Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
File: vSUqdclhrTOP2RFH1GHdiz0gz1E.mft (raw, json)
Hash identifier: SW3v6nB6TwNzpYlFd9Ai00yjDhvU0IUG9LS9812tGzQ=
Subject key identifier: 98:A3:9E:99:13:F4:56:CE:1F:AA:51:05:05:A8:DE:64:54:7B:DC:82
Authority key identifier: BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
Certificate issuer: /CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Certificate serial: 019A093754461F3781494CD3A71774AD2151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
Manifest number: 16F1
Signing time: Wed 22 Oct 2025 00:00:12 +0000
Manifest this update: Wed 22 Oct 2025 00:00:12 +0000
Manifest next update: Thu 23 Oct 2025 00:00:12 +0000
Files and hashes: 1: 1-CES3FR9UbzoTEzUN5ZiiMYeBq8.roa (hash: Mx7tnLRZogKgAVJUpQmT5FDn0ojfnBYxv7dXF6PkiKk=)
2: fj83OICA2dXkb7sofXdOoGdjzq4.roa (hash: pOA5XIvHm6EKh1V95/EfmbQrXTJ90+bGbqMr2BZtsSk=)
3: pDkCQjQVPegQOP278WmolhHSrkw.roa (hash: VPjogK0/dxD5LybI2fhbuslUMxpJB7AerXcZh/G3cj4=)
4: vSUqdclhrTOP2RFH1GHdiz0gz1E.crl (hash: C6/KIXNVMGW0GnX1ZpXmZu+3UqYJr3tQJkYJM44Hlno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 19:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:37:54:46:1f:37:81:49:4c:d3:a7:17:74:ad:21:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Validity
Not Before: Oct 22 00:00:12 2025 GMT
Not After : Oct 23 00:00:12 2025 GMT
Subject: CN=98a39e9913f456ce1faa510505a8de64547bdc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:cd:33:fd:ee:cb:34:6a:8b:89:4f:28:64:
bd:cc:c8:0c:b6:11:ff:11:17:0f:b9:c7:e8:18:72:
13:da:06:0f:c4:40:b6:d4:2b:c8:82:92:b2:72:b7:
4e:8c:4e:78:1a:6e:bd:40:98:33:72:a3:69:6a:ce:
c9:bb:64:7d:36:1c:3d:1c:60:80:ea:63:87:4a:00:
20:06:c9:3a:b7:51:6e:9c:c6:a3:ba:15:f4:fa:d7:
f5:fd:9f:e1:79:0f:65:cb:63:2d:a5:fa:3f:d5:9c:
14:26:99:fe:aa:a5:6d:80:0d:a3:29:96:e1:e1:e9:
11:16:e0:43:54:2b:e2:fe:ed:28:18:7a:35:23:7d:
d8:db:7b:ac:83:77:cf:a9:49:7b:a0:20:5a:90:b5:
57:10:b0:d4:e8:ba:f5:37:c9:aa:04:79:cb:18:9b:
2f:ca:49:fa:48:18:a5:a3:e6:e4:e7:a7:6f:76:94:
45:a1:5b:cf:f1:0e:e7:c8:d4:ea:e2:0d:ee:b5:32:
8e:06:b5:ec:2f:6c:c4:3f:6d:cd:7e:6a:36:89:14:
39:cd:2c:2f:e7:76:6d:b3:72:cc:1b:be:f3:49:55:
82:5c:28:f8:80:99:1c:7b:73:09:ed:58:da:49:17:
d0:a5:e8:78:ac:6d:7a:e4:05:89:a6:f6:a5:b8:84:
5e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A3:9E:99:13:F4:56:CE:1F:AA:51:05:05:A8:DE:64:54:7B:DC:82
X509v3 Authority Key Identifier:
keyid:BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:17:e1:1b:ac:e2:9d:6a:d8:f8:33:d7:91:61:ea:f9:1a:29:
46:bb:f6:2a:0f:fc:50:bc:e8:07:8a:e2:6a:67:c5:d2:a6:03:
a9:a3:f8:7e:84:bb:5a:a2:7a:3b:d1:7d:03:8e:8f:b7:0d:5e:
a6:02:d9:54:70:cf:d9:83:99:a6:54:58:e3:67:52:f3:a6:22:
85:9b:32:21:40:b6:40:b1:38:8b:c5:23:03:e0:da:33:86:2f:
95:1f:d7:01:72:53:dc:5f:03:a4:85:fb:a4:c5:cf:f2:39:8d:
56:85:a3:fc:ab:65:a7:4b:25:d4:60:db:8f:a2:6b:0c:f0:17:
c9:f6:05:37:46:27:f5:4f:71:4e:54:eb:ff:e0:8b:bb:cc:44:
33:d5:5c:c7:54:69:37:e8:14:48:e9:34:e6:8a:13:99:44:4a:
14:ea:26:a1:81:eb:1d:d3:16:8d:ec:6e:a4:8f:7d:0e:9b:29:
49:5d:76:0b:b1:5b:d0:ec:01:3e:f4:5c:e8:9b:86:29:e1:6b:
cc:7a:b5:9a:32:3b:36:82:fb:ee:6d:73:74:de:cf:5a:6a:61:
9a:f0:7e:3a:63:64:f2:ed:59:5c:52:26:b9:2e:a9:0d:be:fb:
3a:f7:e1:7f:f8:c0:e9:84:ff:a7:5f:60:f5:df:73:3c:2a:37:
b0:2c:8a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 02:50:33 2025 by rpki-client