Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
File: vOyMcyqkPvCzm9NNFA_dOnOu23k.mft (raw, json)
Hash identifier: 16S6ol+xN2zqiPCifv+cW9rDv7HIfoztr/oc5MRZn8M=
Subject key identifier: 96:56:19:09:D1:DC:1C:44:08:C7:F5:A2:D2:6A:9D:18:32:B2:00:BA
Authority key identifier: BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
Certificate issuer: /CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Certificate serial: 019A18E24912C660BC97EE806C9A5261D7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
Manifest number: 16F4
Signing time: Sat 25 Oct 2025 01:01:14 +0000
Manifest this update: Sat 25 Oct 2025 01:01:14 +0000
Manifest next update: Sun 26 Oct 2025 01:01:14 +0000
Files and hashes: 1: MXOFcfnTUbTG0Z0k6jm9OvZjusI.roa (hash: g12bb8NYsiYXoa8eXe67xmpUlRgVE1p14iprEmnae2Y=)
2: vOyMcyqkPvCzm9NNFA_dOnOu23k.crl (hash: uIZPrNw9BbmGqH4kmNXmeM4Tt2brCjkje03E58S8hZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:e2:49:12:c6:60:bc:97:ee:80:6c:9a:52:61:d7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Validity
Not Before: Oct 25 01:01:14 2025 GMT
Not After : Oct 26 01:01:14 2025 GMT
Subject: CN=96561909d1dc1c4408c7f5a2d26a9d1832b200ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:60:13:d0:b6:7e:7d:17:54:5e:32:8f:ab:
c6:c4:a1:0f:9b:cf:1e:54:01:69:0d:8f:46:25:64:
a8:11:d5:e5:42:1b:fe:c9:c6:9c:66:5f:6f:eb:0c:
e2:5a:c5:79:96:b9:de:f0:87:af:56:fe:54:7b:83:
ff:dd:ed:6e:59:80:61:4b:d0:84:8e:61:91:db:68:
ed:4e:97:40:6d:04:68:ca:e7:86:27:0a:1b:af:6e:
7c:b0:99:48:dd:2c:af:b8:de:2b:7c:cc:09:6f:92:
86:95:bf:b5:5c:54:a6:3a:98:d2:20:ca:d2:5e:f3:
f0:43:30:1d:bd:79:3b:ad:27:4e:54:c6:29:af:9f:
2a:79:6c:67:b7:86:32:21:4a:4f:f6:51:50:2b:f7:
f0:b8:2b:53:a2:cd:00:32:8c:f8:65:81:bd:dc:9d:
0e:b1:c0:03:48:07:6a:a8:0c:2c:33:3a:4f:63:01:
4d:4a:96:26:44:2a:37:8e:1c:05:0d:0e:77:02:6d:
51:cc:94:0b:02:86:ee:ef:3b:73:35:da:98:40:0d:
45:f1:10:a9:8e:b1:3f:6e:5f:0d:eb:0a:bc:28:c9:
7e:ea:56:80:f9:81:78:b6:74:d2:01:7e:7b:75:86:
39:f6:d2:26:ff:c7:cc:f3:bb:2f:ed:d1:35:75:5f:
8f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:56:19:09:D1:DC:1C:44:08:C7:F5:A2:D2:6A:9D:18:32:B2:00:BA
X509v3 Authority Key Identifier:
keyid:BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1b:1a:b2:a7:89:ac:78:39:c5:d3:d9:5e:7c:29:22:49:f4:
95:e2:f4:be:0a:28:55:f0:51:a4:ee:aa:79:26:6e:5f:4c:dc:
db:29:0e:01:e0:06:26:44:39:38:82:ae:0d:b6:6e:6c:2f:49:
4e:03:ed:4d:6f:3a:7a:be:5b:ed:f7:56:0f:be:f3:bf:de:d2:
b8:dc:ab:35:a1:9d:eb:a2:2e:43:26:b3:56:17:9b:71:cd:a5:
9f:10:14:7e:f5:fb:d3:63:73:c3:6a:7d:4c:90:55:a0:c1:ae:
8d:e8:2c:15:1d:b3:f3:50:da:f4:93:c5:2a:2d:61:f5:84:31:
7d:42:07:6c:8a:97:a6:2a:c9:83:85:90:80:bc:40:5a:8b:a6:
c5:a0:bc:d1:02:6d:f0:dc:e4:d3:af:8d:4c:46:63:a8:bd:c5:
84:82:09:c6:09:05:8d:cc:3b:5d:2f:22:79:4a:fa:1d:5d:31:
43:1a:6b:5a:83:0f:c6:63:2e:6d:4e:10:04:4e:b8:2f:49:3b:
69:34:a3:8c:88:01:7d:75:6d:c4:fa:2b:d2:1f:90:25:ef:4d:
a9:b8:f3:6f:6a:0c:38:d1:82:00:eb:69:ff:34:d2:f5:3c:33:
c5:3b:fe:0d:1c:85:e4:0b:5b:83:68:89:37:51:8b:ab:70:1e:
07:e8:dc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 05:10:18 2025 by rpki-client