Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
File: vlJx8OFYfBRDTySA-RQQGFUHz6E.mft (raw, json)
Hash identifier: 2151Ne9lhP5IeiNOJoz1WqbCFlXDqrI91fSyAX+jQCE=
Subject key identifier: 14:DD:40:00:23:05:E0:FD:EF:EB:BC:BF:6D:A8:C6:32:59:C8:03:16
Authority key identifier: BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
Certificate issuer: /CN=be5271f0e1587c14434f2480f91410185507cfa1
Certificate serial: 0199FB7C82DD93A212F21D71E8A2BD2412F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
Manifest number: 1672
Signing time: Sun 19 Oct 2025 08:01:05 +0000
Manifest this update: Sun 19 Oct 2025 08:01:05 +0000
Manifest next update: Mon 20 Oct 2025 08:01:05 +0000
Files and hashes: 1: bxyMDkypoYoPE36odgLUanwOaLY.roa (hash: /Tdt2l601ImlNiIyf1pfayzYn4s0xCETamIww0AgaGc=)
2: vlJx8OFYfBRDTySA-RQQGFUHz6E.crl (hash: cZU3lHN4GxHQvle0dTj8/mstHvqm+F94paiML4kz2V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:82:dd:93:a2:12:f2:1d:71:e8:a2:bd:24:12:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5271f0e1587c14434f2480f91410185507cfa1
Validity
Not Before: Oct 19 08:01:05 2025 GMT
Not After : Oct 20 08:01:05 2025 GMT
Subject: CN=14dd40002305e0fdefebbcbf6da8c63259c80316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3f:00:87:a1:ba:b0:18:4b:05:7c:7e:17:21:
20:e9:49:be:45:60:5f:f9:83:1d:12:19:09:b0:71:
0d:23:05:2f:47:4b:81:e4:d9:27:44:d1:85:63:4f:
1f:fe:c7:c3:8f:5e:a2:97:44:9f:f6:6c:c7:f0:e6:
aa:33:98:43:3b:15:10:34:1e:d2:8b:4e:f6:79:f7:
25:fa:45:c9:5b:46:ea:85:d0:9f:d7:69:9e:4e:02:
0b:a5:52:fe:d4:bb:3a:be:ff:98:05:2a:92:08:ea:
f6:1c:bd:74:08:5d:bf:00:21:66:ed:9a:e4:7e:25:
af:f6:c1:6f:34:59:83:82:c4:02:a7:a5:63:68:9b:
63:e7:24:63:32:3c:9a:eb:fd:ce:d7:33:90:aa:52:
5d:93:76:7b:b3:3a:91:17:1d:c4:45:da:ef:75:e6:
be:e8:bb:bb:b0:94:e6:f2:90:ac:8c:24:0b:68:af:
27:cc:e7:69:cd:e1:c4:9a:4a:c7:03:9a:fa:40:66:
8c:fa:22:00:8f:76:f1:35:76:6e:a5:20:e4:5a:b9:
3e:99:5a:72:d4:84:18:d9:48:6a:d3:4f:64:44:77:
42:52:ba:43:89:88:7f:b1:56:79:52:3e:4e:51:6d:
53:83:27:15:83:c8:1f:c5:fa:32:f6:63:29:5a:18:
6c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DD:40:00:23:05:E0:FD:EF:EB:BC:BF:6D:A8:C6:32:59:C8:03:16
X509v3 Authority Key Identifier:
keyid:BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a9:69:15:76:3a:f9:81:ce:f4:80:66:91:94:bf:0c:55:6b:
c3:9e:49:6a:c9:d9:ce:40:7f:65:34:0e:83:40:9e:50:e0:92:
eb:b3:d5:db:35:e7:30:5e:a3:97:88:19:2e:77:ca:a6:3d:d0:
f5:f8:97:5b:db:71:5e:4d:22:c0:b8:f1:28:f0:c4:2a:b7:24:
df:14:2c:dd:a2:23:17:b0:ec:a0:ef:77:0c:85:f0:25:27:e9:
82:44:80:22:9c:61:a2:08:d9:53:b5:f5:3c:e2:79:c2:ea:e7:
e3:6c:d2:01:d3:aa:02:63:a8:26:f0:3a:2c:f1:11:a6:de:7b:
bd:bb:bb:77:3c:c7:a0:f1:92:98:b5:ff:25:69:73:b3:41:01:
e5:fb:d9:6b:44:33:60:07:96:48:2c:52:74:98:1e:30:78:8b:
ec:4c:55:12:4f:fd:59:8c:88:e6:39:e4:92:f9:ab:dc:1a:a5:
a7:16:59:83:e8:62:b7:de:d4:90:42:e3:b7:f6:d9:88:52:19:
68:0f:a8:ba:4b:e9:88:e4:4d:22:9b:82:1e:f4:6d:f2:d7:c5:
c3:52:20:8b:40:66:34:95:2c:99:e7:cc:5a:84:31:6a:48:24:
0e:9c:c0:c5:73:6e:63:be:4d:b5:43:7e:4a:87:38:22:6f:c2:
cb:8a:79:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fILdk6IS8h1x6KK9JBL3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNTI3MWYwZTE1ODdjMTQ0MzRmMjQ4MGY5MTQxMDE4NTUw
N2NmYTEwHhcNMjUxMDE5MDgwMTA1WhcNMjUxMDIwMDgwMTA1WjAzMTEwLwYDVQQD
EygxNGRkNDAwMDIzMDVlMGZkZWZlYmJjYmY2ZGE4YzYzMjU5YzgwMzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T8Ah6G6sBhLBXx+FyEg6Um+RWBf
+YMdEhkJsHENIwUvR0uB5NknRNGFY08f/sfDj16il0Sf9mzH8OaqM5hDOxUQNB7S
i072efcl+kXJW0bqhdCf12meTgILpVL+1Ls6vv+YBSqSCOr2HL10CF2/ACFm7Zrk
fiWv9sFvNFmDgsQCp6VjaJtj5yRjMjya6/3O1zOQqlJdk3Z7szqRFx3ERdrvdea+
6Lu7sJTm8pCsjCQLaK8nzOdpzeHEmkrHA5r6QGaM+iIAj3bxNXZupSDkWrk+mVpy
1IQY2Uhq009kRHdCUrpDiYh/sVZ5Uj5OUW1TgycVg8gfxfoy9mMpWhhsVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTdQAAjBeD97+u8v22oxjJZyAMWMB8GA1UdIwQY
MBaAFL5ScfDhWHwUQ08kgPkUEBhVB8+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmxKeDhPRllmQlJEVHlTQS1SUVFHRlVIejZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83NmRiYTAtZDg2Yi00ZDg0LWIxNWEt
NGQ2ZDEyNTZiZjliLzEvdmxKeDhPRllmQlJEVHlTQS1SUVFHRlVIejZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny83NmRiYTAtZDg2Yi00ZDg0LWIxNWEtNGQ2ZDEyNTZiZjli
LzEvdmxKeDhPRllmQlJEVHlTQS1SUVFHRlVIejZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACalpFXY6
+YHO9IBmkZS/DFVrw55JasnZzkB/ZTQOg0CeUOCS67PV2zXnMF6jl4gZLnfKpj3Q
9fiXW9txXk0iwLjxKPDEKrck3xQs3aIjF7DsoO93DIXwJSfpgkSAIpxhogjZU7X1
POJ5wurn42zSAdOqAmOoJvA6LPERpt57vbu7dzzHoPGSmLX/JWlzs0EB5fvZa0Qz
YAeWSCxSdJgeMHiL7ExVEk/9WYyI5jnkkvmr3BqlpxZZg+hit97UkELjt/bZiFIZ
aA+oukvpiORNIpuCHvRt8tfFw1Igi0BmNJUsmefMWoQxakgkDpzAxXNuY75NtUN+
Soc4Im/Cy4p5yQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:14 2025 by rpki-client