Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
File: vx9s1vq5XSQc2axfhfTQX53lj5s.mft (raw, json)
Hash identifier: SGZQrL9KGMjJX8ij18n9lzyTylOCrWfUfyPLnmLMRrk=
Subject key identifier: 08:00:D0:BD:CA:92:3C:F2:A0:DA:B8:F0:BE:87:8A:B3:5C:D5:6F:CB
Authority key identifier: BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B
Certificate issuer: /CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
Certificate serial: 0199FBEB332888B8E6C1DA511B9655B6D91E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
Manifest number: 14BE
Signing time: Sun 19 Oct 2025 10:01:59 +0000
Manifest this update: Sun 19 Oct 2025 10:01:59 +0000
Manifest next update: Mon 20 Oct 2025 10:01:59 +0000
Files and hashes: 1: EBHjm8uQ-LmD4evvwOZ6E0JwNQA.roa (hash: Tk02eWTtsJNpE3RvUJnaO0ovgb/O/tJmPY6vH9oMVtQ=)
2: vx9s1vq5XSQc2axfhfTQX53lj5s.crl (hash: 2KDYOJUuP/xCmCTWi25jtbrxdEohEYybutL+JxJQDZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:33:28:88:b8:e6:c1:da:51:1b:96:55:b6:d9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
Validity
Not Before: Oct 19 10:01:59 2025 GMT
Not After : Oct 20 10:01:59 2025 GMT
Subject: CN=0800d0bdca923cf2a0dab8f0be878ab35cd56fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6c:dd:ea:a9:04:a3:5d:63:e7:9e:95:6b:91:
9e:67:3a:10:86:d3:57:3b:d6:b4:70:e5:2b:9c:71:
ef:66:da:10:11:14:3c:47:df:10:b0:09:fa:ec:f4:
4a:06:b9:cc:00:35:ee:60:35:db:d5:2e:54:1a:43:
2e:89:7c:8d:61:39:d4:5f:97:c0:88:90:51:10:b6:
82:95:c9:d6:60:4f:fc:ef:e8:ec:18:07:ac:89:fb:
25:61:10:b1:e1:33:fc:64:ee:72:da:3e:f4:7f:e0:
74:9e:3b:18:26:d4:de:2d:1b:ce:ba:da:50:70:90:
ce:2a:70:cf:7a:a4:44:bd:29:63:3b:dc:f9:ae:73:
16:da:4e:6b:9d:71:c0:db:f2:3a:18:d8:a6:13:27:
7e:1e:68:96:67:2b:37:ad:6e:c6:13:c7:77:79:64:
ec:d6:cc:9d:65:2e:79:86:4f:45:cb:74:fa:c5:e8:
97:ca:be:d8:6d:46:f4:fc:f5:89:8b:87:97:ad:a1:
06:dc:7c:10:52:6e:e9:1b:e9:59:04:d4:0b:48:52:
a0:47:80:11:eb:be:45:60:51:b3:cd:c7:60:ad:b1:
f3:17:d7:ba:a1:7b:7b:e2:e7:1e:95:3c:48:c6:82:
08:66:8f:fd:da:bf:95:6d:1f:25:6f:10:b0:dd:bf:
47:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:00:D0:BD:CA:92:3C:F2:A0:DA:B8:F0:BE:87:8A:B3:5C:D5:6F:CB
X509v3 Authority Key Identifier:
keyid:BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b9:4c:40:f7:07:8a:5a:e5:6b:8c:16:15:3a:f1:40:cd:06:
ff:ac:06:f4:ed:96:45:bd:bd:c1:ae:6a:cc:cc:68:bd:75:da:
f3:94:10:69:f9:b2:46:c3:6b:32:a7:38:6e:77:0c:ff:99:b2:
da:0e:8c:34:81:92:16:cf:a0:c1:91:91:9f:4c:7a:21:12:f2:
5c:a8:c5:ba:39:76:b8:68:d0:bf:f7:1d:7e:e2:41:10:f9:7a:
85:02:ec:6a:75:a4:8c:2c:6c:2c:58:75:b5:4d:22:19:3b:db:
8c:e7:51:cf:07:a1:6c:7d:b4:2e:37:8a:46:a3:a9:84:8b:4e:
8b:aa:e1:b3:5d:33:1e:6e:02:3e:68:a5:0f:d4:52:d9:61:19:
e4:06:af:2f:aa:df:26:22:ad:22:ec:bb:29:0c:4e:6f:e7:60:
c9:d0:b8:48:bd:e2:6d:8b:bb:98:c0:7b:28:5e:df:72:7a:71:
7f:36:00:61:af:2f:62:a4:18:ab:be:65:43:bb:a9:28:af:5e:
c2:be:d1:ed:3c:56:6e:bc:1f:4d:bb:08:90:d0:23:09:76:d8:
ca:0b:80:e6:ce:96:51:6b:30:6c:44:88:a5:66:f1:3d:7f:49:
0d:52:e3:5a:7b:3f:1f:ac:a6:7a:41:86:95:b8:eb:a4:4d:39:
15:a7:cb:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76zMoiLjmwdpRG5ZVttkeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMWY2Y2Q2ZmFiOTVkMjQxY2Q5YWM1Zjg1ZjRkMDVmOWRl
NThmOWIwHhcNMjUxMDE5MTAwMTU5WhcNMjUxMDIwMTAwMTU5WjAzMTEwLwYDVQQD
EygwODAwZDBiZGNhOTIzY2YyYTBkYWI4ZjBiZTg3OGFiMzVjZDU2ZmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmzd6qkEo11j556Va5GeZzoQhtNX
O9a0cOUrnHHvZtoQERQ8R98QsAn67PRKBrnMADXuYDXb1S5UGkMuiXyNYTnUX5fA
iJBRELaClcnWYE/87+jsGAesifslYRCx4TP8ZO5y2j70f+B0njsYJtTeLRvOutpQ
cJDOKnDPeqREvSljO9z5rnMW2k5rnXHA2/I6GNimEyd+HmiWZys3rW7GE8d3eWTs
1sydZS55hk9Fy3T6xeiXyr7YbUb0/PWJi4eXraEG3HwQUm7pG+lZBNQLSFKgR4AR
675FYFGzzcdgrbHzF9e6oXt74ucelTxIxoIIZo/92r+VbR8lbxCw3b9H/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgA0L3KkjzyoNq48L6HirNc1W/LMB8GA1UdIwQY
MBaAFL8fbNb6uV0kHNmsX4X00F+d5Y+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdng5czF2cTVYU1FjMmF4ZmhmVFFYNTNsajVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lM2M5NzEtNTMyNC00MTM0LWJlYWQt
NTk3YzQzNTk4NTc3LzEvdng5czF2cTVYU1FjMmF4ZmhmVFFYNTNsajVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lM2M5NzEtNTMyNC00MTM0LWJlYWQtNTk3YzQzNTk4NTc3
LzEvdng5czF2cTVYU1FjMmF4ZmhmVFFYNTNsajVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7lMQPcH
ilrla4wWFTrxQM0G/6wG9O2WRb29wa5qzMxovXXa85QQafmyRsNrMqc4bncM/5my
2g6MNIGSFs+gwZGRn0x6IRLyXKjFujl2uGjQv/cdfuJBEPl6hQLsanWkjCxsLFh1
tU0iGTvbjOdRzwehbH20LjeKRqOphItOi6rhs10zHm4CPmilD9RS2WEZ5AavL6rf
JiKtIuy7KQxOb+dgydC4SL3ibYu7mMB7KF7fcnpxfzYAYa8vYqQYq75lQ7upKK9e
wr7R7TxWbrwfTbsIkNAjCXbYyguA5s6WUWswbESIpWbxPX9JDVLjWns/H6ymekGG
lbjrpE05FafLeQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:25 2025 by rpki-client