Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
File: VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft (raw, json)
Hash identifier: vQIkc+jmbZvEwteQodg5N5sJT3H0TYO4DOhXGwTC4gc=
Subject key identifier: 11:05:C6:E4:A9:27:B0:7F:AE:06:6F:4D:6A:05:66:4E:36:D8:3F:79
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial: 0199FC8F3AB2ED363AECA82E46EE5340FC53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
Manifest number: 16EA
Signing time: Sun 19 Oct 2025 13:01:08 +0000
Manifest this update: Sun 19 Oct 2025 13:01:08 +0000
Manifest next update: Mon 20 Oct 2025 13:01:08 +0000
Files and hashes: 1: 0cSnkMJkJHeFaYdY1KT0ScO6smc.roa (hash: Gcz0UPXLhZmjDb4FihMibqoJMQnP847xcHc8Qvl5GWc=)
2: 10H4MUNhSSva047O9EEp6SPRBJE.roa (hash: JmvtAf/+biHEI+go7XB/O90LiW31KmrT39neQ8bWDTc=)
3: 78KScp2LVWw2hOVmr_h_Gkcv34A.roa (hash: Ptq/z1pA4OnP8t08S5vn7Az3pzr/nZN/5vkEHzVtW1s=)
4: GhEBs7fMOUU2KjePNnbULHKRHoA.roa (hash: Dow24ARSNfhxgpUv5NrsgvZFPFxhNN0Fkn5hgDvl4wg=)
5: H9Yj6XrfYViqOy5X6VeUZJTi5tI.roa (hash: 4orcq82HkX9/XUoOT4IA7nH/E15MI2gX+xqdM0ifFYg=)
6: VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl (hash: hdnzLxSk/gbb1R1eS5Pdc0dehxCqymlQXXF+JSgxDRk=)
7: tkuxtWzbusmwWQub2z4rjkdwXdc.roa (hash: JTVZbUmozTnvdMYKVuksSNIaPHfDAOZ4PEG/FbAO7wg=)
8: wPqYVNKJADvVgGucnETD7HuiSvs.roa (hash: 0eyTJy9gG8F8Xex/RtpsLoJCxS1EJ4y1hxoKVvkvOZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:3a:b2:ed:36:3a:ec:a8:2e:46:ee:53:40:fc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
Validity
Not Before: Oct 19 13:01:08 2025 GMT
Not After : Oct 20 13:01:08 2025 GMT
Subject: CN=1105c6e4a927b07fae066f4d6a05664e36d83f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4c:43:16:23:b0:3c:7c:5c:59:e3:af:4d:45:
03:1c:e5:0b:32:b6:a5:5b:c2:fe:48:c4:23:a7:b7:
6e:7e:99:01:98:bb:5d:9f:2d:f5:2d:e0:37:a7:ba:
fc:48:7c:5f:43:7b:72:32:bb:34:9d:19:16:ba:b8:
37:68:d8:3e:40:d7:61:76:4d:83:08:3e:ae:96:5c:
68:2a:2a:cf:67:27:d4:89:b3:88:bb:11:26:1f:b4:
26:f0:63:10:e8:73:04:23:98:61:e9:68:97:ea:e2:
71:99:a7:2b:f1:d8:73:ba:ae:76:7c:28:c7:cb:bd:
cc:7d:67:03:94:8f:35:42:60:e0:02:de:7e:09:da:
05:fe:c0:d1:88:53:d0:d2:a4:11:fa:bc:7d:21:4e:
60:7a:bb:bc:37:4c:92:72:2d:cd:26:ef:92:94:7b:
92:ff:fd:07:b8:0a:ae:65:f8:68:10:7d:1c:e0:7e:
95:8a:c0:b0:cf:8c:85:74:56:bf:ac:14:00:e4:b8:
41:eb:11:01:4c:74:59:f0:e1:49:b5:61:06:ab:97:
6f:4c:44:77:32:c6:bb:f2:0a:03:60:49:a3:ee:93:
4a:4e:a5:b5:fb:8d:49:ad:ee:6b:e2:c1:b9:e3:ac:
80:84:03:a2:69:e5:df:e4:2f:ea:0b:62:16:1a:0e:
ea:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:05:C6:E4:A9:27:B0:7F:AE:06:6F:4D:6A:05:66:4E:36:D8:3F:79
X509v3 Authority Key Identifier:
keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c5:69:23:61:90:08:7b:38:5d:cf:d0:ad:7c:75:c4:2d:06:
b9:c8:0d:bf:6a:e3:82:21:70:45:b1:81:26:59:60:bc:fe:58:
dc:35:9a:73:0e:71:68:92:f5:bd:e9:3e:e6:51:f5:c3:d7:fd:
d1:01:7d:ad:bb:34:61:9c:fa:8c:c3:9f:47:a6:56:a6:9d:f5:
57:b7:9c:64:b3:31:2b:76:dc:98:ac:5d:e1:79:54:03:33:e8:
eb:da:a7:e6:9b:1d:da:ce:3d:1d:fa:15:85:bf:b3:ae:fa:a6:
5d:40:e0:2e:28:6b:a4:28:18:d3:eb:ea:6b:7f:1d:20:d0:93:
5b:0e:5b:b9:6f:b4:d5:58:a4:fa:12:55:51:0a:b7:08:80:19:
e1:d4:f5:6b:41:f7:a1:53:86:c2:2d:ad:d7:49:4e:fb:0a:6b:
48:1a:5c:ac:1c:48:e1:4f:20:fe:2d:30:35:04:0e:0e:56:28:
80:6a:9e:7f:6f:75:c8:1e:f4:40:8a:d6:9d:2a:cb:80:26:f6:
73:85:83:90:8d:21:64:21:bd:51:ad:b8:fd:90:21:ad:c8:e8:
2a:8a:a2:24:ae:79:67:47:95:74:b9:6c:2a:ad:ef:23:a4:46:
d8:cb:79:37:76:92:ab:6b:44:39:89:6f:78:c8:70:a4:aa:2c:
af:ac:54:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jzqy7TY67KguRu5TQPxTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MTMwZjc5OWY4YTg5ODU1MDJhMmVhMzM1NjAzNzY3NDA4
NWNmY2EwHhcNMjUxMDE5MTMwMTA4WhcNMjUxMDIwMTMwMTA4WjAzMTEwLwYDVQQD
EygxMTA1YzZlNGE5MjdiMDdmYWUwNjZmNGQ2YTA1NjY0ZTM2ZDgzZjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0xDFiOwPHxcWeOvTUUDHOULMral
W8L+SMQjp7dufpkBmLtdny31LeA3p7r8SHxfQ3tyMrs0nRkWurg3aNg+QNdhdk2D
CD6ullxoKirPZyfUibOIuxEmH7Qm8GMQ6HMEI5hh6WiX6uJxmacr8dhzuq52fCjH
y73MfWcDlI81QmDgAt5+CdoF/sDRiFPQ0qQR+rx9IU5geru8N0ySci3NJu+SlHuS
//0HuAquZfhoEH0c4H6VisCwz4yFdFa/rBQA5LhB6xEBTHRZ8OFJtWEGq5dvTER3
Msa78goDYEmj7pNKTqW1+41Jre5r4sG546yAhAOiaeXf5C/qC2IWGg7qtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEFxuSpJ7B/rgZvTWoFZk422D95MB8GA1UdIwQY
MBaAFFcTD3mfiomFUCouozVgN2dAhc/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnhNUGVaLUtpWVZRS2k2ak5XQTNaMENGejhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81MTgxZGUtNDRjZC00NjU0LTk2ZmMt
ZDNiOTBhOWI5YjQxLzEvVnhNUGVaLUtpWVZRS2k2ak5XQTNaMENGejhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi81MTgxZGUtNDRjZC00NjU0LTk2ZmMtZDNiOTBhOWI5YjQx
LzEvVnhNUGVaLUtpWVZRS2k2ak5XQTNaMENGejhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEcVpI2GQ
CHs4Xc/QrXx1xC0GucgNv2rjgiFwRbGBJllgvP5Y3DWacw5xaJL1vek+5lH1w9f9
0QF9rbs0YZz6jMOfR6ZWpp31V7ecZLMxK3bcmKxd4XlUAzPo69qn5psd2s49HfoV
hb+zrvqmXUDgLihrpCgY0+vqa38dINCTWw5buW+01Vik+hJVUQq3CIAZ4dT1a0H3
oVOGwi2t10lO+wprSBpcrBxI4U8g/i0wNQQODlYogGqef291yB70QIrWnSrLgCb2
c4WDkI0hZCG9Ua24/ZAhrcjoKoqiJK55Z0eVdLlsKq3vI6RG2Mt5N3aSq2tEOYlv
eMhwpKosr6xUog==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:43 2025 by rpki-client