Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
File: vGY2Z5cyOLGE2e79NrvzgQukttk.mft (raw, json)
Hash identifier: TbZ3qH58V4FB6hu7ngL57PvgwUSSSqlqb3r34otGL48=
Subject key identifier: 9F:CD:2B:2A:71:4E:DF:01:22:F3:B7:4C:75:FE:BF:71:EF:76:BE:2E
Authority key identifier: BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
Certificate issuer: /CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
Certificate serial: 0199FC8F8516D38C0D3CDB7B14344A2D3322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
Manifest number: 11EA
Signing time: Sun 19 Oct 2025 13:01:28 +0000
Manifest this update: Sun 19 Oct 2025 13:01:28 +0000
Manifest next update: Mon 20 Oct 2025 13:01:28 +0000
Files and hashes: 1: ig3YUnf06jRQJy2W3dYiO6rsejs.roa (hash: iYGiR2ToZxGUekv5mS+Li0t2IVpNRi9TVFKQBK+2Rl8=)
2: vGY2Z5cyOLGE2e79NrvzgQukttk.crl (hash: AL1BVjOTXCSXTtfNqkRNT4qS/Hc/uYgKtENNCz+CrOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:85:16:d3:8c:0d:3c:db:7b:14:34:4a:2d:33:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
Validity
Not Before: Oct 19 13:01:28 2025 GMT
Not After : Oct 20 13:01:28 2025 GMT
Subject: CN=9fcd2b2a714edf0122f3b74c75febf71ef76be2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:15:e6:7a:48:ac:b7:62:b2:03:3d:08:79:60:
77:a9:d3:7f:97:a2:cf:8f:85:a4:22:c3:42:48:16:
e3:22:f2:17:75:b1:a7:bb:eb:11:c4:f6:07:51:af:
ef:61:de:11:ad:6b:8d:ae:fd:2a:c8:52:be:0f:36:
16:8d:b3:e9:e0:85:9b:07:f7:1c:62:dd:ce:90:66:
07:ff:86:91:8b:c1:8e:92:7d:a0:3a:87:92:35:fd:
be:ad:0e:03:0b:bd:ed:ef:1f:24:47:56:fa:fe:ff:
f4:98:1a:9d:1a:08:bc:80:27:b3:c5:5d:42:31:b4:
db:2e:a7:6d:8f:86:e2:a6:9e:15:27:76:a6:06:74:
0d:ab:8e:81:31:fa:4d:a2:dc:82:ec:84:c5:17:7b:
7a:40:2b:67:a0:d0:25:10:1a:ca:38:d8:c4:9b:94:
cf:b7:14:1f:7a:c6:b8:5e:21:87:b1:ef:5e:0d:da:
ff:20:83:68:79:c0:70:84:7a:59:d1:e5:ee:15:ef:
f8:c5:ed:98:f5:3f:94:17:04:56:eb:b9:ed:3b:ff:
d0:c3:a6:09:50:23:ff:8b:18:e2:43:d3:37:ed:aa:
89:e3:dd:93:11:85:9a:8c:bd:42:da:05:0d:f6:9b:
5e:67:63:39:ca:20:26:d8:13:f9:78:76:9b:ff:12:
8a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CD:2B:2A:71:4E:DF:01:22:F3:B7:4C:75:FE:BF:71:EF:76:BE:2E
X509v3 Authority Key Identifier:
keyid:BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:db:0e:a1:77:7c:d5:94:2e:8d:eb:5f:18:52:e1:63:dc:0c:
c7:8a:70:2f:7e:69:75:c0:b1:e7:34:24:98:0c:06:5d:96:17:
11:dd:ff:a2:76:f9:ef:2e:b9:60:82:f9:2c:5f:68:83:2b:59:
b2:b4:92:52:6b:02:c6:2c:af:3d:d7:01:3f:17:75:ca:78:2a:
25:01:1b:ff:b9:f9:7a:d5:e8:40:e2:37:e8:d7:d0:9e:3f:35:
ef:07:6f:2a:d7:a8:64:fc:60:aa:d5:a1:1b:0c:b8:23:ac:96:
87:2f:88:d5:e2:c7:95:e7:83:e7:05:bf:e3:84:1a:ee:9b:9a:
f4:8a:11:c2:01:66:e9:b1:da:0f:16:a6:fc:91:59:52:54:a4:
6f:e1:b1:69:96:ce:79:6e:75:1d:62:8f:25:00:c5:ed:27:6f:
c8:0f:b7:e3:89:f0:56:92:1f:d6:12:e4:ae:e7:f8:66:61:a8:
2d:22:ed:79:d4:9e:63:69:5d:bf:32:3d:83:b2:bc:83:0b:f0:
c3:77:cf:0d:03:76:d7:fa:d5:3a:4b:2e:ed:d2:8e:8b:0a:93:
ac:14:53:47:64:53:12:1c:16:be:47:93:e8:f0:b5:84:19:cf:
fb:4f:1e:e6:18:ef:2e:e8:07:f3:ef:f6:1a:9b:77:38:6a:0b:
f0:e7:9a:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j4UW04wNPNt7FDRKLTMiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNjYzNjY3OTczMjM4YjE4NGQ5ZWVmZDM2YmJmMzgxMGJh
NGI2ZDkwHhcNMjUxMDE5MTMwMTI4WhcNMjUxMDIwMTMwMTI4WjAzMTEwLwYDVQQD
Eyg5ZmNkMmIyYTcxNGVkZjAxMjJmM2I3NGM3NWZlYmY3MWVmNzZiZTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhXmekist2KyAz0IeWB3qdN/l6LP
j4WkIsNCSBbjIvIXdbGnu+sRxPYHUa/vYd4RrWuNrv0qyFK+DzYWjbPp4IWbB/cc
Yt3OkGYH/4aRi8GOkn2gOoeSNf2+rQ4DC73t7x8kR1b6/v/0mBqdGgi8gCezxV1C
MbTbLqdtj4bipp4VJ3amBnQNq46BMfpNotyC7ITFF3t6QCtnoNAlEBrKONjEm5TP
txQfesa4XiGHse9eDdr/IINoecBwhHpZ0eXuFe/4xe2Y9T+UFwRW67ntO//Qw6YJ
UCP/ixjiQ9M37aqJ492TEYWajL1C2gUN9pteZ2M5yiAm2BP5eHab/xKKzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/NKypxTt8BIvO3THX+v3Hvdr4uMB8GA1UdIwQY
MBaAFLxmNmeXMjixhNnu/Ta784ELpLbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkdZMlo1Y3lPTEdFMmU3OU5ydnpnUXVrdHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wYjk1MWEtOGU2Yy00NDQ1LTljMmQt
OWYwMGM3MjYyMGY2LzEvdkdZMlo1Y3lPTEdFMmU3OU5ydnpnUXVrdHRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8wYjk1MWEtOGU2Yy00NDQ1LTljMmQtOWYwMGM3MjYyMGY2
LzEvdkdZMlo1Y3lPTEdFMmU3OU5ydnpnUXVrdHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNsOoXd8
1ZQujetfGFLhY9wMx4pwL35pdcCx5zQkmAwGXZYXEd3/onb57y65YIL5LF9ogytZ
srSSUmsCxiyvPdcBPxd1yngqJQEb/7n5etXoQOI36NfQnj817wdvKteoZPxgqtWh
Gwy4I6yWhy+I1eLHleeD5wW/44Qa7pua9IoRwgFm6bHaDxam/JFZUlSkb+GxaZbO
eW51HWKPJQDF7SdvyA+344nwVpIf1hLkruf4ZmGoLSLtedSeY2ldvzI9g7K8gwvw
w3fPDQN21/rVOksu7dKOiwqTrBRTR2RTEhwWvkeT6PC1hBnP+08e5hjvLugH8+/2
Gpt3OGoL8OeaAA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:28:26 2025 by rpki-client