Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
File: v1vcQQat3onhzpwyuAeyCC67mUQ.mft (raw, json)
Hash identifier: dIGyu5GVgUoA9TLHdEYvcJ3zGp/xhXJtEIkoYx5ivik=
Subject key identifier: B5:E1:34:5C:89:3C:11:84:6E:D5:D0:75:E6:D7:2A:DB:65:CF:7F:EC
Authority key identifier: BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44
Certificate issuer: /CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
Certificate serial: 0199FC5842FE17BE943A7DD4DE145BD40C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 12:01:06 +0000
Manifest this update: Sun 19 Oct 2025 12:01:06 +0000
Manifest next update: Mon 20 Oct 2025 12:01:06 +0000
Files and hashes: 1: Uy9WOwPWbRCpTH3lj7ESDUuv-LI.roa (hash: 1fij03uU2Ynnat5tn8++7hQPOH2AmJ+7FEvkLIb0i0I=)
2: v1vcQQat3onhzpwyuAeyCC67mUQ.crl (hash: 3ILiRmwn7nfzGai1BOaYvpgWZpJ2Rx546TAzTo6O/LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:42:fe:17:be:94:3a:7d:d4:de:14:5b:d4:0c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
Validity
Not Before: Oct 19 12:01:06 2025 GMT
Not After : Oct 20 12:01:06 2025 GMT
Subject: CN=b5e1345c893c11846ed5d075e6d72adb65cf7fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:03:3d:a1:3d:6e:19:8b:8e:25:e3:a9:2a:
a1:00:7e:60:1a:71:23:87:06:ac:fd:d7:4d:f8:b7:
35:41:0f:96:1e:23:25:3b:03:55:71:6b:ca:12:32:
13:54:63:0d:b7:d3:61:d9:29:de:95:bb:a7:f9:ba:
e7:b1:6e:95:ce:a4:df:32:4a:b6:d2:ed:85:c7:5c:
e4:5d:b8:e6:29:6a:99:a7:25:3e:e7:7c:b4:ac:62:
41:6b:9a:0b:17:30:71:71:87:67:b8:44:d6:57:29:
6d:96:9a:a5:ad:07:ab:f4:9c:53:85:82:a5:ee:06:
38:d6:01:7d:3a:fd:e3:d2:d1:7e:8b:43:55:1e:2f:
f7:2a:69:31:53:b5:6c:18:ad:87:6a:08:ec:35:15:
7f:0b:56:61:dc:7a:38:59:93:e6:b3:19:0a:ed:98:
0d:2c:a0:1d:bf:f3:e8:0d:c4:73:20:12:41:d5:3b:
ae:55:de:82:55:5d:cf:2a:cd:fc:fd:bf:43:ad:40:
dc:cf:e7:e7:98:01:2b:08:9f:5f:0e:3a:13:0c:f8:
40:6b:9f:44:f1:89:18:e3:09:02:0c:11:89:37:b1:
6e:7a:56:55:f0:97:a9:39:a2:ad:5e:9f:77:02:20:
ae:39:bf:29:3d:94:42:87:89:b8:f0:c6:78:5e:fd:
02:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E1:34:5C:89:3C:11:84:6E:D5:D0:75:E6:D7:2A:DB:65:CF:7F:EC
X509v3 Authority Key Identifier:
keyid:BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:55:d8:ef:cd:69:67:b8:d5:44:43:d7:89:20:5f:2e:f2:60:
fb:12:26:4c:4c:54:90:9a:53:1c:22:4c:df:7c:c8:e2:7c:66:
56:03:fb:bf:f3:8a:e0:e2:2b:8b:4a:17:58:75:26:f1:9a:47:
1e:5b:94:2c:e8:20:d2:65:7f:86:09:16:4f:5b:a1:89:f5:93:
5b:41:61:39:57:aa:8d:04:8c:c8:1f:e5:3b:ff:33:d9:65:81:
f1:99:23:b5:3b:e5:6a:2c:70:b4:8e:8d:69:29:b4:9c:05:47:
a4:c7:97:3a:05:b0:38:1b:8c:81:4f:f4:d5:22:51:d9:18:6c:
78:db:a8:65:e7:ba:e5:e9:28:a8:6f:43:4a:4e:f6:00:d8:4b:
6e:22:3f:a8:d3:99:ba:24:e3:15:46:ec:85:f3:54:0c:16:f3:
9b:ab:35:d7:a1:8e:f0:33:51:4d:fa:59:01:13:37:64:a3:89:
06:0d:72:49:59:9c:93:f9:0d:a7:12:7c:79:06:f8:ad:cf:0e:
24:f2:2e:35:ff:a4:34:ff:66:61:b3:46:db:bc:2e:ed:12:c7:
fa:d9:00:49:d3:9a:a9:38:ca:44:00:1a:e2:da:de:5c:78:08:
45:b6:9d:71:11:31:f3:15:05:f9:37:eb:fe:ca:dc:5b:72:ce:
c4:16:37:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WEL+F76UOn3U3hRb1AxNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNWJkYzQxMDZhZGRlODllMWNlOWMzMmI4MDdiMjA4MmVi
Yjk5NDQwHhcNMjUxMDE5MTIwMTA2WhcNMjUxMDIwMTIwMTA2WjAzMTEwLwYDVQQD
EyhiNWUxMzQ1Yzg5M2MxMTg0NmVkNWQwNzVlNmQ3MmFkYjY1Y2Y3ZmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyQDPaE9bhmLjiXjqSqhAH5gGnEj
hwas/ddN+Lc1QQ+WHiMlOwNVcWvKEjITVGMNt9Nh2Snelbun+brnsW6VzqTfMkq2
0u2Fx1zkXbjmKWqZpyU+53y0rGJBa5oLFzBxcYdnuETWVyltlpqlrQer9JxThYKl
7gY41gF9Ov3j0tF+i0NVHi/3KmkxU7VsGK2HagjsNRV/C1Zh3Ho4WZPmsxkK7ZgN
LKAdv/PoDcRzIBJB1TuuVd6CVV3PKs38/b9DrUDcz+fnmAErCJ9fDjoTDPhAa59E
8YkY4wkCDBGJN7FuelZV8JepOaKtXp93AiCuOb8pPZRCh4m48MZ4Xv0CMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXhNFyJPBGEbtXQdebXKttlz3/sMB8GA1UdIwQY
MBaAFL9b3EEGrd6J4c6cMrgHsgguu5lEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjF2Y1FRYXQzb25oenB3eXVBZXlDQzY3bVVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yZDFhMGEtNzFjYy00ZjU3LWFhNjMt
YmVkYWMxMGFhY2RjLzEvdjF2Y1FRYXQzb25oenB3eXVBZXlDQzY3bVVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8yZDFhMGEtNzFjYy00ZjU3LWFhNjMtYmVkYWMxMGFhY2Rj
LzEvdjF2Y1FRYXQzb25oenB3eXVBZXlDQzY3bVVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElXY781p
Z7jVREPXiSBfLvJg+xImTExUkJpTHCJM33zI4nxmVgP7v/OK4OIri0oXWHUm8ZpH
HluULOgg0mV/hgkWT1uhifWTW0FhOVeqjQSMyB/lO/8z2WWB8ZkjtTvlaixwtI6N
aSm0nAVHpMeXOgWwOBuMgU/01SJR2RhseNuoZee65ekoqG9DSk72ANhLbiI/qNOZ
uiTjFUbshfNUDBbzm6s116GO8DNRTfpZARM3ZKOJBg1ySVmck/kNpxJ8eQb4rc8O
JPIuNf+kNP9mYbNG27wu7RLH+tkASdOaqTjKRAAa4treXHgIRbadcREx8xUF+Tfr
/srcW3LOxBY3sw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:06 2025 by rpki-client