Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
File: vCYT4PJtOQfwljQL4FDCAdNY1tU.mft (raw, json)
Hash identifier: GOSExuGPlPXwRItBW7Oi33IyVO1tt4MW4iJ0VV39xsA=
Subject key identifier: 90:D6:F1:C4:35:A4:B4:86:FC:01:5A:3F:D1:0D:FD:9F:39:1D:E8:C9
Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
Certificate issuer: /CN=bc2613e0f26d3907f096340be050c201d358d6d5
Certificate serial: 019A29D51A6EE387E7FF01A12034F5CC5B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
Manifest number: 03B2
Signing time: Tue 28 Oct 2025 08:00:23 +0000
Manifest this update: Tue 28 Oct 2025 08:00:23 +0000
Manifest next update: Wed 29 Oct 2025 08:00:23 +0000
Files and hashes: 1: XAyxjA2g2s28aHQHs98tsK3etR8.roa (hash: QUtciDeOFFn7dnyC4Ef30ak5vE9PG8V8NwPTRULv3/k=)
2: vCYT4PJtOQfwljQL4FDCAdNY1tU.crl (hash: qivuXudd6W/7mHOMnosVDMrV3cDr1mlkug7ukGppuVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:d5:1a:6e:e3:87:e7:ff:01:a1:20:34:f5:cc:5b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5
Validity
Not Before: Oct 28 08:00:23 2025 GMT
Not After : Oct 29 08:00:23 2025 GMT
Subject: CN=90d6f1c435a4b486fc015a3fd10dfd9f391de8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:b3:a3:14:1a:f8:7e:ba:d9:e3:05:b1:5b:
5b:f9:ed:a8:bc:1c:86:cb:0f:69:a5:17:eb:09:58:
14:b6:3d:00:99:0a:e0:11:c1:c5:bf:e1:fe:3a:33:
63:a3:c2:16:e2:95:6c:b5:45:4b:f3:10:e7:32:9a:
e2:d3:79:da:5c:28:c3:d4:ba:24:21:62:7a:8b:e6:
6d:ad:c3:fe:34:e4:8c:9c:5b:3a:1d:32:5b:6d:e5:
e4:4d:a0:00:99:5d:10:5d:3b:44:46:72:b9:9d:05:
a2:c6:5f:8f:89:f5:68:e1:1d:d8:4d:72:ae:b9:08:
fa:5e:35:a9:0a:85:8b:6c:47:6d:7e:93:ef:86:0d:
03:4d:96:87:a0:23:d0:cd:e5:13:48:89:0f:2a:15:
f7:17:e1:bb:cf:7a:11:81:1b:2a:08:63:dd:9c:95:
29:e1:67:73:3a:14:64:d7:7a:f2:39:ba:c3:9b:52:
37:2c:ef:45:a2:f8:6e:35:3f:2e:2f:5e:18:ef:26:
7c:f7:fe:23:ea:72:6c:37:c1:12:5a:f9:a8:02:7b:
51:e6:d6:22:4d:7e:97:81:92:e0:27:2d:7f:ff:cd:
dc:37:ba:92:e9:4b:19:c3:48:ac:ce:f2:5b:d6:eb:
23:0b:67:04:c9:b9:b6:e9:49:e5:e3:77:4c:25:0b:
18:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D6:F1:C4:35:A4:B4:86:FC:01:5A:3F:D1:0D:FD:9F:39:1D:E8:C9
X509v3 Authority Key Identifier:
keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c6:1c:37:b7:f2:2f:7b:c6:7c:f5:e6:64:e7:92:75:51:c1:
fc:85:a6:c4:bd:6b:b1:eb:ab:59:90:99:99:b6:35:03:df:66:
2f:4a:31:c7:51:69:c6:bb:89:4a:55:3a:e4:83:7b:2f:1a:cf:
07:68:aa:bb:af:5e:1c:d5:ce:e3:ab:93:e2:88:fa:67:1e:d6:
e9:ae:b0:28:bb:f6:96:c7:69:c6:d6:59:5e:19:92:4f:3a:58:
ae:2b:eb:81:ee:8e:44:e3:23:6a:14:c8:9d:1e:90:a2:52:f9:
45:26:36:6f:2a:91:a7:80:48:88:f7:47:34:9f:34:19:7a:d0:
4f:5b:38:70:e8:21:a0:79:eb:4e:91:e6:64:58:e9:f7:a0:13:
03:46:4a:00:65:a2:46:35:f0:be:3a:36:58:90:b6:42:8c:f4:
9a:7c:2d:4d:25:6e:75:1d:9a:21:21:dd:ca:d7:e5:dc:ad:75:
85:c1:a0:2e:73:a3:a4:6a:ab:ee:41:79:83:ed:1f:f2:1d:11:
26:e3:f7:8c:ab:e3:38:67:bf:5a:ba:d4:2e:a1:e4:e3:51:46:
a1:ba:6f:18:13:ac:0e:4f:71:a5:5a:fc:d5:f5:9c:58:ef:b9:
9a:cc:bc:14:3a:d3:86:22:ab:aa:b8:76:7e:29:cf:3a:90:7a:
9b:b1:22:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:34:43 2025 by rpki-client