Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
File: vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft (raw, json)
Hash identifier: /0VQCHCtXyv64iYBTenY0EgqgiRuIqsiy+RhiB/EySg=
Subject key identifier: A4:80:D5:52:39:10:71:1C:9A:3D:D2:5C:62:07:A3:14:18:FD:40:09
Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
Certificate issuer: /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Certificate serial: 019A0E2716FB25E42B2988A95937D9A2D7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
Manifest number: 16EC
Signing time: Wed 22 Oct 2025 23:00:34 +0000
Manifest this update: Wed 22 Oct 2025 23:00:34 +0000
Manifest next update: Thu 23 Oct 2025 23:00:34 +0000
Files and hashes: 1: 6pAZoUeyJNKjbIkJ9bo52GGChiE.roa (hash: H9UE5mQZ+sgOHGu/NqWUAUZ7b5ITdi+7fpdJ+eVNZFg=)
2: vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl (hash: VusUChv0ACIWF/DRTtJK4EpQHg1OVOHn+ZJQg2g6qDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0e:27:16:fb:25:e4:2b:29:88:a9:59:37:d9:a2:d7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Validity
Not Before: Oct 22 23:00:34 2025 GMT
Not After : Oct 23 23:00:34 2025 GMT
Subject: CN=a480d5523910711c9a3dd25c6207a31418fd4009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:73:de:95:57:b4:c3:de:53:ee:cf:9e:c1:8a:
c8:5a:28:40:ea:ac:1e:d6:20:ac:64:15:e9:35:74:
b2:90:36:e6:3c:4f:1e:8e:4b:f1:f6:13:67:e1:87:
3b:02:5d:3c:33:a9:d7:ad:09:9c:3a:bd:ad:3a:40:
fa:a2:df:c8:da:51:04:35:2c:d5:4a:8d:62:7c:00:
1d:6a:33:d2:05:45:9b:9a:35:17:d6:f1:dc:1d:c3:
dd:d6:0c:f5:04:66:50:7e:ca:8d:24:49:08:51:02:
5f:8e:11:d9:de:c8:82:b4:35:3a:94:8b:38:49:18:
95:b4:2a:d8:9d:86:a3:24:c4:9e:26:cc:0e:91:83:
15:cb:98:5d:76:a1:22:d1:c5:99:da:24:a0:73:4b:
13:65:4c:db:87:f1:5e:9d:04:c2:46:c5:6c:f0:47:
bb:2b:fb:97:2f:0c:be:60:77:5b:0f:94:8b:f6:83:
65:6b:d1:9a:c8:8f:86:5b:3a:80:1c:c5:ed:4b:02:
b8:87:0b:5f:bc:4d:b9:a6:e3:6d:3e:6f:06:71:1c:
f4:44:5e:fa:23:30:e3:cb:2e:7e:ee:a7:36:33:53:
21:14:67:b7:7e:a0:ec:f3:38:2c:7a:78:c3:15:ed:
63:d6:31:bb:42:43:44:ca:38:96:6d:d0:35:66:5d:
f2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:80:D5:52:39:10:71:1C:9A:3D:D2:5C:62:07:A3:14:18:FD:40:09
X509v3 Authority Key Identifier:
keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:7a:30:e4:3f:00:05:a7:de:43:b8:bb:3f:10:8b:51:42:bc:
80:c7:1b:31:6a:6b:d4:7a:49:54:61:e6:45:4e:93:65:76:3c:
3b:0c:33:13:23:5f:6b:fa:4f:9c:42:0a:a4:c8:f3:58:88:15:
b5:fc:9c:e9:b0:10:7a:9c:ce:50:70:4f:ba:c1:56:59:95:d7:
e9:9f:50:a7:b4:ad:68:92:c9:78:94:46:71:e1:55:d3:3d:1f:
0c:b4:44:f0:d0:0e:09:7e:88:e6:e6:71:4e:6b:e2:84:6b:dd:
da:16:6a:da:cf:8d:ff:92:d2:f3:ef:ab:e5:a0:4d:d5:26:1d:
14:f8:4c:fd:25:fe:fb:86:3d:af:f4:55:64:81:e3:ba:e3:39:
ea:93:44:ad:2c:9f:95:fa:b4:b0:d4:c5:af:93:12:7d:6e:db:
14:ea:e1:1d:e4:b6:0a:b7:91:8d:c7:6d:63:7f:23:91:fe:cb:
69:ac:82:74:66:a9:aa:9f:61:ef:dd:00:10:93:29:16:64:8f:
af:0a:96:5b:bb:55:42:e5:04:15:0c:bd:be:1d:a0:3e:0b:f6:
d3:97:8d:20:97:12:ec:5b:87:06:cd:f7:2f:76:00:91:c8:4e:
b0:05:03:a1:b2:d0:9d:77:83:66:f7:0b:e6:25:6e:56:ec:25:
1d:19:72:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 08:17:53 2025 by rpki-client