Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft
File: vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft (raw, json)
Hash identifier: cn+o0R8XuM8F4e9gUZm56Zrz6IPyjTAmUoTa2JiSgxo=
Subject key identifier: FC:19:23:F7:3E:9A:F5:CF:55:60:E4:25:1C:96:02:3A:0A:73:A1:85
Authority key identifier: BC:C8:60:D9:54:97:4D:CA:91:D5:B3:47:B6:3B:22:65:36:67:DA:6D
Certificate issuer: /CN=bcc860d954974dca91d5b347b63b22653667da6d
Certificate serial: 0199FC21C4D2C7DE7EA19B033C415E4EB856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMhg2VSXTcqR1bNHtjsiZTZn2m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft
Manifest number: B7
Signing time: Sun 19 Oct 2025 11:01:35 +0000
Manifest this update: Sun 19 Oct 2025 11:01:35 +0000
Manifest next update: Mon 20 Oct 2025 11:01:35 +0000
Files and hashes: 1: jytXleuPSXKJn3uQWWaoGaj4Xmc.roa (hash: cKu9EW77Y32V8IP1VFJqq3q2CTjtGGwu/+qIVswSU0A=)
2: vMhg2VSXTcqR1bNHtjsiZTZn2m0.crl (hash: qcduPLdaylfSUmMwa5kGQxhqIfgD9e0o96DN6yATEgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMhg2VSXTcqR1bNHtjsiZTZn2m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c4:d2:c7:de:7e:a1:9b:03:3c:41:5e:4e:b8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc860d954974dca91d5b347b63b22653667da6d
Validity
Not Before: Oct 19 11:01:35 2025 GMT
Not After : Oct 20 11:01:35 2025 GMT
Subject: CN=fc1923f73e9af5cf5560e4251c96023a0a73a185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9b:32:f6:5d:51:cb:47:ff:f8:c6:90:6a:92:
2b:ed:3a:59:c1:ec:a6:f5:25:1a:da:a1:51:89:33:
89:d5:90:b2:2f:70:e2:4a:55:9b:50:72:26:17:a7:
31:95:62:56:1a:a8:94:a7:74:77:7c:d7:2e:b9:18:
9a:02:50:6d:a1:33:79:53:92:75:86:77:f0:30:7e:
b9:a2:93:85:a4:5d:24:e1:21:f1:1e:c2:23:0c:a7:
a6:7a:1f:a9:d6:90:83:03:66:66:2a:c2:b3:bd:74:
41:10:95:5b:f8:f3:c1:95:05:b4:06:4d:23:72:2f:
78:ca:c8:35:1d:38:e7:1c:5b:01:fc:1a:ba:91:fa:
9d:d4:7b:44:6e:f0:0d:c0:40:69:94:54:a3:2f:dc:
eb:02:26:ff:05:9a:35:9c:32:da:b0:0d:fd:34:a0:
10:90:f8:f2:f4:d3:35:54:68:72:26:7f:5f:c9:3e:
a0:4d:12:3f:31:94:a0:a9:a9:6b:a5:1f:8f:be:bb:
83:36:2f:96:16:07:14:58:c1:a9:c8:c7:c3:49:04:
f0:1c:94:26:e5:11:df:b6:28:1f:6b:bf:63:56:d9:
01:62:56:94:54:5d:44:27:4c:df:83:3e:56:fa:47:
74:bb:76:0d:0b:7a:bc:62:e3:4f:ca:92:98:21:b6:
a0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:19:23:F7:3E:9A:F5:CF:55:60:E4:25:1C:96:02:3A:0A:73:A1:85
X509v3 Authority Key Identifier:
keyid:BC:C8:60:D9:54:97:4D:CA:91:D5:B3:47:B6:3B:22:65:36:67:DA:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMhg2VSXTcqR1bNHtjsiZTZn2m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f0:09:aa:30:fb:fa:ad:05:28:69:a5:fa:1e:96:ed:06:d9:
12:39:a6:bf:db:f9:4d:53:d1:7e:22:9f:2c:1f:66:69:b4:ec:
97:1d:63:ec:70:79:9a:c9:c8:ab:7b:28:1d:7a:e7:b2:a8:20:
78:4a:05:10:19:64:f6:54:9a:6b:6c:ee:cb:e4:f1:34:8c:1d:
1c:f2:7d:2c:c2:51:89:17:87:11:08:8e:3c:eb:3d:c2:1a:97:
d1:1a:9c:62:41:48:8b:d3:c9:bb:20:cd:89:55:09:bd:09:65:
ff:ad:99:69:33:2d:0d:bc:1a:fc:86:2d:0d:0c:e6:b6:b1:95:
4d:6d:2c:33:7a:f7:9b:bf:82:bc:9b:1f:b6:6c:d4:92:b4:51:
b3:5f:5e:55:78:6b:7e:c1:d6:bd:a9:e9:15:95:be:b0:04:71:
fb:38:ee:d1:72:5d:60:f0:df:9e:a3:e3:e7:9a:3e:75:0c:8a:
d6:e3:e4:d6:a8:e9:4f:8b:04:49:ff:19:8b:d1:2c:8c:01:dd:
1b:94:35:78:34:8d:58:9e:49:4f:24:94:ab:90:c8:23:7e:63:
8b:1f:21:de:7d:a1:3f:44:db:ad:c9:29:13:91:83:7d:0d:87:
e1:51:3d:09:a5:a0:7b:0e:24:a3:10:45:86:07:30:ca:be:62:
66:12:d0:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IcTSx95+oZsDPEFeTrhWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYzg2MGQ5NTQ5NzRkY2E5MWQ1YjM0N2I2M2IyMjY1MzY2
N2RhNmQwHhcNMjUxMDE5MTEwMTM1WhcNMjUxMDIwMTEwMTM1WjAzMTEwLwYDVQQD
EyhmYzE5MjNmNzNlOWFmNWNmNTU2MGU0MjUxYzk2MDIzYTBhNzNhMTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Jsy9l1Ry0f/+MaQapIr7TpZweym
9SUa2qFRiTOJ1ZCyL3DiSlWbUHImF6cxlWJWGqiUp3R3fNcuuRiaAlBtoTN5U5J1
hnfwMH65opOFpF0k4SHxHsIjDKemeh+p1pCDA2ZmKsKzvXRBEJVb+PPBlQW0Bk0j
ci94ysg1HTjnHFsB/Bq6kfqd1HtEbvANwEBplFSjL9zrAib/BZo1nDLasA39NKAQ
kPjy9NM1VGhyJn9fyT6gTRI/MZSgqalrpR+PvruDNi+WFgcUWMGpyMfDSQTwHJQm
5RHftigfa79jVtkBYlaUVF1EJ0zfgz5W+kd0u3YNC3q8YuNPypKYIbagxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwZI/c+mvXPVWDkJRyWAjoKc6GFMB8GA1UdIwQY
MBaAFLzIYNlUl03KkdWzR7Y7ImU2Z9ptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk1oZzJWU1hUY3FSMWJOSHRqc2laVFpuMm0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS80Mzk4NzgtNGE5NS00NDc4LTgxNjMt
ZjM3MGYwNDI2NWE1LzEvdk1oZzJWU1hUY3FSMWJOSHRqc2laVFpuMm0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS80Mzk4NzgtNGE5NS00NDc4LTgxNjMtZjM3MGYwNDI2NWE1
LzEvdk1oZzJWU1hUY3FSMWJOSHRqc2laVFpuMm0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/AJqjD7
+q0FKGml+h6W7QbZEjmmv9v5TVPRfiKfLB9mabTslx1j7HB5msnIq3soHXrnsqgg
eEoFEBlk9lSaa2zuy+TxNIwdHPJ9LMJRiReHEQiOPOs9whqX0RqcYkFIi9PJuyDN
iVUJvQll/62ZaTMtDbwa/IYtDQzmtrGVTW0sM3r3m7+CvJsftmzUkrRRs19eVXhr
fsHWvanpFZW+sARx+zju0XJdYPDfnqPj55o+dQyK1uPk1qjpT4sESf8Zi9EsjAHd
G5Q1eDSNWJ5JTySUq5DII35jix8h3n2hP0TbrckpE5GDfQ2H4VE9CaWgew4koxBF
hgcwyr5iZhLQrg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:23 2025 by rpki-client