Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
File: vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft (raw, json)
Hash identifier: 5DO7Nij0f23KPSmTavL7zDuYFvSTagNIMrWpy6r39NU=
Subject key identifier: 04:6C:69:29:4C:EE:E9:67:51:16:FB:1C:C5:04:7B:7A:A2:D3:0F:F4
Authority key identifier: BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54
Certificate issuer: /CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
Certificate serial: 0199FCFD6F22967E1FE34BD089F4B396597D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
Manifest number: 0CE8
Signing time: Sun 19 Oct 2025 15:01:31 +0000
Manifest this update: Sun 19 Oct 2025 15:01:31 +0000
Manifest next update: Mon 20 Oct 2025 15:01:31 +0000
Files and hashes: 1: Z6Q9yfl3feHtt8qjeJosNh_6sQk.roa (hash: GwOmbcb5vlCx0Hzj3NGEHPu2R7jhNAhkCt0fTS4A/18=)
2: vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl (hash: +3y+YDgrynKm8WEpvDOpJ61/Xo0VWzULmbfFf8AY50c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:6f:22:96:7e:1f:e3:4b:d0:89:f4:b3:96:59:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
Validity
Not Before: Oct 19 15:01:31 2025 GMT
Not After : Oct 20 15:01:31 2025 GMT
Subject: CN=046c69294ceee9675116fb1cc5047b7aa2d30ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c4:9e:26:44:ea:ad:dc:f5:7c:42:5b:45:e6:
86:76:1e:a0:c0:00:9c:73:f7:8c:d9:4e:e0:55:3b:
b9:08:7a:38:54:e3:1b:63:94:0c:e2:4b:0f:74:5b:
30:f2:66:53:4b:c8:6a:fc:b8:66:fb:01:b2:03:cc:
7d:57:0f:ba:71:4c:16:61:2a:b0:61:db:25:4e:7e:
da:66:67:eb:8b:e9:28:08:d7:55:6e:61:20:72:89:
95:96:51:9f:8f:7b:90:13:1d:ff:1d:1d:3d:1f:72:
00:5d:db:0c:bd:92:9e:60:3b:9e:a2:cb:95:0f:9d:
49:f8:f4:2e:80:de:13:4e:e6:2c:f7:3c:59:94:c9:
43:fa:a1:ca:37:16:64:e4:27:c4:1b:e0:5a:bf:27:
93:29:39:e2:8c:d4:52:4b:bc:67:c7:be:58:12:f5:
68:33:b4:8a:54:f4:2f:42:75:08:57:f0:dd:b1:e5:
ae:86:66:09:e1:f2:c1:e6:e5:ce:8c:7a:ff:13:ee:
9f:02:b3:6b:c6:40:be:1a:22:f3:fa:34:08:08:6a:
b4:07:2d:9c:b1:bf:26:08:47:07:fa:f6:04:20:26:
35:38:44:13:97:3f:cc:f0:d4:fd:e9:87:c8:e4:b3:
8f:07:30:1a:a4:e6:81:d4:49:05:e4:f7:8e:0f:f6:
f2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6C:69:29:4C:EE:E9:67:51:16:FB:1C:C5:04:7B:7A:A2:D3:0F:F4
X509v3 Authority Key Identifier:
keyid:BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8e:b5:24:8c:a3:cf:27:35:e2:51:97:8f:2e:27:c5:6c:e2:
80:25:4d:d5:f7:a7:f2:48:5b:29:76:9a:9e:4f:4b:e6:d3:ec:
88:33:ec:4c:e3:ad:d8:bb:5f:fa:0a:16:03:b3:65:c6:44:21:
73:dd:fb:f1:89:45:e8:58:9f:5b:2b:d8:6c:82:d9:a4:61:b8:
54:4b:5d:4c:5a:ea:eb:5b:be:e2:bf:f4:bf:a8:65:79:2a:e3:
25:fa:81:0a:f3:9b:a9:d6:2e:3a:0e:f7:34:95:c3:ff:b8:f9:
5e:53:41:ca:8d:d2:05:64:84:b6:0b:3e:35:28:76:54:14:70:
bd:bd:a3:93:a3:c1:a9:e2:07:46:3d:e9:b5:42:69:7c:19:fb:
84:41:a9:a7:06:53:49:6d:37:cf:99:d6:81:0b:61:5d:0b:1e:
68:02:b5:3b:81:6f:9b:8b:62:2d:50:79:b5:9c:1c:66:9d:d7:
2a:25:bb:cf:6e:85:d9:a9:a3:e3:24:da:72:4d:02:5d:0a:b0:
48:ff:13:3b:46:1e:08:71:ad:56:38:c5:08:ff:b9:4c:c9:7c:
c7:c3:1c:9e:34:6a:e9:1b:1f:31:23:25:77:da:0c:e6:10:2f:
56:7b:ea:8b:0b:fe:ae:0f:8f:0d:66:75:a7:4b:ff:35:01:b5:
24:67:1c:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/W8iln4f40vQifSzlll9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMTE2ZDM1YjExYzkzODIzM2FjYmFkZjVkN2MyZDViMmM2
ZDAxNTQwHhcNMjUxMDE5MTUwMTMxWhcNMjUxMDIwMTUwMTMxWjAzMTEwLwYDVQQD
EygwNDZjNjkyOTRjZWVlOTY3NTExNmZiMWNjNTA0N2I3YWEyZDMwZmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcSeJkTqrdz1fEJbReaGdh6gwACc
c/eM2U7gVTu5CHo4VOMbY5QM4ksPdFsw8mZTS8hq/Lhm+wGyA8x9Vw+6cUwWYSqw
YdslTn7aZmfri+koCNdVbmEgcomVllGfj3uQEx3/HR09H3IAXdsMvZKeYDueosuV
D51J+PQugN4TTuYs9zxZlMlD+qHKNxZk5CfEG+BavyeTKTnijNRSS7xnx75YEvVo
M7SKVPQvQnUIV/DdseWuhmYJ4fLB5uXOjHr/E+6fArNrxkC+GiLz+jQICGq0By2c
sb8mCEcH+vYEICY1OEQTlz/M8NT96YfI5LOPBzAapOaB1EkF5PeOD/bygQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARsaSlM7ulnURb7HMUEe3qi0w/0MB8GA1UdIwQY
MBaAFL0RbTWxHJOCM6y63118LVssbQFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlJGdE5iRWNrNEl6ckxyZlhYd3RXeXh0QVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yMzljNzQtM2M0My00MjUxLTlhODUt
OWJlODY5YTljNjBjLzEvdlJGdE5iRWNrNEl6ckxyZlhYd3RXeXh0QVZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yMzljNzQtM2M0My00MjUxLTlhODUtOWJlODY5YTljNjBj
LzEvdlJGdE5iRWNrNEl6ckxyZlhYd3RXeXh0QVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMY61JIyj
zyc14lGXjy4nxWzigCVN1fen8khbKXaank9L5tPsiDPsTOOt2Ltf+goWA7NlxkQh
c9378YlF6FifWyvYbILZpGG4VEtdTFrq61u+4r/0v6hleSrjJfqBCvObqdYuOg73
NJXD/7j5XlNByo3SBWSEtgs+NSh2VBRwvb2jk6PBqeIHRj3ptUJpfBn7hEGppwZT
SW03z5nWgQthXQseaAK1O4Fvm4tiLVB5tZwcZp3XKiW7z26F2amj4yTack0CXQqw
SP8TO0YeCHGtVjjFCP+5TMl8x8McnjRq6RsfMSMld9oM5hAvVnvqiwv+rg+PDWZ1
p0v/NQG1JGccxg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:59 2025 by rpki-client