Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
File: vyk4WQ4NABlyVmLUtK5Myew6c00.mft (raw, json)
Hash identifier: v6Fnh8FP6qDowLsl527fL9qOnq4EAj0NTeot1YByVgc=
Subject key identifier: 46:A1:65:A8:29:BF:FF:53:83:BF:A9:E7:A2:AF:26:12:4E:41:D9:F3
Authority key identifier: BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D
Certificate issuer: /CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d
Certificate serial: 019A20D2578EFCEE4E8B6AF784E180E1A77D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
Manifest number: 0994
Signing time: Sun 26 Oct 2025 14:00:47 +0000
Manifest this update: Sun 26 Oct 2025 14:00:47 +0000
Manifest next update: Mon 27 Oct 2025 14:00:47 +0000
Files and hashes: 1: vQtF-L-9ooOZxF-UCZufP97_4Tk.roa (hash: uZu5EdE4zrTNj+JjaQISrCgWGaWpGkfUNjvMVUEKljA=)
2: vyk4WQ4NABlyVmLUtK5Myew6c00.crl (hash: AjrE+SFLNIQucQ6w10YQe7racU6tGIqEsQWOW6AXB6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:d2:57:8e:fc:ee:4e:8b:6a:f7:84:e1:80:e1:a7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d
Validity
Not Before: Oct 26 14:00:47 2025 GMT
Not After : Oct 27 14:00:47 2025 GMT
Subject: CN=46a165a829bfff5383bfa9e7a2af26124e41d9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d0:c4:23:d4:47:76:98:61:8c:04:c3:f6:69:
32:33:31:4d:e0:5c:0a:2b:bb:8a:78:f5:39:ff:a1:
c2:15:bf:0f:a1:96:b5:7b:ea:4f:a5:96:f4:07:f4:
c5:4e:2f:62:db:41:36:75:ab:89:4b:2c:00:92:95:
eb:c7:56:d8:64:f3:8a:2e:d0:2e:44:5c:a1:9b:03:
b5:f2:c9:85:5e:51:cc:f7:e8:55:08:a9:ec:36:fc:
12:cb:dc:b1:d3:fc:1d:f3:46:49:19:21:2d:42:bb:
8a:61:74:1c:d9:fb:7e:2a:06:cd:6d:13:f5:97:c8:
a3:d2:f7:8b:b2:b2:9e:0d:89:1f:72:bc:ee:83:d2:
3e:e8:3b:b5:0a:57:65:16:f8:e5:e0:f0:7c:ba:60:
47:f7:99:d1:19:bc:44:ba:0a:49:1f:0e:dd:a3:80:
23:7d:35:98:c5:35:02:ee:46:33:72:ac:c9:84:4e:
f4:99:29:a3:12:6f:22:b2:d2:49:f1:37:9f:97:7b:
cd:de:d6:7f:02:ba:4a:45:26:16:60:51:f7:7c:38:
2c:ba:74:42:20:ca:41:b5:f6:d7:d9:3c:d1:cc:72:
b9:90:11:12:87:00:d8:2c:eb:3f:89:ee:c7:94:d9:
cf:b7:78:1e:5f:c8:f1:72:40:e5:1f:a8:09:e4:1f:
19:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A1:65:A8:29:BF:FF:53:83:BF:A9:E7:A2:AF:26:12:4E:41:D9:F3
X509v3 Authority Key Identifier:
keyid:BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e1:36:7e:eb:1f:d7:6f:a3:bd:05:02:94:68:cd:71:fa:e7:
24:07:ef:13:f9:d6:ef:8a:bb:ac:af:3d:2e:0f:3b:a3:9d:25:
7d:34:02:c0:1f:a9:89:6f:82:cc:08:19:04:ad:ff:de:7b:54:
17:d5:ca:5b:32:fd:6f:b7:d3:e3:f7:fe:2f:d2:de:e7:77:13:
b0:e0:15:b4:b2:e8:61:34:78:fd:d5:92:9b:aa:d4:8a:fe:3b:
27:ca:f6:2e:d6:bc:19:0f:6c:29:4d:5c:f6:0e:28:e4:f9:2c:
14:3e:75:ba:bc:48:e0:56:23:14:21:b6:e0:e5:83:ef:96:d3:
0d:30:8d:60:a1:09:a2:94:e8:9d:97:7e:2a:73:ac:64:cb:60:
5f:b7:85:6c:62:2b:68:2e:05:31:2f:91:27:dd:f0:0f:71:ca:
c8:41:4b:8c:75:51:07:d8:78:28:16:c3:ff:2f:bb:65:53:00:
4b:31:8c:3e:50:73:f4:47:af:c3:9c:73:9c:b3:f1:0f:5d:c4:
4d:42:e4:65:8d:f7:52:a5:63:59:b4:f1:17:81:0d:1a:f0:69:
26:10:63:8e:5e:51:73:8a:5d:4d:ef:5a:d6:58:c0:13:f5:65:
58:4c:a0:4d:e9:5b:69:52:f9:b8:bb:32:37:dc:34:44:1e:b4:
82:82:20:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:51:00 2025 by rpki-client