Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
File: vvUlLMrD9twUJrVT8sHHIzrMiUs.mft (raw, json)
Hash identifier: nsugU+eiYIGmNYYusbonnh4zyiKPdgR15Cnj6M3tGkw=
Subject key identifier: 47:1D:1E:22:B4:B7:D3:27:BD:BA:30:CC:E7:55:EE:27:6B:43:87:C5
Authority key identifier: BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
Certificate issuer: /CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Certificate serial: 019A09A5296C3E234999060F856C67F3A7E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
Manifest number: 16EB
Signing time: Wed 22 Oct 2025 02:00:10 +0000
Manifest this update: Wed 22 Oct 2025 02:00:10 +0000
Manifest next update: Thu 23 Oct 2025 02:00:10 +0000
Files and hashes: 1: cztKiFowQoK_UYPJ2AEdLhmfdJY.roa (hash: zSStQQUNC6z+zgYsdleYs1GIe5kvbt6u6C94AWl4nn0=)
2: vvUlLMrD9twUJrVT8sHHIzrMiUs.crl (hash: yiQeSuAJdAFFc6gfstggZMh4XUMLcM/fGnNOwhTHDxk=)
3: xlHcoYULH7mPEmpcqtscwUSRg-k.roa (hash: A4kztX9ZPQEUnGsY/7aFwo4jdiC6qf6Ig/R2vXwJcNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:a5:29:6c:3e:23:49:99:06:0f:85:6c:67:f3:a7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Validity
Not Before: Oct 22 02:00:10 2025 GMT
Not After : Oct 23 02:00:10 2025 GMT
Subject: CN=471d1e22b4b7d327bdba30cce755ee276b4387c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e1:0e:b2:0c:96:19:8a:ab:59:fc:98:55:15:
4c:c1:73:67:d2:94:40:ad:df:c4:a6:1e:5b:6c:ac:
a2:34:2d:42:7c:be:92:97:4e:68:d2:7d:94:00:c0:
c6:5f:cb:c5:56:2d:92:e7:1c:e1:54:4a:19:b8:8c:
76:d7:7a:c2:f1:bd:e7:b2:1a:d8:31:0a:33:de:13:
05:3d:8c:79:ae:7e:87:f1:f7:56:4f:8f:27:07:49:
6d:a8:6e:dd:ef:e6:34:48:c0:15:85:74:f0:af:6d:
b1:c5:77:28:55:93:79:8b:8c:3e:07:dd:03:24:3d:
86:eb:aa:48:68:01:37:2b:08:c7:49:f3:d3:69:a9:
2c:7f:a6:03:9d:1d:20:83:45:ad:09:2e:d6:4f:d5:
91:9a:21:ca:ba:ba:b9:a2:25:42:92:25:0a:f0:b7:
fa:b5:40:77:74:bc:b2:f6:b8:08:f1:ea:0a:0c:e1:
4d:66:38:f6:93:46:c3:f5:6b:c7:60:8c:70:14:d8:
b2:cc:fc:d8:6e:9a:a0:9b:30:8a:6f:77:b2:59:2b:
60:50:bb:00:ec:25:52:bf:91:b6:b3:18:cd:a2:81:
01:ea:cf:9b:9e:33:8e:4b:ee:96:db:90:97:a7:2f:
84:97:29:46:22:13:14:f2:ac:de:22:0b:81:05:46:
73:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1D:1E:22:B4:B7:D3:27:BD:BA:30:CC:E7:55:EE:27:6B:43:87:C5
X509v3 Authority Key Identifier:
keyid:BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:c6:7b:bf:99:cc:ad:92:3b:09:5f:bd:53:98:cb:02:84:cc:
90:9f:d2:56:18:16:68:04:72:26:22:7c:9c:62:d8:ed:3b:13:
c2:e6:d2:73:56:79:cc:16:fd:6d:bc:75:f6:0b:a5:c5:4c:91:
1c:90:66:46:6f:92:61:c9:28:74:10:2f:32:9e:50:d7:8f:ed:
ff:28:64:0a:db:6d:cd:f1:77:1e:d5:e8:42:b3:e8:4d:b1:70:
0e:e0:2a:20:af:97:cb:bb:12:78:b4:4a:e9:d3:3d:11:0d:91:
99:87:7b:91:7c:32:b1:bd:ee:da:93:2a:98:d4:8f:78:43:5b:
e5:d4:9d:d6:5a:e4:e2:1f:f2:f2:77:54:71:2e:73:37:89:0d:
43:3a:ad:70:f7:8b:4f:d4:77:cb:9a:09:1f:56:c8:02:1f:3d:
20:bb:13:70:59:12:27:bf:a3:a8:6f:77:7c:00:04:67:f8:68:
a9:98:5a:23:61:d1:3b:06:40:57:a3:ba:76:b7:04:7f:fb:92:
03:98:bf:c9:25:62:f7:33:7a:cb:1f:24:e3:47:e8:7b:05:d4:
ab:92:77:68:ec:53:3f:e8:38:6a:a4:9c:6c:b2:f8:a1:f2:a2:
c0:97:d4:87:45:54:4e:5c:25:0c:e9:22:2d:2e:bc:52:0d:ce:
84:5a:4e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 11:47:49 2025 by rpki-client