
f8:d3:0b:31:f6:3a:9c:69:de:04:c3:95:df:8e:50:a2:59:6c:
fd:4d:5b:11:3a:72:e4:02:c4:e6:37:e8:cf:64:59:a1:db:62:
ae:d6:94:21:4d:95:6a:8b:57:25:49:fb:b4:d7:80:74:a2:0c:
2b:de:77:10:c4:05:4f:09:7f:66:40:d4:69:73:3c:b8:86:ae:
84:be:38:33:d4:b3:f8:d8:a0:4a:99:6b:d5:dc:49:d5:69:05:
87:0f:c3:8d:79:23:c4:db:28:ec:cb:0d:0e:2f:be:d2:49:26:
88:31:dd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:33:43 2025 by rpki-client