Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
File: vx1f6v05F0clv-S--RvSfHsvb5E.mft (raw, json)
Hash identifier: VhiDscBDPAVZENjgXQbPokEWMjCWBbj1ht37zLJIecQ=
Subject key identifier: 43:FC:EC:90:DA:C5:25:32:B0:E5:46:5E:DF:27:AC:01:85:F8:2D:A7
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 019A0AB7F922A53959C702D7D3679DE17E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
Manifest number: 1718
Signing time: Wed 22 Oct 2025 07:00:20 +0000
Manifest this update: Wed 22 Oct 2025 07:00:20 +0000
Manifest next update: Thu 23 Oct 2025 07:00:20 +0000
Files and hashes: 1: DFPMPjVgEXra9Yi746ueyHfFEfE.roa (hash: egcn+8V+rmTodHY7QllvkOnDLWLB5ryJAjHfdzE4gEE=)
2: FBtv0zQKgpSJGVwmOiWrJgdZXTQ.roa (hash: jZyVvy/AnilHzUcrfJcn+M+uqzeksVwB5ieR7HcmZ3o=)
3: JLZHp3zugUr0BJKEkPLt_peuCWY.roa (hash: xqh8b79ZtGYi3X/2gVjxCLbm1mPbREjzpn3t3zp8STc=)
4: QBbKMrewUV5LysqmZYBRCD2P-aU.roa (hash: pyCMXVW0aDhN3pnl3u7Ja6A+yxwNB3DI3wsCXDY581k=)
5: WJYzgmcrcmILpqEG0aOvuAZFJSY.roa (hash: 6cn2iTDXSQqMon3jkehha+lFwjisWUfx0Tw++dlztuk=)
6: a2N7ZqNTTwHGwfd7829psoPCAf8.roa (hash: l07jq1tDJlSMiPUaiQ9Tqz6dDSHfIb3Fw8fa48dds2M=)
7: laT6cLR_CsAMLDNRuHbw-QE9_Lg.roa (hash: /As0MXu+Jd4Zfmw66mysjQFz8bFMgrz+a8Z5fFD5uCE=)
8: vx1f6v05F0clv-S--RvSfHsvb5E.crl (hash: 3O+daG3nopYYkMm7TTn2fc/AvC9H5UZsUec8pURuiyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:b7:f9:22:a5:39:59:c7:02:d7:d3:67:9d:e1:7e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Oct 22 07:00:20 2025 GMT
Not After : Oct 23 07:00:20 2025 GMT
Subject: CN=43fcec90dac52532b0e5465edf27ac0185f82da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9e:54:69:f4:02:ca:18:a8:68:84:f9:71:0e:
ba:93:ac:67:fc:16:ce:9f:96:e7:92:17:15:60:6f:
5e:78:42:46:6c:d7:2d:72:e9:b9:08:56:84:01:d4:
09:b5:72:f5:67:cd:97:3b:00:06:df:6b:91:cb:58:
ab:6f:65:84:09:56:63:7d:7b:b3:8d:9f:f9:20:62:
70:bc:76:c4:27:f1:3c:70:0a:75:6f:29:ba:b5:ad:
88:43:ff:34:62:d1:16:b5:85:18:b7:84:95:87:ed:
69:af:bb:b1:bb:ad:cb:14:0d:c8:e0:e2:2e:43:4c:
39:81:91:28:16:a9:c6:08:33:d1:b9:17:90:b1:ec:
78:75:10:be:7e:42:eb:c0:05:90:2c:8d:c6:c9:7c:
fa:79:c1:8f:cb:92:20:c8:17:3f:01:0d:0e:55:52:
6c:5c:31:a2:0e:b4:2f:8a:70:65:bb:8c:3f:52:32:
a6:a5:09:c9:60:6f:c0:ac:40:a9:1f:c6:63:88:1a:
bb:5e:a4:9a:b0:2b:5b:41:e0:08:97:fc:9d:73:04:
69:e2:05:26:a7:98:09:1c:f3:2e:e8:a5:cb:35:6e:
75:62:44:6e:7d:6b:4a:ba:c4:d6:6c:61:99:28:0d:
7a:63:22:44:27:02:7f:3f:5d:6a:50:3a:df:97:c5:
1a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FC:EC:90:DA:C5:25:32:B0:E5:46:5E:DF:27:AC:01:85:F8:2D:A7
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:23:bc:14:74:8b:db:4f:af:ce:ae:e5:53:3b:ce:25:6d:33:
97:66:7d:1b:99:7d:40:90:ac:88:18:46:31:d4:a2:d5:57:f9:
94:99:a1:78:ea:da:ab:ef:dd:60:a5:12:10:14:da:45:32:fc:
23:e4:03:18:84:05:b3:62:ae:ac:95:4f:64:68:a9:56:8d:0e:
49:27:b1:40:f4:78:83:11:94:67:29:52:99:ee:6a:26:92:75:
6c:9f:83:43:e2:8f:9e:5d:b2:03:9d:76:87:d9:c0:45:0c:e4:
c2:81:e5:68:e4:83:fc:7c:17:2c:89:61:ab:4e:73:d1:e9:2d:
1b:6f:a7:19:79:77:3b:f3:8e:30:5b:20:cc:af:0d:cc:00:7a:
6d:91:b0:d6:3f:20:70:7e:27:dc:3b:84:27:d4:26:33:58:be:
72:27:76:dc:54:20:a1:1e:83:3c:25:ea:47:11:37:a9:77:ac:
0d:58:35:2c:94:f0:fc:8f:aa:e6:15:58:30:64:4f:fb:8c:eb:
81:81:9c:5c:f1:9a:61:12:93:43:98:bd:20:cf:5c:53:0f:1d:
29:5a:46:f1:d9:ff:47:ac:19:cc:86:16:6a:99:fa:b6:ba:8f:
49:c0:85:45:ba:9c:e8:d9:57:75:e8:8c:98:d8:25:df:a9:b7:
cc:06:2c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 09:39:14 2025 by rpki-client