Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
File: vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft (raw, json)
Hash identifier: soRJwUXXeab+w13BUU/Yw8nBnVmVHvdtR2pUqKHq0Kk=
Subject key identifier: 09:8D:5A:FF:17:40:6F:09:F0:B4:A6:6D:73:BA:A9:F9:3F:49:CF:54
Authority key identifier: BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D
Certificate issuer: /CN=be2f2ccf1baa39033ec76a586f846a36218f209d
Certificate serial: 0199FFC7C28B411B660330053CE1212CA4F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
Manifest number: 1226
Signing time: Mon 20 Oct 2025 04:01:45 +0000
Manifest this update: Mon 20 Oct 2025 04:01:45 +0000
Manifest next update: Tue 21 Oct 2025 04:01:45 +0000
Files and hashes: 1: JAdnsONCtTfLbO2OfLFXkq3UEe0.roa (hash: uH25J1sXmVYdKjAjZcQtubKyV6gnVwOjCbWyLNaZ4r4=)
2: vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl (hash: Slcn7ExuZ+kmqBCsPFs9tXPygx0uQ9bd808EGRYLItE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:c2:8b:41:1b:66:03:30:05:3c:e1:21:2c:a4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2f2ccf1baa39033ec76a586f846a36218f209d
Validity
Not Before: Oct 20 04:01:45 2025 GMT
Not After : Oct 21 04:01:45 2025 GMT
Subject: CN=098d5aff17406f09f0b4a66d73baa9f93f49cf54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:74:57:32:e9:06:70:db:d7:4e:79:6d:20:
80:f7:07:ce:30:9f:00:34:2b:7d:92:0b:2b:fa:23:
5d:0a:4c:4f:18:38:0e:37:0d:dd:66:c5:6d:58:79:
1f:4b:76:1d:cb:c2:67:20:8a:2b:a7:60:a6:c9:f9:
60:32:70:12:f3:e4:8a:2b:c0:d1:2e:36:da:ca:2d:
43:dd:0e:51:42:19:a9:d6:61:43:b3:19:9a:8a:62:
75:1e:28:55:1a:70:f3:47:cb:de:b6:b3:d4:ee:de:
36:95:9c:69:4c:39:de:8f:d7:41:95:99:e4:8d:1e:
a2:de:ed:2b:b5:b1:32:03:c4:84:31:9f:b2:1e:09:
d4:1e:f9:08:8d:f9:b1:fb:b1:e3:38:18:0f:12:45:
37:7c:64:14:64:ac:f1:7b:77:55:1b:9b:bb:54:24:
9e:6b:79:ba:d7:43:69:78:96:b3:ba:87:27:85:20:
ea:d0:87:c3:54:7e:2b:c6:7c:38:87:ab:62:aa:fc:
c9:6d:c7:3a:3c:b3:99:1f:1d:e7:59:ea:cb:3d:e4:
72:9d:d8:60:34:79:ef:1b:fe:af:a7:49:9d:fb:64:
8e:a4:1f:18:0f:75:2e:26:2e:dd:7b:c7:7c:be:29:
cf:0d:d8:60:5f:ed:80:ca:58:f3:7f:3b:9e:4d:3f:
5a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8D:5A:FF:17:40:6F:09:F0:B4:A6:6D:73:BA:A9:F9:3F:49:CF:54
X509v3 Authority Key Identifier:
keyid:BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:44:02:82:7a:d2:67:28:63:db:18:66:92:7a:5d:b5:1c:2c:
05:26:b5:95:2d:62:79:12:b5:34:17:38:f6:56:46:7f:c9:0d:
57:29:aa:55:27:a7:f7:6f:ba:1b:24:fc:9e:ca:99:fc:77:c5:
c7:0b:a0:72:a6:40:e1:5a:e3:1a:a1:ba:f6:3d:1a:1d:ef:fb:
2f:f9:f6:dc:dc:96:32:fc:7c:0a:68:2b:0e:19:e6:a6:af:4a:
32:47:6f:d1:e4:66:18:56:25:f0:4c:65:5d:2b:34:b6:e8:53:
1c:86:9f:bd:b3:fe:48:6c:81:64:6c:10:f3:4f:8e:af:60:bc:
08:98:1e:9d:71:be:c2:a1:cf:2b:2a:83:2b:da:88:6f:f5:4d:
53:8d:d5:96:48:78:31:16:97:25:94:f1:89:3f:22:2c:86:bb:
d8:50:23:23:80:20:7a:db:10:21:e4:49:60:b0:43:50:2f:a6:
bf:43:fb:5a:41:55:04:33:5e:77:56:53:a2:eb:11:81:ec:20:
3d:e6:ae:0f:c4:be:4b:e2:92:55:98:38:90:04:2a:49:76:5c:
6b:f8:3f:33:fb:62:71:a1:5e:ac:c8:4b:0e:cc:c0:7f:df:30:
38:9c:9c:7c:b4:82:c6:76:e5:85:cb:28:23:bf:01:3b:4d:35:
3a:07:82:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x8KLQRtmAzAFPOEhLKT1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMmYyY2NmMWJhYTM5MDMzZWM3NmE1ODZmODQ2YTM2MjE4
ZjIwOWQwHhcNMjUxMDIwMDQwMTQ1WhcNMjUxMDIxMDQwMTQ1WjAzMTEwLwYDVQQD
EygwOThkNWFmZjE3NDA2ZjA5ZjBiNGE2NmQ3M2JhYTlmOTNmNDljZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXJ0VzLpBnDb1055bSCA9wfOMJ8A
NCt9kgsr+iNdCkxPGDgONw3dZsVtWHkfS3Ydy8JnIIorp2CmyflgMnAS8+SKK8DR
Ljbayi1D3Q5RQhmp1mFDsxmaimJ1HihVGnDzR8vetrPU7t42lZxpTDnej9dBlZnk
jR6i3u0rtbEyA8SEMZ+yHgnUHvkIjfmx+7HjOBgPEkU3fGQUZKzxe3dVG5u7VCSe
a3m610NpeJazuocnhSDq0IfDVH4rxnw4h6tiqvzJbcc6PLOZHx3nWerLPeRyndhg
NHnvG/6vp0md+2SOpB8YD3UuJi7de8d8vinPDdhgX+2AyljzfzueTT9acwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmNWv8XQG8J8LSmbXO6qfk/Sc9UMB8GA1UdIwQY
MBaAFL4vLM8bqjkDPsdqWG+EajYhjyCdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmk4c3p4dXFPUU0teDJwWWI0UnFOaUdQSUowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85Nzc0NGQtNTk4OC00NmFlLTgyZjEt
NjQxODdlMzA0MzViLzEvdmk4c3p4dXFPUU0teDJwWWI0UnFOaUdQSUowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS85Nzc0NGQtNTk4OC00NmFlLTgyZjEtNjQxODdlMzA0MzVi
LzEvdmk4c3p4dXFPUU0teDJwWWI0UnFOaUdQSUowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUQCgnrS
Zyhj2xhmknpdtRwsBSa1lS1ieRK1NBc49lZGf8kNVymqVSen92+6GyT8nsqZ/HfF
xwugcqZA4VrjGqG69j0aHe/7L/n23NyWMvx8CmgrDhnmpq9KMkdv0eRmGFYl8Exl
XSs0tuhTHIafvbP+SGyBZGwQ80+Or2C8CJgenXG+wqHPKyqDK9qIb/VNU43Vlkh4
MRaXJZTxiT8iLIa72FAjI4AgetsQIeRJYLBDUC+mv0P7WkFVBDNed1ZTousRgewg
PeauD8S+S+KSVZg4kAQqSXZca/g/M/ticaFerMhLDszAf98wOJycfLSCxnblhcso
I78BO001OgeC1A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:40:14 2025 by rpki-client