Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
File: vGW0uk14adXLj5V08PT-7nDrxsU.mft (raw, json)
Hash identifier: YO6Qh1ojA8BQuC8L7WpeR9yB3vvNYk1whpfIYW1vOtw=
Subject key identifier: FB:26:89:19:81:D1:7A:F9:BF:7D:4C:CB:06:24:2C:3C:9C:27:81:7F
Authority key identifier: BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
Certificate issuer: /CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Certificate serial: 019A1AD15DDCBD8294CBB51509E601EA93DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
Manifest number: 16F3
Signing time: Sat 25 Oct 2025 10:01:59 +0000
Manifest this update: Sat 25 Oct 2025 10:01:59 +0000
Manifest next update: Sun 26 Oct 2025 10:01:59 +0000
Files and hashes: 1: Lyt3wxp7GPsYmae1yjcH7ZriVhY.roa (hash: hPKn4hG6PTy5BGSQf4AvDzlOXQQIjurdWjZynBc0Dss=)
2: tj6K5SjptWHwjdC118oFQLdh9d0.roa (hash: r+olKMGe/rwlvBp2fd9whUIN+tGxqF1STWjeBypW8Gg=)
3: vGW0uk14adXLj5V08PT-7nDrxsU.crl (hash: Q1gfXJsWBVxy9N1UCv/rW1abeTDVF04Sa0scJAL6zjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d1:5d:dc:bd:82:94:cb:b5:15:09:e6:01:ea:93:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Validity
Not Before: Oct 25 10:01:59 2025 GMT
Not After : Oct 26 10:01:59 2025 GMT
Subject: CN=fb26891981d17af9bf7d4ccb06242c3c9c27817f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:d8:cc:a2:c4:29:ab:ae:15:7b:33:cb:54:
58:14:b7:93:b6:a1:7f:59:56:02:d5:45:d8:96:3f:
45:28:51:83:20:73:70:2b:66:fe:83:b6:b2:61:c9:
e2:64:3f:a4:a2:32:fb:df:94:ea:43:58:64:2d:14:
a8:4e:70:0c:46:24:d8:f0:d5:18:77:ee:0f:89:81:
0e:19:b0:03:e6:08:81:04:6c:fa:8c:44:75:a5:3e:
57:bc:8e:91:d5:d6:ce:ae:9e:0f:fd:c7:2d:13:aa:
97:7b:c6:a5:28:04:2f:f5:51:6b:9e:83:f7:b0:f0:
83:40:a5:7e:66:bd:dd:ee:5b:91:f9:5b:f2:3d:8c:
29:09:9a:3b:6c:2c:85:c2:e6:08:b7:1a:b8:fe:24:
b2:8b:70:49:46:a3:22:89:4b:40:a3:23:f1:07:01:
af:eb:a8:24:92:02:54:d8:cc:8b:0a:34:8b:36:63:
c7:09:dc:e9:44:49:75:82:fe:ac:80:05:63:c4:e0:
d3:f7:50:26:bb:87:a5:5f:65:c0:93:c2:97:e1:9f:
9a:6f:21:4d:31:af:3c:0b:ad:6e:08:86:b1:7c:ab:
51:df:ef:bb:76:b9:ca:0d:72:4c:6c:ac:c1:4f:98:
f1:c8:9e:b9:64:0d:fe:1f:eb:2a:c6:57:8e:0b:75:
de:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:26:89:19:81:D1:7A:F9:BF:7D:4C:CB:06:24:2C:3C:9C:27:81:7F
X509v3 Authority Key Identifier:
keyid:BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:06:79:e2:2a:82:c3:c1:8c:33:36:94:93:eb:42:49:ab:f7:
32:aa:07:40:05:18:06:d5:3a:a8:a3:aa:4f:0c:f0:83:45:79:
59:4b:bd:f2:0f:6f:73:cb:a1:a7:a7:0e:42:e4:eb:65:5f:d5:
e1:d8:10:71:e7:e9:39:b4:4a:03:48:e5:ba:40:b2:f0:f1:7b:
f4:2d:72:69:90:ba:4c:c9:5f:5b:99:9a:80:05:3c:d9:92:6d:
ad:0c:1c:d8:f6:56:c7:8b:c1:d5:96:1f:16:3a:2e:2c:bf:e6:
52:60:7f:c8:0d:d4:92:ba:87:5d:a7:ff:e9:61:9b:76:95:8d:
37:6d:fa:e1:83:3b:e7:48:37:38:1f:c7:62:70:6e:f5:dc:29:
2f:0a:ef:8f:41:21:e9:5c:b3:b2:fc:d5:62:74:92:b0:73:80:
c0:2d:e1:06:6e:42:07:ca:75:0f:9d:70:d2:d5:80:64:80:fa:
9a:fb:e6:88:11:4a:6a:27:0e:58:bf:8e:dd:47:fc:ff:cd:63:
fc:25:c0:e1:84:03:95:37:8e:eb:ca:51:61:4f:d1:68:be:5c:
15:38:8d:d8:48:0e:c9:99:75:69:fe:d0:06:50:04:20:db:c8:
e6:b5:dd:37:fc:fd:07:ff:8a:3c:e8:8d:33:95:75:43:a3:01:
7b:81:08:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:42:36 2025 by rpki-client