Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
File: vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft (raw, json)
Hash identifier: sYv8dAuUbgypWFFeS/Llb3VZiySOuwm368i1a+dBoeY=
Subject key identifier: CA:19:1E:BB:A6:2F:94:29:88:65:92:A2:B6:D6:B3:53:AB:00:0A:78
Authority key identifier: BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39
Certificate issuer: /CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
Certificate serial: 0199FDD9CE7AE8E2CA11C8FDC8033243B63F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
Manifest number: 07FE
Signing time: Sun 19 Oct 2025 19:02:13 +0000
Manifest this update: Sun 19 Oct 2025 19:02:13 +0000
Manifest next update: Mon 20 Oct 2025 19:02:13 +0000
Files and hashes: 1: L6lTyFXKtOF9j4M00RgctdL3DPI.roa (hash: 82l0fSJIXKbiY5RynH8uwdUeGbScGZ+VMQbyrw1pJ3U=)
2: vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl (hash: 7c33bzqFY7qJ9rwa54gU9N3GMAwTXVwQvWOkoA4gY/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ce:7a:e8:e2:ca:11:c8:fd:c8:03:32:43:b6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
Validity
Not Before: Oct 19 19:02:13 2025 GMT
Not After : Oct 20 19:02:13 2025 GMT
Subject: CN=ca191ebba62f9429886592a2b6d6b353ab000a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fc:0e:81:6e:62:d7:32:b4:c6:6a:db:59:4f:
a0:3f:0c:1e:b5:46:18:8f:ae:d9:eb:a4:5b:80:b6:
48:ba:39:2d:a5:2f:a6:9c:74:3a:8a:9f:ff:fe:bb:
e0:86:1f:f6:e9:98:66:c3:64:e3:db:c8:21:c5:f0:
82:9d:38:b1:78:07:82:c2:9a:a5:8b:4e:56:8b:24:
e1:61:3b:91:56:1d:17:98:2f:09:3c:5f:d8:70:25:
15:cd:da:4c:75:a9:02:54:07:f4:19:ad:fe:7c:f6:
91:e6:b4:60:cb:cb:17:a7:1f:7f:06:97:53:ab:28:
53:92:fa:c5:f6:5f:6f:a3:5d:e6:86:57:0c:8f:2d:
82:5d:da:81:31:4e:57:a2:42:3d:d3:40:a8:20:a3:
55:e4:6c:80:f2:52:5f:b5:79:56:09:30:d5:f9:39:
73:36:16:a3:22:6c:77:09:f6:34:53:0e:92:9a:52:
39:31:d2:fb:12:f5:d0:b1:75:4e:0b:f5:ca:cc:1e:
41:7a:07:03:ee:45:89:5b:f7:12:ed:d4:1b:65:6e:
70:16:de:53:a9:2d:1a:89:83:f0:5e:b3:66:5b:ba:
6e:ce:53:cf:d7:83:1d:9c:7d:c2:6d:e6:ad:7a:31:
31:9c:ea:c3:52:27:31:bd:df:55:77:4b:66:28:99:
c7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:19:1E:BB:A6:2F:94:29:88:65:92:A2:B6:D6:B3:53:AB:00:0A:78
X509v3 Authority Key Identifier:
keyid:BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:44:5b:3f:8d:09:a0:0e:b7:ff:8c:9e:8a:b3:5f:8b:5d:c6:
d1:83:4d:6b:38:0b:92:17:3e:50:55:59:9a:6e:a3:1d:f4:7d:
65:79:8b:e8:d0:e5:ae:1b:6f:22:3e:72:80:7b:4e:78:00:04:
62:e9:32:3b:2a:82:bf:5c:fd:8d:67:68:8f:07:61:e0:bc:60:
d7:23:2c:ad:c7:fc:c5:7c:e6:c9:9e:0d:61:6d:99:a7:75:14:
3a:81:b6:ea:27:73:1d:ee:26:9d:58:44:56:19:ae:f8:2c:0b:
7c:f1:e3:84:ef:29:f1:f1:67:6e:0b:f9:83:85:16:69:f6:d0:
a3:d0:70:01:c9:c5:a2:ad:d3:7a:a5:16:11:4f:25:c6:68:a0:
64:ba:2e:cd:f6:15:a6:7e:2d:d9:97:ba:07:f2:70:6f:45:ae:
71:88:3c:0f:1b:42:22:1e:3c:f3:9f:80:43:83:6c:a9:98:bd:
8e:93:36:58:a8:0b:14:f5:31:67:eb:38:81:aa:9d:97:eb:84:
8d:01:dd:a1:e0:ef:2b:b5:65:98:f2:8c:fe:f8:38:5b:4e:ab:
15:d7:19:c7:1b:25:60:a3:c0:12:b3:b2:2d:96:a1:ba:cf:19:
ef:5e:a6:47:70:22:90:8c:0a:46:92:82:cc:4a:a6:bf:ad:cf:
55:cb:30:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92c566OLKEcj9yAMyQ7Y/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjODVkMzc5MWY1ODM2YzQxNWZmZDM5MWYyZDU4NWM3M2Ri
ZWNhMzkwHhcNMjUxMDE5MTkwMjEzWhcNMjUxMDIwMTkwMjEzWjAzMTEwLwYDVQQD
EyhjYTE5MWViYmE2MmY5NDI5ODg2NTkyYTJiNmQ2YjM1M2FiMDAwYTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vwOgW5i1zK0xmrbWU+gPwwetUYY
j67Z66RbgLZIujktpS+mnHQ6ip///rvghh/26Zhmw2Tj28ghxfCCnTixeAeCwpql
i05WiyThYTuRVh0XmC8JPF/YcCUVzdpMdakCVAf0Ga3+fPaR5rRgy8sXpx9/BpdT
qyhTkvrF9l9vo13mhlcMjy2CXdqBMU5XokI900CoIKNV5GyA8lJftXlWCTDV+Tlz
NhajImx3CfY0Uw6SmlI5MdL7EvXQsXVOC/XKzB5BegcD7kWJW/cS7dQbZW5wFt5T
qS0aiYPwXrNmW7puzlPP14MdnH3CbeatejExnOrDUicxvd9Vd0tmKJnHYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoZHrumL5QpiGWSorbWs1OrAAp4MB8GA1UdIwQY
MBaAFLyF03kfWDbEFf/TkfLVhcc9vso5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdklYVGVSOVlOc1FWXzlPUjh0V0Z4ejIteWprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hZjk1MGYtYzE5My00NWRmLTkwZDct
Yjg0MmI5OTA2ODllLzEvdklYVGVSOVlOc1FWXzlPUjh0V0Z4ejIteWprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9hZjk1MGYtYzE5My00NWRmLTkwZDctYjg0MmI5OTA2ODll
LzEvdklYVGVSOVlOc1FWXzlPUjh0V0Z4ejIteWprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAERbP40J
oA63/4yeirNfi13G0YNNazgLkhc+UFVZmm6jHfR9ZXmL6NDlrhtvIj5ygHtOeAAE
YukyOyqCv1z9jWdojwdh4Lxg1yMsrcf8xXzmyZ4NYW2Zp3UUOoG26idzHe4mnVhE
Vhmu+CwLfPHjhO8p8fFnbgv5g4UWafbQo9BwAcnFoq3TeqUWEU8lxmigZLouzfYV
pn4t2Ze6B/Jwb0WucYg8DxtCIh4885+AQ4NsqZi9jpM2WKgLFPUxZ+s4gaqdl+uE
jQHdoeDvK7VlmPKM/vg4W06rFdcZxxslYKPAErOyLZahus8Z716mR3AikIwKRpKC
zEqmv63PVcswaw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:32 2025 by rpki-client