Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
File: vSX3G6QTFIO7m4I92IZR06_UTns.mft (raw, json)
Hash identifier: I7VWP59l1D+I0H89GXet7oCMxiYqj4jj/Bd2z2jSY7k=
Subject key identifier: A9:E2:32:9E:B8:0F:64:38:A4:A7:8B:94:B0:D5:F3:68:0C:F6:E4:49
Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
Certificate issuer: /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Certificate serial: 019A4DE1F3BDC8D7903C1BA9D2B96ACEB3CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
Manifest number: 13DE
Signing time: Tue 04 Nov 2025 08:00:44 +0000
Manifest this update: Tue 04 Nov 2025 08:00:44 +0000
Manifest next update: Wed 05 Nov 2025 08:00:44 +0000
Files and hashes: 1: VTzQEre1LOW5un0PlYn-CvmDAKI.roa (hash: fUzpWZIo72ujZLDiYOULGotM+6e+u6e7TR9QhDLmQyE=)
2: uOlfWw_ot1GNz-xDs0HfE8f0GXg.roa (hash: p6HLTz97eUfObx31ZQ7fD3+tg4SDQ5VAA/i07H3/8o4=)
3: vSX3G6QTFIO7m4I92IZR06_UTns.crl (hash: FxAVbO6vRnKKxBWDjHYp1Rq3PaP1KaKMow3U1jslAn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f3:bd:c8:d7:90:3c:1b:a9:d2:b9:6a:ce:b3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Validity
Not Before: Nov 4 08:00:44 2025 GMT
Not After : Nov 5 08:00:44 2025 GMT
Subject: CN=a9e2329eb80f6438a4a78b94b0d5f3680cf6e449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:34:d9:c9:fa:67:d8:af:45:be:2a:c2:e5:a2:
d5:dd:af:7d:7b:13:21:ae:98:18:92:d0:b4:0c:be:
64:68:3b:fc:c3:b2:a7:9a:cd:0c:3f:cc:d5:22:2b:
16:e2:93:e4:24:7a:80:0a:30:96:08:07:91:29:fc:
53:c3:92:92:e3:77:fa:09:87:49:d2:c0:fe:a4:53:
cc:43:78:93:ea:4c:94:d2:2e:e3:d3:a0:ff:62:bb:
61:81:87:2e:6d:aa:47:41:64:bb:0f:fe:27:33:fe:
0b:bd:fb:7d:26:f8:f8:61:9a:1e:ca:57:f2:7c:0f:
84:e5:2e:63:7f:d4:b5:31:56:53:33:90:f3:3d:cb:
e3:d7:2c:0a:51:2e:4d:3a:3d:50:d2:aa:a2:ad:38:
d1:54:4a:45:8b:02:b0:98:ef:94:dd:80:b1:85:77:
9e:78:a8:b5:dd:89:c2:36:7d:1d:5c:27:de:23:a3:
c1:42:d1:de:d5:45:2a:f9:d8:a5:91:bf:8e:77:d5:
db:ee:90:72:ac:09:f1:8c:be:59:1f:d1:a0:35:4a:
bc:eb:89:fe:39:78:ce:da:4a:e5:54:56:43:1d:0a:
5c:1f:84:bd:3c:37:17:60:fe:85:6a:4e:72:b7:ed:
de:6b:e3:4c:d5:8f:3f:9a:52:ec:80:6a:1a:5f:6d:
a3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E2:32:9E:B8:0F:64:38:A4:A7:8B:94:B0:D5:F3:68:0C:F6:E4:49
X509v3 Authority Key Identifier:
keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b3:11:e1:61:c5:f4:bc:ac:45:cf:25:8a:b9:e3:b1:38:6a:
11:21:db:92:ca:d2:ec:12:b5:0f:82:5e:80:4a:58:74:48:a4:
9c:71:44:fc:c5:56:d1:f9:7a:d8:f9:4d:e7:2c:c3:01:1a:48:
14:ca:0a:d0:f7:81:9f:5b:91:9a:63:4e:ae:a2:c7:5b:e0:05:
65:43:a3:87:1d:5e:80:28:bc:82:a5:5e:32:82:bb:e3:5c:c0:
fc:c3:d7:b9:c0:d8:29:cb:6b:51:10:82:54:0a:35:56:cb:18:
4f:2d:2d:f3:cc:b6:0b:38:d2:00:a9:04:68:1a:65:0f:ea:32:
55:a6:c3:3e:fe:58:7e:20:f8:5f:c6:ed:82:ca:e3:0b:62:88:
ea:0d:8c:d6:21:10:60:6e:1e:45:5d:f2:ca:e2:0d:f5:78:36:
7c:f5:14:c5:5a:ab:3e:24:a6:b5:33:46:7d:9e:f4:05:2c:4f:
20:a9:e9:bf:4d:1c:20:c7:ed:39:94:68:f3:35:cf:b2:9a:1e:
fb:26:d7:a3:23:20:6e:2c:aa:a3:22:d6:a0:2a:ec:1c:52:64:
03:b9:67:9f:db:f3:98:ad:a4:b0:ad:2f:09:46:59:9e:df:2d:
a5:3e:1c:6b:8c:33:1f:44:9b:9c:af:cb:16:6e:54:6e:26:51:
04:54:6f:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4fO9yNeQPBup0rlqzrPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMjVmNzFiYTQxMzE0ODNiYjliODIzZGQ4ODY1MWQzYWZk
NDRlN2IwHhcNMjUxMTA0MDgwMDQ0WhcNMjUxMTA1MDgwMDQ0WjAzMTEwLwYDVQQD
EyhhOWUyMzI5ZWI4MGY2NDM4YTRhNzhiOTRiMGQ1ZjM2ODBjZjZlNDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljTZyfpn2K9FvirC5aLV3a99exMh
rpgYktC0DL5kaDv8w7Knms0MP8zVIisW4pPkJHqACjCWCAeRKfxTw5KS43f6CYdJ
0sD+pFPMQ3iT6kyU0i7j06D/YrthgYcubapHQWS7D/4nM/4Lvft9Jvj4YZoeylfy
fA+E5S5jf9S1MVZTM5DzPcvj1ywKUS5NOj1Q0qqirTjRVEpFiwKwmO+U3YCxhXee
eKi13YnCNn0dXCfeI6PBQtHe1UUq+dilkb+Od9Xb7pByrAnxjL5ZH9GgNUq864n+
OXjO2krlVFZDHQpcH4S9PDcXYP6Fak5yt+3ea+NM1Y8/mlLsgGoaX22jEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKniMp64D2Q4pKeLlLDV82gM9uRJMB8GA1UdIwQY
MBaAFL0l9xukExSDu5uCPdiGUdOv1E57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlNYM0c2UVRGSU83bTRJOTJJWlIwNl9VVG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yMDAzNjYtZDg4MS00MDMwLTgyODAt
YjVlMGU0YzMzMTVjLzEvdlNYM0c2UVRGSU83bTRJOTJJWlIwNl9VVG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yMDAzNjYtZDg4MS00MDMwLTgyODAtYjVlMGU0YzMzMTVj
LzEvdlNYM0c2UVRGSU83bTRJOTJJWlIwNl9VVG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbMR4WHF
9LysRc8lirnjsThqESHbksrS7BK1D4JegEpYdEiknHFE/MVW0fl62PlN5yzDARpI
FMoK0PeBn1uRmmNOrqLHW+AFZUOjhx1egCi8gqVeMoK741zA/MPXucDYKctrURCC
VAo1VssYTy0t88y2CzjSAKkEaBplD+oyVabDPv5YfiD4X8btgsrjC2KI6g2M1iEQ
YG4eRV3yyuIN9Xg2fPUUxVqrPiSmtTNGfZ70BSxPIKnpv00cIMftOZRo8zXPspoe
+ybXoyMgbiyqoyLWoCrsHFJkA7lnn9vzmK2ksK0vCUZZnt8tpT4ca4wzH0SbnK/L
Fm5UbiZRBFRvqw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:45 2025 by rpki-client