Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
File: vG0u13lNMhfPqv4crVP3Vbgs46k.mft (raw, json)
Hash identifier: 6CP1FYX2royO7NFC6/0bmF0SUByEyzi3NbwrN12WzkA=
Subject key identifier: 79:F6:3A:DB:61:8B:B7:41:6B:F0:46:05:F7:0B:F7:86:2C:F7:C2:A4
Authority key identifier: BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
Certificate issuer: /CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Certificate serial: 019A2D7B6411E4A645F5F5781BCCE3C8930F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
Manifest number: 16FA
Signing time: Wed 29 Oct 2025 01:00:52 +0000
Manifest this update: Wed 29 Oct 2025 01:00:52 +0000
Manifest next update: Thu 30 Oct 2025 01:00:52 +0000
Files and hashes: 1: Rfx73to5lynfa5P988aJIcpZHW0.roa (hash: fb46D6K33gqqGx/M4AgtMP1UJSgJ24dkYkKRuFAfTRM=)
2: vG0u13lNMhfPqv4crVP3Vbgs46k.crl (hash: YvFnYW5qGERhfnG5wPgD6GBGW3lcIPVHmjk4rq8aq4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:7b:64:11:e4:a6:45:f5:f5:78:1b:cc:e3:c8:93:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Validity
Not Before: Oct 29 01:00:52 2025 GMT
Not After : Oct 30 01:00:52 2025 GMT
Subject: CN=79f63adb618bb7416bf04605f70bf7862cf7c2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:86:cd:05:9b:69:16:8b:dc:7b:a2:86:ae:
be:ac:ac:48:25:74:ab:25:f6:f8:29:8c:43:43:e4:
c8:da:be:0f:74:56:57:bd:dd:cc:e4:98:96:5e:7b:
7a:1c:c9:dd:f9:7a:c2:88:d7:08:c3:17:bb:f6:08:
38:a2:43:99:4b:af:1d:a6:2d:a8:7b:eb:44:50:94:
c3:90:20:e0:a7:b2:eb:c1:d0:a5:5c:f3:51:c2:98:
d0:b3:31:5b:23:69:a3:02:f4:33:01:9a:12:a3:56:
68:92:1f:9c:5a:32:5e:8f:a0:4a:3f:26:d9:34:c0:
ea:d1:d4:70:2b:3d:93:34:1a:82:67:6e:ec:a2:46:
6f:cb:30:66:f4:da:61:a6:18:c6:81:43:7e:4d:2b:
cc:76:ed:2a:78:34:04:76:34:7a:20:5d:19:92:6b:
18:81:16:e5:16:58:2e:8c:46:00:2a:a3:70:d4:97:
0a:e3:78:1e:78:81:44:12:bb:00:60:13:8f:ed:63:
6e:50:9b:93:c5:65:6d:1d:08:d7:fe:27:9e:0d:29:
43:fd:d9:0d:d6:d7:06:f3:ed:4f:6d:ca:e4:de:7c:
9c:64:ea:72:e0:6d:66:4c:24:bd:8d:55:9f:93:e8:
51:14:b1:07:13:7c:fe:a4:0d:9e:d2:d8:a2:73:1d:
29:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F6:3A:DB:61:8B:B7:41:6B:F0:46:05:F7:0B:F7:86:2C:F7:C2:A4
X509v3 Authority Key Identifier:
keyid:BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5f:f2:49:ba:d9:3c:3b:70:6f:09:71:75:72:96:f1:5f:84:
27:c6:20:c7:66:09:3a:f9:d4:72:65:1a:4e:c1:e2:09:f0:6a:
47:99:10:49:6b:5a:94:dc:f4:ee:47:ee:9a:10:47:ae:8f:c5:
9a:34:31:96:f1:9c:16:a1:1e:8c:e2:0d:53:f8:85:fa:c6:8a:
66:ab:b7:d3:ab:92:87:57:2c:e2:99:32:0f:71:db:30:bb:f9:
b0:9d:05:e1:f2:c1:81:94:fd:10:ce:db:fa:76:14:45:ec:12:
54:74:bf:1f:cf:7a:4d:8a:02:ef:cf:3b:82:b1:8e:9c:af:c0:
80:d7:07:b7:cb:e7:e3:b7:a5:39:4a:f5:40:17:7c:a3:65:16:
11:3e:ff:94:a3:63:d7:f5:94:37:79:9b:14:0c:d0:56:2a:74:
8b:ea:15:bc:d3:36:5b:d4:2d:68:89:8a:90:13:73:27:cf:1c:
a1:bb:a5:10:2a:ff:cc:ce:57:e3:7c:b0:fa:70:75:73:a3:3c:
a3:23:8b:8d:c8:20:3b:a3:10:d1:7c:a9:60:bc:e5:c9:79:af:
0d:d5:a1:26:3b:38:7d:ea:3c:fc:05:67:31:ed:5d:e8:23:bd:
c8:65:20:7c:fa:a0:cb:2e:85:4f:9e:ab:5c:f6:18:e0:6f:04:
17:05:56:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 08:50:18 2025 by rpki-client