Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
File: vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft (raw, json)
Hash identifier: jHsM1KbTYoUKK793zUODNhoLg5qKzvpiVgdelhktCpk=
Subject key identifier: BE:13:8E:1B:3D:B3:F3:90:84:98:15:C2:BB:24:BD:97:14:39:3A:B1
Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
Certificate issuer: /CN=beb12ce6a91030e27d5abad146df27bc2880652b
Certificate serial: 0199FB7CCF2FB7E468D46F261B2193443BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 08:01:24 +0000
Manifest this update: Sun 19 Oct 2025 08:01:24 +0000
Manifest next update: Mon 20 Oct 2025 08:01:24 +0000
Files and hashes: 1: 68bf9tdtZQgGYg3-0B5PInDhCfY.roa (hash: f8IkiTce5GYVcsogjzR0QdHaU5oLadDEov52ZX8Qu0s=)
2: IRSQE14-Tz7sBccAsgZYt7JbvIs.roa (hash: HHWOf34cKB/cnxnIC3HjVQrTDRzDkhRKh2V00sDdnHA=)
3: ZTuZG35aq-_FRZAbaGaaD5vcMwI.roa (hash: ulXglv5m+ng8W6iFQKnfH2V7n7R22IWQlAJ1C+Bod0g=)
4: e7SUl4mSjdeGsAW__A2CvddXoNY.roa (hash: CZDiVjjgs0Krs+aiXIc/FeDFsKFYjTe8hPduuFN8E2k=)
5: vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl (hash: 5n18KEsFFyqvADCbjYvPACsTI68kcVEwhCNnTjQZD/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:cf:2f:b7:e4:68:d4:6f:26:1b:21:93:44:3b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b
Validity
Not Before: Oct 19 08:01:24 2025 GMT
Not After : Oct 20 08:01:24 2025 GMT
Subject: CN=be138e1b3db3f390849815c2bb24bd9714393ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6a:59:71:60:74:47:7f:a0:1f:84:d7:9c:da:
a8:71:76:46:a5:fe:f3:31:37:cd:38:9a:ac:67:10:
04:17:df:3d:2a:96:d2:c4:93:4c:d0:d8:ae:49:0b:
2a:de:bc:8a:98:20:aa:9e:e9:c6:48:eb:b5:2d:75:
25:ab:03:cd:c7:0e:a7:cf:5b:00:c5:ba:73:25:36:
8c:4b:b8:85:01:f9:f9:53:7d:1a:e5:e1:99:0a:67:
cf:bf:47:d6:a6:bd:84:75:f4:36:d4:80:a5:73:ab:
71:4f:e3:a2:db:33:b6:12:a9:b4:24:83:e9:39:3c:
b9:29:f3:1d:60:15:72:76:23:8e:46:21:a6:39:b1:
24:91:77:cf:a0:4a:40:96:c3:90:73:be:1a:63:60:
24:54:72:7f:d5:59:4f:5c:09:a0:f0:22:36:0c:01:
96:87:61:9e:80:d5:fd:69:86:49:45:54:0c:4a:03:
18:6d:fa:23:e3:43:27:bc:e6:a0:c1:5d:5f:22:f0:
63:57:87:a6:ea:98:1f:b0:30:a9:c7:64:86:82:cf:
56:65:2f:3b:fa:ce:bd:ef:47:58:62:52:e3:53:a2:
ef:83:fb:9d:21:1e:97:47:e7:14:8e:53:dc:f0:5b:
01:ac:07:5b:47:39:7d:86:67:91:61:3e:4d:97:02:
56:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:13:8E:1B:3D:B3:F3:90:84:98:15:C2:BB:24:BD:97:14:39:3A:B1
X509v3 Authority Key Identifier:
keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:71:68:e1:7d:2f:5a:65:11:eb:c9:31:d3:ef:df:2b:3e:8c:
f0:6c:0f:83:4d:11:3b:a8:72:18:4c:09:ac:99:ba:79:c1:09:
5a:ac:3a:01:5a:44:d8:d7:2a:7e:78:8e:64:2e:c5:fc:94:e0:
b0:10:cc:5e:b8:d2:0b:a3:36:db:11:e5:c8:20:71:bb:6b:5f:
ec:72:96:09:c2:d8:c3:ea:49:1c:08:87:20:67:04:c4:79:38:
a6:e2:3f:8a:a4:d5:26:52:e8:5f:7d:d0:af:b6:44:01:6b:00:
18:e9:51:24:45:d4:c8:98:56:de:32:72:5f:d8:a5:a4:be:38:
a8:51:7d:1b:a1:7c:82:ae:29:82:8f:7b:76:bf:8b:dc:2c:ea:
16:74:c8:68:24:91:61:6c:0a:24:28:70:51:3a:ad:51:0f:0a:
5d:20:a8:a3:9c:2c:f6:03:7d:47:90:01:a6:5f:d8:a4:fb:f1:
a7:12:64:7e:f4:2c:1b:c2:92:45:ea:01:98:cb:11:e9:d3:50:
6a:73:61:ba:55:1a:b0:d3:17:32:c5:78:d9:e5:52:80:15:e7:
55:f0:16:bb:c1:cf:cc:c8:a5:a4:60:f6:3d:95:ce:77:25:0a:
87:50:bb:17:97:5b:7f:66:fe:e4:cc:d9:54:8b:15:b1:87:e8:
22:b7:9c:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fM8vt+Ro1G8mGyGTRDvKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYjEyY2U2YTkxMDMwZTI3ZDVhYmFkMTQ2ZGYyN2JjMjg4
MDY1MmIwHhcNMjUxMDE5MDgwMTI0WhcNMjUxMDIwMDgwMTI0WjAzMTEwLwYDVQQD
EyhiZTEzOGUxYjNkYjNmMzkwODQ5ODE1YzJiYjI0YmQ5NzE0MzkzYWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2pZcWB0R3+gH4TXnNqocXZGpf7z
MTfNOJqsZxAEF989KpbSxJNM0NiuSQsq3ryKmCCqnunGSOu1LXUlqwPNxw6nz1sA
xbpzJTaMS7iFAfn5U30a5eGZCmfPv0fWpr2EdfQ21IClc6txT+Oi2zO2Eqm0JIPp
OTy5KfMdYBVydiOORiGmObEkkXfPoEpAlsOQc74aY2AkVHJ/1VlPXAmg8CI2DAGW
h2GegNX9aYZJRVQMSgMYbfoj40MnvOagwV1fIvBjV4em6pgfsDCpx2SGgs9WZS87
+s6970dYYlLjU6Lvg/udIR6XR+cUjlPc8FsBrAdbRzl9hmeRYT5NlwJW2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4Tjhs9s/OQhJgVwrskvZcUOTqxMB8GA1UdIwQY
MBaAFL6xLOapEDDifVq60UbfJ7wogGUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMt
YTdhZGU0MzRkNDUxLzEvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMtYTdhZGU0MzRkNDUx
LzEvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApXFo4X0v
WmUR68kx0+/fKz6M8GwPg00RO6hyGEwJrJm6ecEJWqw6AVpE2NcqfniOZC7F/JTg
sBDMXrjSC6M22xHlyCBxu2tf7HKWCcLYw+pJHAiHIGcExHk4puI/iqTVJlLoX33Q
r7ZEAWsAGOlRJEXUyJhW3jJyX9ilpL44qFF9G6F8gq4pgo97dr+L3CzqFnTIaCSR
YWwKJChwUTqtUQ8KXSCoo5ws9gN9R5ABpl/YpPvxpxJkfvQsG8KSReoBmMsR6dNQ
anNhulUasNMXMsV42eVSgBXnVfAWu8HPzMilpGD2PZXOdyUKh1C7F5dbf2b+5MzZ
VIsVsYfoIrecyQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:17:54 2025 by rpki-client