Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
File: vx9s1vq5XSQc2axfhfTQX53lj5s.mft (raw, json)
Hash identifier: W437mH/5RP3w98se67RemmQQkd3kkaT9hlaCEjANSbQ=
Subject key identifier: 33:2A:57:71:67:D9:53:E2:D8:BC:1C:B0:E2:5C:BC:04:12:43:05:2B
Authority key identifier: BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B
Certificate issuer: /CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
Certificate serial: 0198D473E4F02B69B7E0E93CE18906E210E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
Manifest number: 1425
Signing time: Sat 23 Aug 2025 01:03:41 +0000
Manifest this update: Sat 23 Aug 2025 01:03:41 +0000
Manifest next update: Sun 24 Aug 2025 01:03:41 +0000
Files and hashes: 1: EBHjm8uQ-LmD4evvwOZ6E0JwNQA.roa (hash: Tk02eWTtsJNpE3RvUJnaO0ovgb/O/tJmPY6vH9oMVtQ=)
2: vx9s1vq5XSQc2axfhfTQX53lj5s.crl (hash: iephq0MHhc6Cu5qZ0CvcOTuZeY+guAxrpK0KHb1Vy1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:e4:f0:2b:69:b7:e0:e9:3c:e1:89:06:e2:10:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
Validity
Not Before: Aug 23 01:03:41 2025 GMT
Not After : Aug 24 01:03:41 2025 GMT
Subject: CN=332a577167d953e2d8bc1cb0e25cbc041243052b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:59:59:78:1e:78:2c:30:91:43:7c:83:4a:5d:
b9:18:c8:66:ce:34:02:ad:3b:b4:50:63:93:38:4d:
62:bd:a8:ad:5d:0e:25:5e:49:e6:76:2e:d6:e8:cf:
fb:e1:41:f4:1b:3d:fb:8f:a3:7f:f2:bb:f1:85:b6:
7c:cc:52:e8:7c:52:12:47:03:87:1c:c7:43:77:08:
5f:29:e6:ae:ae:11:4c:79:de:75:d1:f4:09:c6:88:
36:a4:94:ed:c2:d2:7a:c6:9a:3a:63:c0:34:ed:11:
f9:4b:ed:ae:5c:1f:c7:47:af:aa:be:64:b4:18:97:
d9:c8:89:3a:77:f5:ad:59:45:29:0c:fc:0d:3f:0c:
bd:b8:7e:49:7f:10:6c:2e:89:71:b6:48:ef:80:b2:
c8:d6:ac:97:8f:b5:3b:4f:7e:b3:d0:bb:52:5e:94:
b3:84:23:a2:e8:81:37:0b:fe:97:fb:2e:25:b6:4d:
3b:e9:e9:5c:d8:b9:90:8b:a5:4e:d4:5a:8c:ab:db:
2a:3c:8d:e9:84:8e:d0:02:2c:e9:56:6b:5f:66:2e:
e2:cc:9b:90:d0:a8:a8:d3:a6:6b:db:7e:5a:48:32:
e2:7d:eb:ed:3b:78:da:a5:a5:97:8c:a6:fd:18:86:
17:54:4e:9d:d9:b0:c4:70:08:36:7f:20:b3:e2:25:
58:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2A:57:71:67:D9:53:E2:D8:BC:1C:B0:E2:5C:BC:04:12:43:05:2B
X509v3 Authority Key Identifier:
keyid:BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7a:c7:0b:32:62:21:23:63:fb:72:f2:ee:25:26:68:f5:e2:
5a:23:1f:7a:cd:47:b6:0d:8d:42:20:f6:8a:65:0b:f8:38:3b:
3d:64:e7:9b:b8:33:77:9b:30:a9:12:3a:26:3c:9b:03:e3:28:
67:e3:04:b6:00:26:0a:d7:53:f1:ee:f4:97:8e:de:22:4f:d6:
b2:c2:14:dc:8e:68:3b:5c:64:bc:a3:5f:93:5b:b8:7e:22:90:
d8:ff:36:84:3c:25:15:6a:f3:d4:59:45:65:10:f0:14:20:8e:
bb:10:e9:f0:2a:cc:fa:b8:e3:4e:75:0c:20:f0:7b:cb:a1:9a:
2a:5b:0d:31:6a:2d:43:c3:f2:9f:ae:0f:f4:32:b4:6a:37:04:
0c:bf:9a:ae:34:7a:ef:ba:66:91:41:ca:f5:aa:3a:d1:ed:26:
3d:19:96:fa:0f:ad:f6:94:9a:2a:8b:af:c8:33:95:ad:78:09:
d7:81:50:a8:c0:16:48:c5:54:49:85:79:e3:1c:11:d4:7e:c6:
26:b7:1f:64:30:6b:cc:65:6b:25:bd:c7:cf:62:26:81:dc:fe:
4d:88:97:a7:8b:80:5c:b4:69:33:2a:b4:64:55:70:d1:ce:e4:
83:9e:7c:fb:28:b1:91:71:6d:b7:a7:67:4b:a2:c5:11:55:67:
b5:eb:7d:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc+TwK2m34Ok84YkG4hDlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMWY2Y2Q2ZmFiOTVkMjQxY2Q5YWM1Zjg1ZjRkMDVmOWRl
NThmOWIwHhcNMjUwODIzMDEwMzQxWhcNMjUwODI0MDEwMzQxWjAzMTEwLwYDVQQD
EygzMzJhNTc3MTY3ZDk1M2UyZDhiYzFjYjBlMjVjYmMwNDEyNDMwNTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11lZeB54LDCRQ3yDSl25GMhmzjQC
rTu0UGOTOE1ivaitXQ4lXknmdi7W6M/74UH0Gz37j6N/8rvxhbZ8zFLofFISRwOH
HMdDdwhfKeaurhFMed510fQJxog2pJTtwtJ6xpo6Y8A07RH5S+2uXB/HR6+qvmS0
GJfZyIk6d/WtWUUpDPwNPwy9uH5JfxBsLolxtkjvgLLI1qyXj7U7T36z0LtSXpSz
hCOi6IE3C/6X+y4ltk076elc2LmQi6VO1FqMq9sqPI3phI7QAizpVmtfZi7izJuQ
0Kio06Zr235aSDLifevtO3japaWXjKb9GIYXVE6d2bDEcAg2fyCz4iVYYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMqV3Fn2VPi2LwcsOJcvAQSQwUrMB8GA1UdIwQY
MBaAFL8fbNb6uV0kHNmsX4X00F+d5Y+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdng5czF2cTVYU1FjMmF4ZmhmVFFYNTNsajVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lM2M5NzEtNTMyNC00MTM0LWJlYWQt
NTk3YzQzNTk4NTc3LzEvdng5czF2cTVYU1FjMmF4ZmhmVFFYNTNsajVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lM2M5NzEtNTMyNC00MTM0LWJlYWQtNTk3YzQzNTk4NTc3
LzEvdng5czF2cTVYU1FjMmF4ZmhmVFFYNTNsajVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanrHCzJi
ISNj+3Ly7iUmaPXiWiMfes1Htg2NQiD2imUL+Dg7PWTnm7gzd5swqRI6JjybA+Mo
Z+MEtgAmCtdT8e70l47eIk/WssIU3I5oO1xkvKNfk1u4fiKQ2P82hDwlFWrz1FlF
ZRDwFCCOuxDp8CrM+rjjTnUMIPB7y6GaKlsNMWotQ8Pyn64P9DK0ajcEDL+arjR6
77pmkUHK9ao60e0mPRmW+g+t9pSaKouvyDOVrXgJ14FQqMAWSMVUSYV54xwR1H7G
JrcfZDBrzGVrJb3Hz2Imgdz+TYiXp4uAXLRpMyq0ZFVw0c7kg558+yixkXFtt6dn
S6LFEVVntet9xg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:41 2025 by rpki-client