Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
File: vkjMNUiL2ebzErIPx2oQJy8M3to.mft (raw, json)
Hash identifier: RBOpNC7yaQnVs1w6ZcPUtpObGlg0amIc3AVNP1h2hyQ=
Subject key identifier: 4C:A5:31:5E:17:47:DF:52:49:C1:E7:54:37:A5:4C:6A:4F:DA:D2:8B
Authority key identifier: BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA
Certificate issuer: /CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda
Certificate serial: 0199FC21929A37A6A2BA2CD79B10D59CAC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 11:01:22 +0000
Manifest this update: Sun 19 Oct 2025 11:01:22 +0000
Manifest next update: Mon 20 Oct 2025 11:01:22 +0000
Files and hashes: 1: YmYarA5XO8juvrriR0BtAqIdcCU.roa (hash: J8e/3PBcMoffAup3qudGNq5pMDjkvtJSIDtohCQMO8M=)
2: vkjMNUiL2ebzErIPx2oQJy8M3to.crl (hash: LMcr3njXhBy7oDtGMQ62njgMLiFoePs430zvupMt1w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:92:9a:37:a6:a2:ba:2c:d7:9b:10:d5:9c:ac:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda
Validity
Not Before: Oct 19 11:01:22 2025 GMT
Not After : Oct 20 11:01:22 2025 GMT
Subject: CN=4ca5315e1747df5249c1e75437a54c6a4fdad28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:d9:63:d9:47:2b:82:7f:f7:cf:97:2d:54:
0a:ff:86:94:ff:7c:7a:46:c8:c0:da:4d:c1:50:58:
87:7f:e6:18:00:1d:32:5a:77:1c:c5:79:fd:6b:21:
b9:b4:8f:16:d4:2a:86:4a:34:0a:2c:4f:4d:de:4f:
20:a8:e8:ab:b2:0a:47:71:11:6c:ef:3d:bc:5a:18:
bb:56:e3:3d:73:be:4a:3c:41:be:2a:68:0f:5b:15:
47:79:8b:4c:c1:e5:8c:4d:de:e1:b5:ad:3f:4b:be:
5e:d5:1e:9a:a3:fc:ca:f0:19:39:11:31:ad:d4:e6:
ae:b8:9c:ba:c1:ce:9f:ac:9f:ec:7d:cb:33:cc:0e:
be:c8:55:df:62:3d:55:52:c7:5c:63:a3:ae:d7:80:
39:37:7c:83:5c:e0:4d:71:39:b7:30:a6:0d:b1:a3:
6a:74:81:66:bc:d2:33:a1:fd:e4:3d:c9:eb:55:a3:
59:bd:fb:a7:d7:7b:5a:88:0f:ed:d1:e3:c7:22:13:
bb:b8:af:74:1e:b9:c4:96:ac:14:2c:4c:67:1c:ef:
c2:7e:b9:26:3f:0e:86:97:7f:0e:ce:39:0d:16:0d:
13:1d:07:08:f5:4f:63:8f:a3:18:ab:d9:cd:35:79:
56:4c:12:9c:f5:3b:e3:1a:32:40:75:3d:fd:52:f7:
65:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A5:31:5E:17:47:DF:52:49:C1:E7:54:37:A5:4C:6A:4F:DA:D2:8B
X509v3 Authority Key Identifier:
keyid:BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2f:7b:41:b5:4a:31:34:5e:30:04:4d:78:65:68:6b:bf:2e:
f2:09:1f:52:8b:d5:0c:08:8b:6f:c6:94:28:93:5c:10:d5:18:
04:43:be:09:a2:c1:8a:23:a5:2f:84:7a:8d:e6:71:fb:64:bc:
ec:cb:5f:a1:30:b5:d8:be:04:d5:84:a9:fc:f0:72:03:8b:ed:
e0:5b:fb:d1:60:f8:25:b0:cc:e9:93:e5:37:ff:89:65:e5:84:
ad:fb:91:89:a4:a2:e5:e0:e6:99:13:ff:bb:8f:71:91:da:d3:
8e:65:84:37:f9:06:05:0f:68:f1:5b:0d:ad:14:bb:fd:3c:72:
9b:f2:f5:8a:77:92:54:d2:7f:cd:eb:5b:64:b8:3e:91:43:82:
06:da:2e:c6:32:f9:e2:0b:69:a9:42:cd:d8:cc:f2:07:fb:db:
58:cc:29:77:d2:60:22:79:8d:08:a1:43:8b:1a:78:e2:0b:9f:
75:81:51:9a:b6:19:66:d5:20:c3:7c:65:df:f9:19:2d:7a:cc:
9c:f1:49:a2:bd:2e:c7:c3:7d:f6:32:05:b6:66:aa:51:e4:ed:
6f:14:fc:dc:0d:ad:3f:ec:e5:54:84:83:96:d3:81:a7:4c:07:
e9:40:f3:b3:e6:4c:25:a5:e1:c6:dd:21:ba:3c:48:04:34:74:
eb:d2:69:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IZKaN6aiuizXmxDVnKwUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDhjYzM1NDg4YmQ5ZTZmMzEyYjIwZmM3NmExMDI3MmYw
Y2RlZGEwHhcNMjUxMDE5MTEwMTIyWhcNMjUxMDIwMTEwMTIyWjAzMTEwLwYDVQQD
Eyg0Y2E1MzE1ZTE3NDdkZjUyNDljMWU3NTQzN2E1NGM2YTRmZGFkMjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv03ZY9lHK4J/98+XLVQK/4aU/3x6
RsjA2k3BUFiHf+YYAB0yWnccxXn9ayG5tI8W1CqGSjQKLE9N3k8gqOirsgpHcRFs
7z28Whi7VuM9c75KPEG+KmgPWxVHeYtMweWMTd7hta0/S75e1R6ao/zK8Bk5ETGt
1OauuJy6wc6frJ/sfcszzA6+yFXfYj1VUsdcY6Ou14A5N3yDXOBNcTm3MKYNsaNq
dIFmvNIzof3kPcnrVaNZvfun13taiA/t0ePHIhO7uK90HrnElqwULExnHO/Cfrkm
Pw6Gl38OzjkNFg0THQcI9U9jj6MYq9nNNXlWTBKc9TvjGjJAdT39Uvdl/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEylMV4XR99SScHnVDelTGpP2tKLMB8GA1UdIwQY
MBaAFL5IzDVIi9nm8xKyD8dqECcvDN7aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtqTU5VaUwyZWJ6RXJJUHgyb1FKeThNM3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kMjY5NzEtYjdhOC00ZWRlLThiYjQt
NDliYzQzNjYwYzk3LzEvdmtqTU5VaUwyZWJ6RXJJUHgyb1FKeThNM3RvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9kMjY5NzEtYjdhOC00ZWRlLThiYjQtNDliYzQzNjYwYzk3
LzEvdmtqTU5VaUwyZWJ6RXJJUHgyb1FKeThNM3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUC97QbVK
MTReMARNeGVoa78u8gkfUovVDAiLb8aUKJNcENUYBEO+CaLBiiOlL4R6jeZx+2S8
7MtfoTC12L4E1YSp/PByA4vt4Fv70WD4JbDM6ZPlN/+JZeWErfuRiaSi5eDmmRP/
u49xkdrTjmWEN/kGBQ9o8VsNrRS7/Txym/L1ineSVNJ/zetbZLg+kUOCBtouxjL5
4gtpqULN2MzyB/vbWMwpd9JgInmNCKFDixp44gufdYFRmrYZZtUgw3xl3/kZLXrM
nPFJor0ux8N99jIFtmaqUeTtbxT83A2tP+zlVISDltOBp0wH6UDzs+ZMJaXhxt0h
ujxIBDR069JpaA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:19 2025 by rpki-client