
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
File: vx1f6v05F0clv-S--RvSfHsvb5E.mft (raw, json)
Hash identifier: OH0z6yYJ6+d9zrBM2aZk0qKwmh6xgZGSo5d3D+lhOBw=
Subject key identifier: 03:4E:FC:63:47:23:19:75:04:07:97:B0:97:7A:7A:5A:A5:8F:8A:CA
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 0199FB45B7C0D1F25F2A175D667D109BB90F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
Manifest number: 1710
Signing time: Sun 19 Oct 2025 07:01:14 +0000
Manifest this update: Sun 19 Oct 2025 07:01:14 +0000
Manifest next update: Mon 20 Oct 2025 07:01:14 +0000
Files and hashes: 1: DFPMPjVgEXra9Yi746ueyHfFEfE.roa (hash: egcn+8V+rmTodHY7QllvkOnDLWLB5ryJAjHfdzE4gEE=)
2: FBtv0zQKgpSJGVwmOiWrJgdZXTQ.roa (hash: jZyVvy/AnilHzUcrfJcn+M+uqzeksVwB5ieR7HcmZ3o=)
3: JLZHp3zugUr0BJKEkPLt_peuCWY.roa (hash: xqh8b79ZtGYi3X/2gVjxCLbm1mPbREjzpn3t3zp8STc=)
4: QBbKMrewUV5LysqmZYBRCD2P-aU.roa (hash: pyCMXVW0aDhN3pnl3u7Ja6A+yxwNB3DI3wsCXDY581k=)
5: WJYzgmcrcmILpqEG0aOvuAZFJSY.roa (hash: 6cn2iTDXSQqMon3jkehha+lFwjisWUfx0Tw++dlztuk=)
6: a2N7ZqNTTwHGwfd7829psoPCAf8.roa (hash: l07jq1tDJlSMiPUaiQ9Tqz6dDSHfIb3Fw8fa48dds2M=)
7: laT6cLR_CsAMLDNRuHbw-QE9_Lg.roa (hash: /As0MXu+Jd4Zfmw66mysjQFz8bFMgrz+a8Z5fFD5uCE=)
8: vx1f6v05F0clv-S--RvSfHsvb5E.crl (hash: kkhBs6Ks3zTRXip+30SD9Q8iR3vOWDkM5sL41GHsM6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:b7:c0:d1:f2:5f:2a:17:5d:66:7d:10:9b:b9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Oct 19 07:01:14 2025 GMT
Not After : Oct 20 07:01:14 2025 GMT
Subject: CN=034efc6347231975040797b0977a7a5aa58f8aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:13:d0:a5:59:96:25:40:e4:6c:ca:ca:2d:96:
87:9a:df:7f:44:03:07:d0:c3:16:16:c1:5f:0c:5b:
bc:8f:95:28:1c:2a:be:c1:b2:51:f4:dc:ee:47:66:
81:3c:9d:45:e3:f6:de:38:57:4b:a8:0b:c3:57:62:
91:07:13:79:a3:f3:69:b7:3d:83:0a:e3:70:52:de:
e4:40:bb:2b:c9:a2:04:33:f2:cb:8f:71:4b:3c:ff:
83:65:70:25:1e:fc:b0:05:dd:de:58:cd:86:5c:74:
3f:46:96:d5:cb:4e:08:e7:91:7b:49:ce:4a:5b:dc:
40:78:a8:62:df:c0:ac:b0:48:f6:c6:1b:f0:ec:fa:
0f:b6:cc:53:7c:c1:1e:34:ee:52:0f:39:53:1c:23:
5d:9e:9e:a0:1a:3d:80:56:43:9a:d4:02:6b:39:11:
87:7e:0a:c1:28:28:43:8b:ad:af:e7:e7:71:d5:2a:
fd:74:ee:45:ba:58:3f:2c:93:22:4f:cb:51:97:90:
dc:5a:b9:69:d7:5f:34:e3:cd:87:dc:b8:85:3e:c0:
74:c0:8c:b5:2f:7c:fd:69:cd:5a:10:48:3f:a6:22:
de:54:94:ae:f8:8e:f7:8a:e8:d6:12:6a:81:89:b2:
e8:39:0b:f1:d3:67:83:b8:fa:da:55:6b:7b:8c:4e:
b9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4E:FC:63:47:23:19:75:04:07:97:B0:97:7A:7A:5A:A5:8F:8A:CA
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:24:f5:11:20:44:50:bc:e1:ea:98:5c:dd:91:51:52:4d:ee:
11:0e:69:2d:65:c9:2f:18:1d:c0:00:90:f0:4d:8a:d2:06:9e:
12:dd:1d:89:bc:bc:ba:f0:a1:f9:89:92:9a:5f:f0:45:f4:66:
ef:9d:8b:ba:30:88:7a:ee:60:ef:64:2a:a1:36:4d:57:27:22:
0f:9d:34:33:1f:1a:79:38:84:62:d1:71:2f:78:5a:07:16:48:
dd:7f:f1:6b:b5:d5:fa:67:0e:3c:20:98:7d:25:51:bb:c0:35:
76:89:28:1a:af:82:31:16:fe:89:4a:2d:e4:eb:d5:ee:d7:64:
4e:24:16:ce:f9:39:c5:2d:4b:b3:03:c0:59:b2:02:0c:14:5b:
5c:fc:a4:44:b8:4a:55:a1:8d:bb:12:db:83:66:57:87:3c:e5:
f0:b3:97:e0:30:bf:c6:76:d7:68:b2:ac:fc:71:71:cd:25:d0:
a6:df:a5:85:0d:d7:cd:aa:05:69:7d:8b:e6:1f:95:8d:ee:7f:
14:7b:ef:8e:0e:f9:25:b2:b1:66:36:65:91:8d:9e:28:34:58:
29:20:75:da:04:d1:2d:56:d3:9a:9d:78:aa:59:c9:bf:17:fc:
f3:1c:17:35:c0:4f:6a:76:0f:9c:bd:3f:62:a4:7e:1f:a0:0c:
9e:76:73:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RbfA0fJfKhddZn0Qm7kPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMWQ1ZmVhZmQzOTE3NDcyNWJmZTRiZWY5MWJkMjdjN2Iy
ZjZmOTEwHhcNMjUxMDE5MDcwMTE0WhcNMjUxMDIwMDcwMTE0WjAzMTEwLwYDVQQD
EygwMzRlZmM2MzQ3MjMxOTc1MDQwNzk3YjA5NzdhN2E1YWE1OGY4YWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RPQpVmWJUDkbMrKLZaHmt9/RAMH
0MMWFsFfDFu8j5UoHCq+wbJR9NzuR2aBPJ1F4/beOFdLqAvDV2KRBxN5o/Nptz2D
CuNwUt7kQLsryaIEM/LLj3FLPP+DZXAlHvywBd3eWM2GXHQ/RpbVy04I55F7Sc5K
W9xAeKhi38CssEj2xhvw7PoPtsxTfMEeNO5SDzlTHCNdnp6gGj2AVkOa1AJrORGH
fgrBKChDi62v5+dx1Sr9dO5Fulg/LJMiT8tRl5DcWrlp1180482H3LiFPsB0wIy1
L3z9ac1aEEg/piLeVJSu+I73iujWEmqBibLoOQvx02eDuPraVWt7jE65OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANO/GNHIxl1BAeXsJd6elqlj4rKMB8GA1UdIwQY
MBaAFL8dX+r9ORdHJb/kvvkb0nx7L2+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82MDY1ZDItMTAzZS00YWI3LWJmYjMt
MWE4Yzg0MmFmZTJhLzEvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82MDY1ZDItMTAzZS00YWI3LWJmYjMtMWE4Yzg0MmFmZTJh
LzEvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWyT1ESBE
ULzh6phc3ZFRUk3uEQ5pLWXJLxgdwACQ8E2K0gaeEt0diby8uvCh+YmSml/wRfRm
752LujCIeu5g72QqoTZNVyciD500Mx8aeTiEYtFxL3haBxZI3X/xa7XV+mcOPCCY
fSVRu8A1dokoGq+CMRb+iUot5OvV7tdkTiQWzvk5xS1LswPAWbICDBRbXPykRLhK
VaGNuxLbg2ZXhzzl8LOX4DC/xnbXaLKs/HFxzSXQpt+lhQ3XzaoFaX2L5h+Vje5/
FHvvjg75JbKxZjZlkY2eKDRYKSB12gTRLVbTmp14qlnJvxf88xwXNcBPanYPnL0/
YqR+H6AMnnZz4w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:19 2025 by rpki-client