Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
File: vPVGNoDRS2RYax1bRlZjvLV35pM.mft (raw, json)
Hash identifier: ii3hw4PYRbRjeY5ysEnX8cwLqhBYpwGaANd+gQl6inM=
Subject key identifier: A9:01:6A:3E:5F:59:70:17:27:01:94:C6:BD:9F:5F:B8:71:05:94:4C
Authority key identifier: BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
Certificate issuer: /CN=bcf5463680d14b64586b1d5b465663bcb577e693
Certificate serial: 019A270B34459EBB3B688E0B956D853F98D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
Manifest number: 16FA
Signing time: Mon 27 Oct 2025 19:00:36 +0000
Manifest this update: Mon 27 Oct 2025 19:00:36 +0000
Manifest next update: Tue 28 Oct 2025 19:00:36 +0000
Files and hashes: 1: uVkbwn7y_5MMeq7i0JNXRtOhxHs.roa (hash: ENXYHNx7P9jtVpFvO/C3/8L3MM9tHfB0gwOuIrKil9g=)
2: vPVGNoDRS2RYax1bRlZjvLV35pM.crl (hash: 1TUDk5iQlEhFDuMtwiotWHkAn7Ttd7NuVqXBXH2PKv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:0b:34:45:9e:bb:3b:68:8e:0b:95:6d:85:3f:98:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf5463680d14b64586b1d5b465663bcb577e693
Validity
Not Before: Oct 27 19:00:36 2025 GMT
Not After : Oct 28 19:00:36 2025 GMT
Subject: CN=a9016a3e5f597017270194c6bd9f5fb87105944c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2d:1d:db:ac:ed:7b:5b:85:b4:51:10:4f:a0:
98:61:2c:47:ec:09:0c:1a:f2:bc:1c:ee:47:d4:a9:
c2:d4:a4:5f:2f:51:4b:08:32:a8:7a:53:fc:bc:f9:
c3:a8:db:75:50:4e:50:74:e2:a3:19:db:37:54:ef:
bf:82:96:53:bb:45:89:19:e7:f4:15:d1:3f:5a:90:
15:49:98:59:9b:9d:91:9f:5f:d2:cb:4f:21:35:04:
da:bf:ce:0f:3a:8d:e1:7d:a6:79:2d:ee:e2:d4:60:
0a:aa:22:cc:9b:dd:30:c4:57:a1:aa:21:66:56:ea:
7a:4a:55:8f:e5:23:35:dc:91:ea:e0:71:d0:99:4f:
65:40:7c:cf:a7:62:f0:46:ad:33:ec:a5:a5:b6:0f:
ff:22:c2:82:08:ce:77:75:cd:f3:cf:b4:e3:6f:c5:
e3:fa:01:62:89:45:7d:03:62:bd:7c:ec:1a:27:4c:
69:c5:b4:86:e1:17:9a:c6:08:90:41:02:ab:d9:8b:
37:32:b3:56:81:33:d8:5b:3a:d8:92:37:94:d8:91:
a1:85:d6:c6:3e:da:15:5e:a2:e6:e6:1f:91:91:57:
0a:ed:f6:67:10:93:29:3f:b3:c4:8a:ed:10:37:91:
d4:ae:68:44:48:f3:f7:e9:8f:d6:ac:96:b1:e9:2f:
f7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:01:6A:3E:5F:59:70:17:27:01:94:C6:BD:9F:5F:B8:71:05:94:4C
X509v3 Authority Key Identifier:
keyid:BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:bf:f1:00:ff:c6:54:4a:43:95:9c:77:4b:de:51:54:bd:33:
3e:21:b8:a3:f2:08:b8:97:a4:a2:56:c7:5c:c6:1e:fa:8a:02:
6b:5d:e3:9a:d2:f2:e6:97:9f:9f:27:3a:54:90:bc:38:ea:11:
83:79:66:05:bc:8b:41:e7:42:a1:fd:28:f2:aa:c9:06:31:f1:
be:41:e1:5a:d4:f1:0b:07:55:08:ee:66:f9:4f:f3:a6:e1:e7:
99:8b:dd:a1:d6:b4:46:17:14:4c:56:70:eb:dc:70:70:da:7e:
f7:85:a5:11:ca:15:10:14:ca:42:79:4b:b3:99:0b:b7:5c:0f:
44:2f:9c:dd:a3:1a:42:44:13:ce:96:42:da:58:f0:bb:f4:a4:
09:68:4c:fd:10:ff:96:5a:82:e0:8e:58:ab:a8:1c:8a:f2:2c:
65:fa:dc:71:bb:53:8e:97:83:e9:b9:04:07:48:2f:9b:5f:f3:
f5:5d:bc:ea:ff:2d:d5:0c:89:aa:d2:64:39:ff:65:88:de:40:
69:b7:f3:65:5a:49:1a:44:65:d3:85:2e:af:f4:3c:cc:02:80:
89:06:9a:51:09:17:fa:2b:d6:e8:57:f4:a9:9b:30:ba:72:3d:
bd:ac:e0:e4:b7:83:7a:79:e3:1b:3c:0f:37:8f:78:af:65:29:
9e:66:24:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:45:20 2025 by rpki-client