Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
File: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft (raw, json)
Hash identifier: 13Rm4k9GG9qMVaYxCTud4qdXQza3krtI7pK4FhD1p+c=
Subject key identifier: 96:1C:52:2B:05:C1:17:A0:DF:6D:6A:E8:6A:AA:A2:6A:E9:4B:D4:9A
Authority key identifier: BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
Certificate issuer: /CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Certificate serial: 019A2BC3DC6E8A4FFBBD85B036F8015C0FEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
Manifest number: 16FD
Signing time: Tue 28 Oct 2025 17:00:47 +0000
Manifest this update: Tue 28 Oct 2025 17:00:47 +0000
Manifest next update: Wed 29 Oct 2025 17:00:47 +0000
Files and hashes: 1: qBn6ockm6JSiEH-8udw_bpsms9g.roa (hash: nCADL7lFGk+Q6O3ajQCgcYhE2O5JRszPFiBp0Ov4f98=)
2: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl (hash: zkD4D3aeLziwKRkO0b1E373BuoFnqBl0H1Q36qwFnDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:c3:dc:6e:8a:4f:fb:bd:85:b0:36:f8:01:5c:0f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Validity
Not Before: Oct 28 17:00:47 2025 GMT
Not After : Oct 29 17:00:47 2025 GMT
Subject: CN=961c522b05c117a0df6d6ae86aaaa26ae94bd49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6e:d8:c2:50:75:09:2e:a1:39:d6:97:61:22:
d6:84:24:35:93:b0:f0:ea:57:1a:72:72:81:e7:c3:
8a:34:2e:da:ef:6d:f6:9a:d1:5a:b3:db:82:eb:49:
94:8b:6b:82:7e:70:2b:e6:6a:aa:50:90:2f:61:60:
8a:0f:7c:d2:34:05:ca:7a:4c:03:61:7a:5a:e2:04:
22:ed:f9:c8:fe:55:f6:e7:03:1f:ff:96:9c:f7:83:
b0:23:e8:d0:da:df:b9:3a:ba:48:3e:b4:a8:b5:ef:
5d:45:f4:94:c8:db:c0:50:74:95:1f:09:b0:ac:78:
eb:35:60:ac:a8:25:95:a9:8a:da:24:48:5a:9c:7b:
96:69:71:ee:a3:7d:52:b8:a2:0a:a4:2e:11:28:2c:
7f:46:5a:ae:03:83:04:16:71:bc:78:21:6d:34:46:
b9:09:26:68:94:ea:7a:a3:c9:1e:0b:b4:f2:06:c8:
72:52:cc:0f:e7:2a:80:ab:8d:1f:1e:96:99:3f:5d:
d0:a9:33:a1:6d:94:63:fe:8f:b6:d8:25:e2:4e:75:
39:5a:a0:98:ad:63:42:0c:15:a1:b3:2a:ec:dc:88:
12:81:dc:d5:1c:1b:79:58:bc:f5:f3:72:f6:b9:1e:
b6:18:f4:e8:2b:46:6b:cb:45:4a:cf:be:65:44:ae:
f6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1C:52:2B:05:C1:17:A0:DF:6D:6A:E8:6A:AA:A2:6A:E9:4B:D4:9A
X509v3 Authority Key Identifier:
keyid:BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:79:90:9b:ac:85:d1:03:98:9a:45:16:3f:88:f7:78:83:22:
a7:1c:4b:fb:b9:93:bd:c9:d5:7e:c7:4c:88:0a:a0:11:04:d0:
dc:e8:36:f6:72:7b:f9:70:ac:72:10:a7:da:81:50:f3:45:a7:
6e:5d:ee:3c:07:2a:7a:fc:46:12:7e:69:2d:7b:1b:17:23:eb:
04:39:68:5c:5e:32:52:d7:cd:05:fa:87:5e:ec:e7:d7:fa:32:
66:af:66:36:7c:0a:1b:1c:41:cf:ec:85:28:dd:75:f8:8f:32:
ea:ab:ae:94:da:07:aa:84:53:6a:d1:26:7a:ca:11:ce:2b:d3:
d2:d4:04:31:b8:9b:f7:2f:a9:5b:18:f4:56:f9:56:ad:c8:54:
54:26:ee:6a:76:84:2b:aa:f1:12:e3:d2:50:08:44:f6:d7:61:
81:8a:86:71:34:d0:cb:db:01:98:67:7a:b3:e6:f4:bd:f2:0a:
5a:e1:45:dc:60:a7:cd:d8:3c:03:55:d2:f3:40:75:0d:ba:aa:
91:29:9a:49:2c:5f:71:53:53:c0:84:be:9b:76:62:58:05:c3:
91:2e:0e:c5:93:a3:dc:dd:cf:b2:f8:02:d5:23:44:29:94:3b:
4f:8e:41:03:2c:32:3f:b0:7d:8f:ac:4b:a7:02:56:0b:59:13:
98:d9:c7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:23:13 2025 by rpki-client