Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
File: vf89luiqFB0ixCQq7_eK9x74skQ.mft (raw, json)
Hash identifier: vaWE5RdRRaI6CqthvQSRbCE5Q0Vtb9SNVYjQz2Fllbw=
Subject key identifier: E4:72:74:6F:25:2F:BD:C5:83:0E:BE:C9:E7:BD:03:D4:CF:C7:7E:FB
Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
Certificate issuer: /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Certificate serial: 0199FA6A754ECF670F54D2820CBA3F89E579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 03:01:44 +0000
Manifest this update: Sun 19 Oct 2025 03:01:44 +0000
Manifest next update: Mon 20 Oct 2025 03:01:44 +0000
Files and hashes: 1: 41AytB41hodYM5wYhqpxuiF8N9s.roa (hash: OnxInRURjXFa44Bu3c4RrKsYyRXWI0CzeYkFHBMxcR8=)
2: vf89luiqFB0ixCQq7_eK9x74skQ.crl (hash: 6rt3ihQkoJd92BRQvFjnVDQ/uukUas8X+01OPdjhBPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:75:4e:cf:67:0f:54:d2:82:0c:ba:3f:89:e5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Validity
Not Before: Oct 19 03:01:44 2025 GMT
Not After : Oct 20 03:01:44 2025 GMT
Subject: CN=e472746f252fbdc5830ebec9e7bd03d4cfc77efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:22:ce:48:26:40:f6:e5:34:22:0a:c0:92:
72:1e:19:81:87:a3:23:57:90:23:2d:ee:82:df:f5:
56:95:27:f4:41:88:27:db:ca:5f:c7:a0:c7:33:9d:
a8:22:be:9c:83:7c:15:ed:80:d7:98:83:2d:95:3b:
58:46:6a:5d:4e:74:23:f9:23:bb:40:95:b7:6d:ef:
86:c5:7b:2a:11:74:20:4c:a4:30:86:27:ec:24:11:
51:02:3f:b9:73:28:64:37:93:ed:24:6e:3e:68:a4:
d0:3b:6d:97:f5:50:46:52:0e:f2:06:11:3e:f3:00:
78:67:02:f5:41:4f:31:16:e7:be:af:6f:b2:90:4c:
4b:a6:94:27:56:12:df:95:21:e5:8a:58:e9:5d:b7:
48:75:16:4a:01:03:9a:4a:d2:8e:ea:23:ef:d5:69:
42:95:46:e7:26:51:ad:0d:cc:c4:e0:14:c6:96:d8:
9a:bf:15:ad:95:b7:7e:a3:7c:10:a5:b8:6e:8c:21:
c9:4f:17:d9:fb:4e:7b:a2:f5:c5:30:a3:18:63:d6:
d8:eb:d3:d5:cb:ed:14:b6:9a:e6:66:60:ee:fb:3a:
e8:33:95:0d:17:96:1b:46:f9:ae:b9:32:7f:29:82:
0a:7b:11:81:bc:13:7b:e5:f8:30:44:c7:9a:7e:9e:
97:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:72:74:6F:25:2F:BD:C5:83:0E:BE:C9:E7:BD:03:D4:CF:C7:7E:FB
X509v3 Authority Key Identifier:
keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7c:b7:8b:f8:6c:4b:81:c0:2d:f9:63:ce:df:ca:2a:e5:77:
b0:a9:d7:d1:32:a2:a3:dd:0c:35:7e:ea:87:63:30:f9:d5:3e:
26:86:48:d4:4d:9d:db:c9:19:50:e0:13:31:4b:67:78:2b:3b:
a4:70:b5:12:fd:4c:29:9c:44:1f:e3:da:fe:0e:2b:27:bc:73:
97:c4:c3:4c:db:3f:6d:d7:24:99:b9:6f:a5:6f:29:f2:5d:d9:
d5:94:04:41:b7:43:46:2b:01:e5:04:27:12:09:56:54:3b:42:
9d:91:21:0f:97:b2:80:07:1b:84:85:69:f7:89:2c:23:61:65:
be:95:8d:23:ef:ba:b7:9a:d6:90:dc:93:28:40:5d:ff:e3:8b:
52:15:81:4f:8a:c3:88:85:c5:8a:bb:86:39:f7:0e:c2:e4:cd:
e0:58:4a:e3:58:7f:3d:2d:96:e0:55:a3:06:07:2c:ad:4a:96:
fe:4e:f4:39:2b:c5:22:99:a0:7b:da:78:83:91:31:a6:4c:5f:
c3:ac:ca:f6:a8:96:b6:82:e7:ae:6d:57:fc:ee:f2:14:1f:46:
f4:f5:d7:95:8e:f5:f9:e7:38:b3:45:fb:d3:f0:17:eb:ff:10:
be:25:27:75:cc:ce:34:2c:77:82:52:7c:14:03:44:27:5a:cf:
70:43:79:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6anVOz2cPVNKCDLo/ieV5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmYzZDk2ZThhYTE0MWQyMmM0MjQyYWVmZjc4YWY3MWVm
OGIyNDQwHhcNMjUxMDE5MDMwMTQ0WhcNMjUxMDIwMDMwMTQ0WjAzMTEwLwYDVQQD
EyhlNDcyNzQ2ZjI1MmZiZGM1ODMwZWJlYzllN2JkMDNkNGNmYzc3ZWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJEizkgmQPblNCIKwJJyHhmBh6Mj
V5AjLe6C3/VWlSf0QYgn28pfx6DHM52oIr6cg3wV7YDXmIMtlTtYRmpdTnQj+SO7
QJW3be+GxXsqEXQgTKQwhifsJBFRAj+5cyhkN5PtJG4+aKTQO22X9VBGUg7yBhE+
8wB4ZwL1QU8xFue+r2+ykExLppQnVhLflSHliljpXbdIdRZKAQOaStKO6iPv1WlC
lUbnJlGtDczE4BTGltiavxWtlbd+o3wQpbhujCHJTxfZ+057ovXFMKMYY9bY69PV
y+0UtprmZmDu+zroM5UNF5YbRvmuuTJ/KYIKexGBvBN75fgwRMeafp6XFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORydG8lL73Fgw6+yee9A9TPx377MB8GA1UdIwQY
MBaAFL3/PZboqhQdIsQkKu/3ivce+LJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82MTFjN2YtYjEyNS00NzEyLTllZjct
M2M3OTg3YzQyYzE2LzEvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82MTFjN2YtYjEyNS00NzEyLTllZjctM2M3OTg3YzQyYzE2
LzEvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOny3i/hs
S4HALfljzt/KKuV3sKnX0TKio90MNX7qh2Mw+dU+JoZI1E2d28kZUOATMUtneCs7
pHC1Ev1MKZxEH+Pa/g4rJ7xzl8TDTNs/bdckmblvpW8p8l3Z1ZQEQbdDRisB5QQn
EglWVDtCnZEhD5eygAcbhIVp94ksI2FlvpWNI++6t5rWkNyTKEBd/+OLUhWBT4rD
iIXFiruGOfcOwuTN4FhK41h/PS2W4FWjBgcsrUqW/k70OSvFIpmge9p4g5Expkxf
w6zK9qiWtoLnrm1X/O7yFB9G9PXXlY71+ec4s0X70/AX6/8QviUndczONCx3glJ8
FANEJ1rPcEN50Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:53 2025 by rpki-client