Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
File: vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft (raw, json)
Hash identifier: Y8fA+6xAles2qoKr9O2ZGz2IHyFWGB7ZLebQ+SjhHLs=
Subject key identifier: 0C:3A:15:ED:F1:D5:3A:73:01:D0:6E:D7:F8:D4:AC:22:99:64:99:EE
Authority key identifier: BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
Certificate issuer: /CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Certificate serial: 019A0A811E56968DDFE2BC4F2C071E4E4C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
Manifest number: 0473
Signing time: Wed 22 Oct 2025 06:00:25 +0000
Manifest this update: Wed 22 Oct 2025 06:00:25 +0000
Manifest next update: Thu 23 Oct 2025 06:00:25 +0000
Files and hashes: 1: 8pgaGBXBaUb02KKfxBTaArJBx7M.roa (hash: MwzlZRqfpq85Jtfy1BfMUyKAa2i1GlwvDq8Y0Ug3Xu8=)
2: B6_6e2WVsyfaOmjKudfNr0g4dMs.roa (hash: rRjjEbNFtXOP8HK5A6ODglpO6DXLSRaxFyjXQUR8uMo=)
3: vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl (hash: FexNoOTM2Otz7xVmP+WKjgptxL4Pr3MxVQNj7Jr9igo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:81:1e:56:96:8d:df:e2:bc:4f:2c:07:1e:4e:4c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Validity
Not Before: Oct 22 06:00:25 2025 GMT
Not After : Oct 23 06:00:25 2025 GMT
Subject: CN=0c3a15edf1d53a7301d06ed7f8d4ac22996499ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:ab:78:84:5d:8f:98:40:87:3e:6b:3b:9c:
df:6b:00:90:f3:02:58:8c:b1:2f:bb:fe:9f:6e:bf:
d9:16:23:e4:5c:b3:1b:6e:70:44:a4:6e:45:25:15:
cc:1a:dc:3f:95:e3:0a:17:23:89:21:de:65:52:62:
4f:49:b4:30:63:89:3d:3b:3e:88:2d:a4:6f:e1:3f:
b4:1f:2a:63:23:da:6f:80:e5:5f:d7:ee:fd:5e:0b:
63:06:d5:55:17:4b:db:00:34:18:61:3d:2f:cb:91:
93:ea:b8:38:a4:15:55:fe:97:60:9f:5c:14:22:60:
6e:2a:44:84:10:8b:d0:3b:24:79:9d:6d:c1:2c:4b:
89:86:38:fa:3c:cc:c1:e9:4b:c0:c2:eb:5f:12:3e:
65:5d:54:a7:1e:98:56:d4:24:cb:3a:27:7d:1c:f0:
4d:33:6d:6b:0e:d1:a2:d0:ba:7e:09:05:86:84:8e:
30:dc:71:4f:7f:44:e8:17:db:6b:2d:98:db:45:51:
4b:a9:81:2f:c1:52:cb:c0:a3:d5:bd:23:dd:05:b7:
31:72:87:30:58:07:52:03:4a:61:75:44:65:17:42:
93:a9:89:9f:8d:1d:54:8e:35:ca:64:8c:96:41:d5:
be:90:79:ea:76:f1:b2:14:2f:58:f3:c4:0a:6b:e2:
b0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3A:15:ED:F1:D5:3A:73:01:D0:6E:D7:F8:D4:AC:22:99:64:99:EE
X509v3 Authority Key Identifier:
keyid:BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:3d:8f:49:8c:16:63:72:b2:3e:95:f9:50:5c:9f:97:1f:f4:
3f:b6:02:07:d2:0c:fb:98:8f:77:e5:80:92:29:c1:a9:e7:ca:
da:6a:4c:15:b8:aa:e2:ff:86:b7:57:fb:27:3c:05:70:03:96:
1e:71:89:8a:75:42:32:c0:03:05:88:16:f9:98:c7:0f:ff:46:
5a:0c:8d:64:c4:8b:83:f7:a8:34:21:98:f2:80:8b:db:52:49:
a1:a8:a2:92:f2:70:01:f1:08:b0:97:58:90:62:80:33:b3:59:
42:e7:77:b3:bd:56:7e:ff:9f:01:f7:37:c2:6b:93:9f:4e:07:
62:ae:33:b4:a7:db:a7:eb:3f:38:90:e7:1f:79:be:f3:dc:b3:
c5:1c:5e:44:cc:86:36:dc:d5:1f:dd:fd:15:91:ab:6f:84:2b:
f0:93:09:a0:89:94:13:cb:c2:75:fd:01:2a:43:a2:7f:37:ce:
b3:07:c5:83:04:92:f9:4e:27:ed:a3:4a:00:a5:2f:50:1b:b6:
89:95:76:a8:7f:bb:1f:3f:47:2a:3a:58:10:47:78:1b:70:89:
de:07:7f:32:44:67:c5:82:5a:ce:7f:12:b0:ce:f4:ef:40:12:
36:e1:2e:34:f6:b0:f4:09:ce:d4:b2:2a:19:68:a2:39:d0:a9:
2a:a7:15:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 15:08:31 2025 by rpki-client