Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
File: Vk6tOAljA7xLah8rAuG5G-SEkUY.mft (raw, json)
Hash identifier: pXC0jl+LPE5NwMtmWfRY7swM4PQVq+2BY9sy8tv07vk=
Subject key identifier: 4D:3C:FB:72:BC:48:28:5F:42:F4:DD:A6:64:2C:74:BC:F6:43:67:C8
Authority key identifier: 56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
Certificate issuer: /CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Certificate serial: 019A00352B3FC53213D016D06985E6C96ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
Manifest number: 0C2B
Signing time: Mon 20 Oct 2025 06:01:15 +0000
Manifest this update: Mon 20 Oct 2025 06:01:15 +0000
Manifest next update: Tue 21 Oct 2025 06:01:15 +0000
Files and hashes: 1: Q1FzunJJgm72n4cjnOFriVc18KU.roa (hash: 9QqXBfYauaWBi+EvcV0793mlb9DkJUiHomWOWZ5zJGk=)
2: Vk6tOAljA7xLah8rAuG5G-SEkUY.crl (hash: 1BhOlFGIl9tS1FSCSU56vUB498t9YqL8UssytLn/4iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:2b:3f:c5:32:13:d0:16:d0:69:85:e6:c9:6a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Validity
Not Before: Oct 20 06:01:15 2025 GMT
Not After : Oct 21 06:01:15 2025 GMT
Subject: CN=4d3cfb72bc48285f42f4dda6642c74bcf64367c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:aa:28:03:15:03:7b:55:9c:aa:82:a3:7a:
ea:7e:44:7d:6e:38:86:56:da:e2:75:b7:21:d6:02:
11:cb:26:92:fb:6f:cd:c1:34:72:fc:62:5d:41:34:
b3:2d:79:ba:f5:b9:a4:f0:7a:9d:c7:e0:0f:fb:45:
6a:17:c1:61:da:a4:f7:50:2e:a6:27:e9:14:98:1f:
04:ab:50:5b:e8:db:b6:df:35:89:e0:51:a3:90:e6:
c7:9d:c8:10:9e:52:3b:d8:7c:93:fb:14:78:6a:c0:
b7:52:b7:a3:47:c7:93:0c:ad:c9:36:90:6e:25:a8:
ea:2a:8f:ea:a5:5e:1a:a3:cb:6e:f7:3d:dc:f1:1b:
d2:47:c1:42:28:bf:1c:ef:a7:d8:d4:96:94:ad:11:
30:b1:52:e7:39:e4:d4:6f:49:cf:28:9b:0d:40:b1:
c3:4e:9a:45:8f:b6:78:a2:13:16:47:b2:88:90:bc:
0c:32:a3:4a:a4:23:a7:1c:df:1f:29:57:5f:d3:47:
e1:f9:37:29:62:93:88:be:c3:14:83:96:e6:7c:da:
45:b8:fb:cf:0b:d6:86:5c:97:1a:74:3b:eb:9c:60:
8a:07:57:fd:82:64:cf:ec:e8:9c:cf:ea:77:a6:01:
ef:ea:d1:cc:35:c0:44:3f:f3:95:0d:fe:84:bd:cd:
3a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3C:FB:72:BC:48:28:5F:42:F4:DD:A6:64:2C:74:BC:F6:43:67:C8
X509v3 Authority Key Identifier:
keyid:56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:20:58:cb:cd:81:ce:cf:8c:fa:9b:16:1a:24:86:79:19:63:
92:90:0e:e1:32:70:c6:2c:34:c5:f5:cc:84:da:b4:74:df:36:
20:05:2c:33:e3:6f:38:b0:6e:96:52:f5:a0:96:87:ba:a0:46:
0f:f8:63:37:54:89:bd:03:4e:2b:2f:f9:be:62:be:f1:6c:7a:
21:ae:ea:79:d0:b6:99:16:c7:a2:2f:86:f0:1f:79:d5:12:0a:
ac:c8:88:6a:e6:d1:b6:bc:d7:a3:ff:89:f2:ec:c0:15:4b:eb:
09:7a:21:71:c0:c8:09:22:22:b0:73:f8:af:59:38:e0:f9:02:
f9:0f:7f:71:e1:bb:7d:60:b6:01:8e:da:66:4f:70:f9:7c:ac:
cf:38:df:bf:57:cb:bc:c7:ae:96:ee:06:63:84:08:77:4f:cf:
80:f1:28:ae:bd:f1:6b:96:cf:d7:cf:d3:a7:d4:71:92:92:d0:
33:93:a1:81:ba:42:63:17:40:c7:0c:b4:20:89:9f:b1:8b:c8:
d7:17:d5:e3:f9:10:de:0a:02:3c:2f:63:15:7c:5b:f6:fc:98:
f8:89:93:1d:e2:98:1e:0b:10:c7:60:cc:7e:db:ec:32:83:43:
23:08:36:30:a1:cb:af:2b:26:e3:58:a7:bf:bd:03:9d:f5:d3:
62:09:6f:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANSs/xTIT0BbQaYXmyWrMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NGVhZDM4MDk2MzAzYmM0YjZhMWYyYjAyZTFiOTFiZTQ4
NDkxNDYwHhcNMjUxMDIwMDYwMTE1WhcNMjUxMDIxMDYwMTE1WjAzMTEwLwYDVQQD
Eyg0ZDNjZmI3MmJjNDgyODVmNDJmNGRkYTY2NDJjNzRiY2Y2NDM2N2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFaqKAMVA3tVnKqCo3rqfkR9bjiG
Vtridbch1gIRyyaS+2/NwTRy/GJdQTSzLXm69bmk8Hqdx+AP+0VqF8Fh2qT3UC6m
J+kUmB8Eq1Bb6Nu23zWJ4FGjkObHncgQnlI72HyT+xR4asC3UrejR8eTDK3JNpBu
JajqKo/qpV4ao8tu9z3c8RvSR8FCKL8c76fY1JaUrREwsVLnOeTUb0nPKJsNQLHD
TppFj7Z4ohMWR7KIkLwMMqNKpCOnHN8fKVdf00fh+TcpYpOIvsMUg5bmfNpFuPvP
C9aGXJcadDvrnGCKB1f9gmTP7Oicz+p3pgHv6tHMNcBEP/OVDf6Evc06fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE08+3K8SChfQvTdpmQsdLz2Q2fIMB8GA1UdIwQY
MBaAFFZOrTgJYwO8S2ofKwLhuRvkhJFGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVms2dE9BbGpBN3hMYWg4ckF1RzVHLVNFa1VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xNDI1YTYtMTg2My00MmEwLTgzMjMt
M2M3Mjk2N2ZmN2MxLzEvVms2dE9BbGpBN3hMYWg4ckF1RzVHLVNFa1VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8xNDI1YTYtMTg2My00MmEwLTgzMjMtM2M3Mjk2N2ZmN2Mx
LzEvVms2dE9BbGpBN3hMYWg4ckF1RzVHLVNFa1VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkiBYy82B
zs+M+psWGiSGeRljkpAO4TJwxiw0xfXMhNq0dN82IAUsM+NvOLBullL1oJaHuqBG
D/hjN1SJvQNOKy/5vmK+8Wx6Ia7qedC2mRbHoi+G8B951RIKrMiIaubRtrzXo/+J
8uzAFUvrCXohccDICSIisHP4r1k44PkC+Q9/ceG7fWC2AY7aZk9w+Xyszzjfv1fL
vMeulu4GY4QId0/PgPEorr3xa5bP18/Tp9RxkpLQM5OhgbpCYxdAxwy0IImfsYvI
1xfV4/kQ3goCPC9jFXxb9vyY+ImTHeKYHgsQx2DMftvsMoNDIwg2MKHLrysm41in
v70DnfXTYglvUQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:18:06 2025 by rpki-client