Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
File: 1-vcGbaCaViJCYORuom3Jyx26jjc.mft (raw, json)
Hash identifier: mErf/Nzf8YpzU0xcxIIZU1GZXpvWjUvIqeG7JGgVpGs=
Subject key identifier: 9A:85:97:EB:03:CB:27:8D:CE:3D:DC:E3:2C:12:AB:D2:12:B7:3C:CD
Authority key identifier: FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
Certificate issuer: /CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Certificate serial: 019A71EE860941215B71C872AAFB15BA934F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
Manifest number: 1263
Signing time: Tue 11 Nov 2025 08:00:48 +0000
Manifest this update: Tue 11 Nov 2025 08:00:48 +0000
Manifest next update: Wed 12 Nov 2025 08:00:48 +0000
Files and hashes: 1: 0npgtCw2cniYZRSczr6L1wq2NDE.roa (hash: 7qLMTW4Hb0+zjkcR3VjQ/z+HhWTfAgpVarVUL4CErX4=)
2: 1-vcGbaCaViJCYORuom3Jyx26jjc.crl (hash: HQmaqJR7ki9jUK+uDzFACpGjJ63Cq+3qRDY9rA2ASNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:86:09:41:21:5b:71:c8:72:aa:fb:15:ba:93:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Validity
Not Before: Nov 11 08:00:48 2025 GMT
Not After : Nov 12 08:00:48 2025 GMT
Subject: CN=9a8597eb03cb278dce3ddce32c12abd212b73ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:32:1e:9d:c9:2e:7c:f6:87:35:da:21:00:c1:
5c:7c:47:dd:a5:74:20:24:06:28:a9:19:9b:4a:7c:
b4:9b:ae:fd:65:49:88:af:86:21:2d:8b:5c:4c:68:
62:82:b2:9c:88:66:b5:87:ce:ed:37:e8:f2:36:a2:
b3:e2:68:e6:38:aa:d5:95:ac:18:dd:b6:53:2a:6d:
a4:ff:8a:67:9f:49:9e:c3:1d:72:f0:21:f5:c8:27:
12:03:57:22:ee:33:cd:20:fd:c9:fa:51:67:aa:74:
bd:b8:33:77:f2:aa:dc:99:c6:30:7a:5b:97:51:ed:
80:93:de:79:d9:09:93:2e:eb:ac:e4:ba:e1:c9:cc:
2b:3f:56:e2:8e:56:fc:07:41:da:f1:b6:44:d9:92:
9c:b7:71:94:ed:f2:81:95:14:39:20:e0:fb:8b:1b:
a9:df:7a:75:e6:3b:81:12:20:da:93:d3:d7:ee:e8:
fd:83:ac:c2:b1:8d:a8:9b:9f:54:4e:cc:23:26:61:
ef:bc:c8:11:9b:86:3f:26:7c:a8:ba:f6:2e:3f:7c:
83:0e:ae:d8:23:bd:06:68:6c:e6:16:89:fa:63:89:
f0:cf:c6:2f:1d:ad:24:2f:96:99:9c:05:67:b3:00:
38:cc:4e:89:73:f1:bf:a6:e8:cb:96:cc:d0:9d:b5:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:85:97:EB:03:CB:27:8D:CE:3D:DC:E3:2C:12:AB:D2:12:B7:3C:CD
X509v3 Authority Key Identifier:
keyid:FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:0c:a3:b6:62:db:40:c9:39:10:77:30:54:93:a2:4c:bb:67:
6e:e6:a4:0b:06:0d:7e:08:2d:ff:1c:b5:aa:5a:11:63:2f:f9:
0b:3e:29:af:61:e1:1b:08:29:52:53:98:59:39:f9:e1:9f:f1:
95:e6:fc:99:75:f2:ce:e6:98:cd:24:c5:a3:be:3f:9a:16:99:
6e:d7:0a:c3:71:c7:3a:68:18:55:84:75:f9:bc:b8:f8:c7:9a:
e4:96:03:a3:a7:d6:70:12:40:d0:b9:f3:61:d2:86:0b:6d:8f:
e9:16:12:7c:ca:cd:85:8e:e2:b3:9d:4f:25:28:ba:3d:0f:ec:
7a:39:ef:e8:aa:b7:af:92:65:97:ed:9a:08:42:99:ef:b4:6c:
cf:b8:b9:9e:43:8a:7e:89:c2:3f:ae:6d:73:55:ec:56:e8:98:
8c:93:77:f8:36:16:73:e3:91:88:97:7b:e4:a6:f7:cf:7e:18:
d5:6a:34:26:ea:4f:35:40:97:bb:f4:fe:46:e1:eb:ee:9b:6f:
83:76:90:ec:ac:81:1f:cd:2a:ff:bc:a9:e7:1d:b8:85:f7:95:
5f:2b:b1:ac:7d:4a:90:21:43:f0:54:cc:7c:a7:f1:52:7e:4c:
2c:21:e1:fb:29:98:86:85:19:d7:a8:9c:1a:c8:97:7c:f0:70:
cf:6d:8f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:59:38 2025 by rpki-client