Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
File: 1-vcGbaCaViJCYORuom3Jyx26jjc.mft (raw, json)
Hash identifier: M/qGBazIWZYvjXxIlJvEcuHNcXXJSWHk+Ls1UXcUJag=
Subject key identifier: 01:47:FD:7C:78:B0:A5:98:BA:02:F4:E1:71:1E:5E:76:37:A2:73:8F
Authority key identifier: FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
Certificate issuer: /CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Certificate serial: 019A4D3D195BFCCF9C5A218A07A3EC6F0C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
Manifest number: 1250
Signing time: Tue 04 Nov 2025 05:00:41 +0000
Manifest this update: Tue 04 Nov 2025 05:00:41 +0000
Manifest next update: Wed 05 Nov 2025 05:00:41 +0000
Files and hashes: 1: 0npgtCw2cniYZRSczr6L1wq2NDE.roa (hash: 7qLMTW4Hb0+zjkcR3VjQ/z+HhWTfAgpVarVUL4CErX4=)
2: 1-vcGbaCaViJCYORuom3Jyx26jjc.crl (hash: xaF/QbBSxRfMXf1DDJ4U38LQtp4R9+KJnHe2CpQutLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:19:5b:fc:cf:9c:5a:21:8a:07:a3:ec:6f:0c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Validity
Not Before: Nov 4 05:00:41 2025 GMT
Not After : Nov 5 05:00:41 2025 GMT
Subject: CN=0147fd7c78b0a598ba02f4e1711e5e7637a2738f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:9b:74:52:f3:b4:31:4c:19:c6:93:c8:23:
0d:64:df:3d:f9:32:cc:9f:9f:ef:a5:43:9f:17:f4:
6c:ed:b4:04:79:39:e8:98:06:c8:9c:a1:15:d1:bf:
69:9f:6c:5c:1a:1c:55:bb:53:dd:7f:19:d4:6c:92:
9c:f2:40:9d:57:88:c6:3f:0c:36:bb:57:67:45:4e:
48:97:96:4d:aa:82:fa:4d:8c:ad:73:64:e0:f4:5d:
b7:59:4e:60:06:4b:b6:3e:25:2f:e6:9a:26:e2:63:
81:44:62:09:8e:18:d8:f3:12:8a:45:0b:fe:50:0c:
bf:63:2e:80:54:16:9d:ae:66:8e:4b:9f:38:f7:7a:
8f:98:68:a2:db:ee:ea:0d:cf:59:2b:37:62:78:bc:
cf:73:68:ef:3e:95:49:5b:f6:14:19:da:f5:70:4e:
74:1d:73:ad:39:96:82:0d:f4:d2:6c:cb:b5:e0:81:
63:72:e1:f2:09:7a:c2:63:6b:d0:97:cd:4a:3a:53:
17:5a:1d:52:de:4a:3d:12:db:10:10:f3:d1:78:af:
02:86:b8:a3:ba:9c:4b:4f:b4:d8:e3:2d:12:55:8c:
cb:09:29:02:a6:3a:f3:85:89:29:dd:c1:40:44:f5:
17:fb:3c:e2:d2:43:ba:fa:4a:f4:f6:83:bf:e9:98:
30:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:47:FD:7C:78:B0:A5:98:BA:02:F4:E1:71:1E:5E:76:37:A2:73:8F
X509v3 Authority Key Identifier:
keyid:FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:77:0c:eb:11:83:31:2f:e1:62:65:05:31:4e:29:55:ea:29:
27:62:0c:b8:7b:64:77:99:f2:be:e0:17:d1:59:8d:9a:84:3c:
ec:82:34:98:3a:7e:0f:a6:1f:63:ec:8c:f7:2e:89:0a:3e:82:
a7:3b:07:0c:ec:b6:f4:45:5a:f6:81:25:9c:ff:f9:c5:2c:c8:
8b:1c:2f:0a:35:82:e0:d0:4a:46:c8:ed:16:5e:d4:1f:cc:7b:
ed:1f:00:34:62:7a:4d:61:b1:87:dd:89:de:3c:9d:57:c8:74:
6f:a5:f9:11:9a:31:7f:a2:dd:4c:ae:c9:b1:99:c0:17:6c:c1:
1f:81:f3:40:ae:c3:7c:3e:07:e7:8c:99:11:6e:7e:60:8f:d9:
aa:c8:c5:21:1c:17:3c:f2:80:0f:4b:fb:fd:00:0b:0b:5e:57:
a2:fd:db:de:f5:62:b3:bf:df:d2:36:61:6c:e8:90:c8:4d:c1:
e8:29:5c:ba:5f:b8:89:62:25:0a:bc:85:b1:d3:18:e6:86:bb:
f7:16:c6:83:e7:de:14:ab:d9:e3:34:ee:fa:e4:c8:67:6f:f0:
e8:11:8c:b3:8c:02:aa:f8:ca:3e:17:7d:9a:b0:2d:b5:08:6f:
e1:fc:d7:db:4d:b9:44:07:ea:fc:46:78:f8:a6:2f:d2:cf:04:
ec:a4:38:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:06 2025 by rpki-client