Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.mft
File: vGyMBtLTwoAfBUWPyDQT2wpd360.mft (raw, json)
Hash identifier: nWVP1fK92LGNQvOWvMTeaMzR2yi5EJl+wzEOPhjKbOQ=
Subject key identifier: 5B:6D:26:70:C9:F2:CE:1F:B2:BE:11:BD:27:5C:94:A7:07:BD:41:37
Authority key identifier: BC:6C:8C:06:D2:D3:C2:80:1F:05:45:8F:C8:34:13:DB:0A:5D:DF:AD
Certificate issuer: /CN=bc6c8c06d2d3c2801f05458fc83413db0a5ddfad
Certificate serial: 019A71EE5E955C8C32A94C57436BB8CACEE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.mft
Manifest number: 16D8
Signing time: Tue 11 Nov 2025 08:00:38 +0000
Manifest this update: Tue 11 Nov 2025 08:00:38 +0000
Manifest next update: Wed 12 Nov 2025 08:00:38 +0000
Files and hashes: 1: fGA1M57yGBtOMUI08h8wD_v-d7E.roa (hash: CuPB00S3uLOygPninxMXcEhxd+sJxquT0fKOzzZvR50=)
2: n1Z0Q-YQVQVsp6EtaSdV5kxzK8o.roa (hash: j/RbuEbSmCY6X+urcyJxBIm09OVw0mWKye4GRN1M584=)
3: vGyMBtLTwoAfBUWPyDQT2wpd360.crl (hash: nH1rhe26rz0iRY8RgP3lvVekFQaQlJZjbGbnq+d4KZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:5e:95:5c:8c:32:a9:4c:57:43:6b:b8:ca:ce:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6c8c06d2d3c2801f05458fc83413db0a5ddfad
Validity
Not Before: Nov 11 08:00:38 2025 GMT
Not After : Nov 12 08:00:38 2025 GMT
Subject: CN=5b6d2670c9f2ce1fb2be11bd275c94a707bd4137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:07:1e:ba:b6:6f:fc:8b:26:31:ab:24:3a:
7b:fd:5c:7d:15:26:9a:9c:e3:1c:e5:84:f3:55:0d:
56:f5:af:16:b1:12:9a:67:f6:1d:bd:9e:1a:c7:e8:
b2:57:3a:77:de:f4:16:70:b0:3d:f5:5c:31:e6:39:
3b:6e:83:0c:e2:55:62:91:11:f0:2a:c0:1f:2c:0f:
7d:5b:44:25:98:e8:69:c4:99:07:b3:dd:d1:5e:40:
5f:46:36:f7:b0:72:7a:7d:70:1a:51:92:a6:0c:af:
dd:9b:5a:88:ef:c9:c5:39:75:45:06:66:ab:9d:62:
82:1e:77:28:82:7a:02:d6:d1:35:aa:37:fc:f4:31:
64:5e:80:4a:a6:34:b1:09:79:b8:8c:8c:6f:6c:0e:
a2:72:df:fc:66:64:d3:60:28:c4:f4:13:81:20:28:
5f:9f:5a:bc:4a:7c:e9:0e:7e:97:b0:86:42:fa:3a:
0e:61:1f:b8:97:31:3c:6d:9f:4b:ca:95:b2:02:37:
2e:b5:5f:61:b6:2a:a3:08:f8:f5:b2:47:c0:c3:2d:
4a:d6:17:b1:2e:c1:55:3a:3f:f2:7f:bc:5b:26:7c:
5d:ff:92:87:cd:85:26:8a:7f:5d:a6:1a:b5:49:5b:
52:36:30:a2:f6:44:6a:46:1b:db:8a:33:c7:89:32:
7f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6D:26:70:C9:F2:CE:1F:B2:BE:11:BD:27:5C:94:A7:07:BD:41:37
X509v3 Authority Key Identifier:
keyid:BC:6C:8C:06:D2:D3:C2:80:1F:05:45:8F:C8:34:13:DB:0A:5D:DF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cf:ca:92:66:d5:fb:df:99:b5:22:48:96:80:9a:3b:9c:5c:
90:37:65:e7:ed:7f:da:e8:32:0f:22:2d:d5:77:e3:59:ba:30:
89:7f:50:bd:8c:9d:ef:25:cc:c4:94:47:f7:56:ca:6c:63:4b:
7c:0f:54:1a:03:65:e2:8f:c0:fb:ba:2a:0d:e2:4b:7f:df:a0:
a0:b0:7b:5b:c6:ca:c2:cc:85:97:65:c1:19:f2:95:62:d0:63:
01:8c:71:77:fb:dd:bb:fb:bb:7e:55:0a:55:79:76:45:31:8e:
89:f5:77:c8:ca:a5:c1:59:71:a5:4d:32:29:a4:2a:07:83:37:
b2:68:2f:12:27:1f:d9:1e:78:a8:92:74:df:9b:33:d3:cc:62:
3e:d7:4f:a3:2a:a6:72:89:10:26:16:7c:5e:33:da:b5:f5:a7:
a3:41:6c:a0:60:fe:00:d7:bb:77:b4:5f:ba:11:20:c9:41:52:
8c:ff:44:74:dd:92:46:9d:32:93:6c:a8:33:18:65:6d:db:ea:
bd:3c:7b:6e:9c:6c:ba:27:fd:04:f3:7f:eb:1c:b0:36:1b:c0:
6b:a9:23:08:8d:27:dd:65:e4:f4:1f:ce:66:4b:62:14:21:e3:
93:c4:48:44:a1:81:de:03:24:b0:6e:77:ad:2f:a0:41:7f:22:
35:be:37:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:45 2025 by rpki-client