Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json)
Hash identifier: aVNnGv1eAt5ma590jWxaFG7Fe8Pp2W4GRtqpNcvtjcU=
Subject key identifier: BB:77:FD:1B:20:9F:F9:68:FF:F6:AC:2E:43:BE:6F:91:76:D8:D5:A8
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 019A23D2D50AC4AF3E365F10C76DD81099F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
Manifest number: 16FA
Signing time: Mon 27 Oct 2025 04:00:10 +0000
Manifest this update: Mon 27 Oct 2025 04:00:10 +0000
Manifest next update: Tue 28 Oct 2025 04:00:10 +0000
Files and hashes: 1: FG-qCrDb70MUjmpPeG_ABqm2g4I.roa (hash: hYgrw8pe3ohnrPXEYOqOtmTKKEz+HL/P8NWGWnKRQYA=)
2: hsH2HQBoiRDw665UcWSV1lTXYOg.roa (hash: 3M/n4+ffcKMFrGFddlkXam66igSrpB60cTzmDDLi+7s=)
3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: /ezblIJ/a2D92+62PWlaG4tEoFp+jjpmlxRcEvSMEG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d2:d5:0a:c4:af:3e:36:5f:10:c7:6d:d8:10:99:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: Oct 27 04:00:10 2025 GMT
Not After : Oct 28 04:00:10 2025 GMT
Subject: CN=bb77fd1b209ff968fff6ac2e43be6f9176d8d5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d5:26:59:ea:56:20:b9:ca:a1:ba:37:79:3d:
a0:3c:d0:07:5d:39:6d:13:f6:12:af:bc:c5:0c:2b:
b4:62:14:8c:18:fd:74:16:fd:37:e1:3b:d0:7c:38:
b1:6d:b9:59:1c:99:dd:a4:4f:af:b9:a0:c0:d6:c3:
51:a6:3b:c4:99:12:b9:33:a6:55:9f:12:bb:62:ac:
cd:e1:16:0d:74:bf:d9:66:be:9b:a7:e6:55:6f:d9:
ee:7b:69:ae:0e:8a:cf:d6:e5:56:2f:59:6f:19:b6:
14:4a:27:0a:ea:26:82:e8:4c:d5:47:d8:a3:47:ed:
2e:fe:50:f5:4f:ea:52:43:fc:a8:fc:62:57:51:f0:
b6:76:e5:d7:fa:96:5c:00:92:1a:5a:41:ac:4c:d8:
b6:4f:c9:61:4b:54:f3:39:68:4e:35:7c:bf:c0:4f:
f2:f8:7c:7a:6b:f1:3c:4b:ac:ea:36:48:ef:2d:df:
88:b3:3f:04:ca:11:f9:b4:01:4a:53:c3:ca:3b:16:
c6:9d:7e:e8:cc:b6:ca:c6:23:5d:bf:11:bb:b2:c0:
70:b7:ca:6d:67:aa:09:55:ff:83:fd:39:17:6c:72:
46:4b:f9:27:eb:ba:f9:0f:e8:87:48:96:10:53:20:
aa:5a:83:c5:14:19:b3:da:d4:04:7f:3c:81:c9:75:
87:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:77:FD:1B:20:9F:F9:68:FF:F6:AC:2E:43:BE:6F:91:76:D8:D5:A8
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a1:e8:f0:15:df:24:15:a7:f0:d0:96:9a:85:34:36:32:ce:
94:82:5c:67:92:6a:e2:e4:f0:be:bf:4e:ac:95:1f:4d:27:7d:
41:1f:63:29:eb:68:ee:50:d1:f7:da:02:a6:13:8b:ae:30:b8:
f4:cf:ab:5e:5c:a8:57:9e:9c:de:5c:3a:76:81:b9:1b:95:cd:
bf:35:0e:5f:2f:91:20:f9:42:b7:8e:6a:19:4d:74:03:90:40:
1c:ad:09:7b:99:2b:3d:5c:6a:17:ff:d7:72:6a:3d:7e:a8:37:
5f:c8:c2:b0:a4:18:96:c9:21:21:5f:d0:cd:84:1f:87:70:d2:
c5:2e:06:92:56:0f:7e:11:83:0c:1c:24:81:55:54:b5:b6:14:
9a:59:5d:56:40:d4:33:92:c9:90:f1:c3:26:43:2c:28:fd:b8:
8a:d6:99:a6:93:57:f5:83:dc:f9:03:e9:78:de:e1:c9:bc:98:
b7:a8:85:bc:d8:b2:b5:dd:cd:f2:c9:cc:a2:9f:21:ec:1c:a1:
e7:d8:2d:87:5a:9d:b8:c7:e1:2a:0a:d1:4b:b3:e4:c5:97:b3:
d7:97:95:29:18:72:8c:65:e0:09:b6:d3:1c:5c:f3:bf:41:65:
e8:2c:c6:1a:19:99:a5:0b:5f:62:33:d0:a2:f4:e2:5a:73:46:
2e:cc:df:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:24:57 2025 by rpki-client