Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
File: vfegoEi2jsz6TUnqtPFtx5LA0xg.mft (raw, json)
Hash identifier: 7vXYilbxEKPZ165XRTn9krSKzvaC2IZCO1RKFLQ2MtM=
Subject key identifier: A9:E8:BB:AC:97:CA:3D:31:53:FC:A5:8A:1B:AC:55:23:EC:71:67:D1
Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Certificate serial: 019A4DE19A4F0BFFC8D16EB6398FC72BE0E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 08:00:21 +0000
Manifest this update: Tue 04 Nov 2025 08:00:21 +0000
Manifest next update: Wed 05 Nov 2025 08:00:21 +0000
Files and hashes: 1: GKC-zruGo7Y0lHBj7AqmYPwzc8c.roa (hash: u2pwVxzKoBKyV0Dimg3sj9jXDAo9fvdhwaO1o32GlnA=)
2: X_m5ZAvxIpZScImZ01eKwHRPNDY.roa (hash: beEA3W7SColLkSlnHacB1waBPlogRmM3jPPLz78ItOg=)
3: v1Kwwfd8ZjjCs2Mu7l5Mtdf-PVI.roa (hash: ulU0aPB2ZxGebVfubT+AGsI+A+WmNT0R9PT7Ovu3cU0=)
4: vfegoEi2jsz6TUnqtPFtx5LA0xg.crl (hash: egHjIcWStOWPdZyuCtY1NlkUIR47toV0XrFWvC1TNqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:9a:4f:0b:ff:c8:d1:6e:b6:39:8f:c7:2b:e0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Validity
Not Before: Nov 4 08:00:21 2025 GMT
Not After : Nov 5 08:00:21 2025 GMT
Subject: CN=a9e8bbac97ca3d3153fca58a1bac5523ec7167d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:de:60:88:8a:26:f9:0d:53:b2:35:e5:10:92:
24:fe:42:67:fe:4e:5f:e4:36:ea:07:7f:c1:35:0b:
e0:2e:7b:03:71:c7:f9:bc:85:ac:7b:7f:60:9d:e8:
ee:5c:f0:c6:42:52:ae:73:9c:8b:3a:32:1c:85:f2:
f7:af:bc:56:2e:3e:14:21:3c:04:42:a4:5b:8b:6d:
05:d6:dc:25:35:37:00:39:3f:b5:48:87:1e:2b:41:
ee:a5:07:98:1a:a5:ef:99:6f:22:20:22:f6:c1:71:
44:2b:f8:d3:f0:2e:e2:ef:5d:f4:37:03:18:1e:30:
34:8d:86:56:af:ff:0d:3b:67:79:4f:2b:68:0b:b7:
61:ff:43:73:76:42:1a:3f:8b:1b:29:fd:41:53:79:
36:48:3b:0f:7e:70:7c:4f:17:75:3f:aa:43:06:4e:
46:28:87:fe:18:77:24:01:e9:c2:40:14:3c:22:f0:
1c:d9:64:0c:20:69:5d:f8:bd:fd:fa:5d:68:ed:ee:
08:8c:ac:c0:db:6e:18:6f:84:10:8d:ee:51:03:e7:
82:dd:f6:33:ab:db:aa:57:0e:e0:d0:3e:2b:00:cc:
71:e9:3b:9a:e1:3a:bb:81:9b:91:46:85:fe:be:4d:
e9:3b:90:90:e0:e4:8d:92:ec:b6:eb:fd:6d:a3:28:
29:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E8:BB:AC:97:CA:3D:31:53:FC:A5:8A:1B:AC:55:23:EC:71:67:D1
X509v3 Authority Key Identifier:
keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:47:ca:52:64:c9:02:2d:04:5c:36:be:0c:e0:04:1d:75:f2:
46:ee:5b:f6:d8:2b:d6:fb:ab:c9:a8:61:59:bb:e1:82:a9:31:
00:2d:ff:27:89:a7:bd:d5:d7:8f:ae:d4:fe:a5:09:eb:4e:84:
31:19:63:3e:d5:ef:9e:fd:33:de:f2:b6:94:ed:94:7a:fe:79:
b2:b7:0f:78:f8:ba:0d:95:90:64:b1:81:71:a9:d2:80:71:86:
2a:cd:d9:7e:85:0b:14:bf:14:8d:f5:7d:56:28:7e:20:f9:6d:
c5:03:cc:ea:bd:43:a7:b4:d9:6e:65:b7:bb:80:cb:6a:82:c1:
5a:37:ad:9c:39:8e:ce:09:d8:25:dd:7d:ce:ee:16:ad:82:e9:
82:ff:f1:7c:f4:5f:ce:d5:ed:39:e3:25:a2:ac:9d:e1:db:c9:
94:0a:09:61:bf:34:90:08:21:7c:6b:d5:e4:9a:95:ac:7d:8e:
ec:e2:cd:01:a5:d4:4b:1c:72:dc:ab:e2:7d:e9:c9:ab:cd:cf:
54:45:2a:1d:32:d5:54:3d:83:8d:4b:af:0d:c3:7d:b3:fa:31:
a1:1d:a4:da:57:74:d0:e1:4b:38:cf:1d:82:ea:c2:1e:fa:bc:
d6:bd:d9:68:08:2a:79:e6:6c:56:dc:29:67:9b:ae:fb:a3:29:
e8:0b:9e:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4ZpPC//I0W62OY/HK+DlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZjdhMGEwNDhiNjhlY2NmYTRkNDllYWI0ZjE2ZGM3OTJj
MGQzMTgwHhcNMjUxMTA0MDgwMDIxWhcNMjUxMTA1MDgwMDIxWjAzMTEwLwYDVQQD
EyhhOWU4YmJhYzk3Y2EzZDMxNTNmY2E1OGExYmFjNTUyM2VjNzE2N2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA095giIom+Q1TsjXlEJIk/kJn/k5f
5DbqB3/BNQvgLnsDccf5vIWse39gnejuXPDGQlKuc5yLOjIchfL3r7xWLj4UITwE
QqRbi20F1twlNTcAOT+1SIceK0HupQeYGqXvmW8iICL2wXFEK/jT8C7i7130NwMY
HjA0jYZWr/8NO2d5TytoC7dh/0NzdkIaP4sbKf1BU3k2SDsPfnB8Txd1P6pDBk5G
KIf+GHckAenCQBQ8IvAc2WQMIGld+L39+l1o7e4IjKzA224Yb4QQje5RA+eC3fYz
q9uqVw7g0D4rAMxx6Tua4Tq7gZuRRoX+vk3pO5CQ4OSNkuy26/1toygp8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnou6yXyj0xU/ylihusVSPscWfRMB8GA1UdIwQY
MBaAFL33oKBIto7M+k1J6rTxbceSwNMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lMTZjYjYtYjQ1NC00OGQ2LWJkYzgt
MzUxNjE5MWE5ZDY4LzEvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9lMTZjYjYtYjQ1NC00OGQ2LWJkYzgtMzUxNjE5MWE5ZDY4
LzEvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkfKUmTJ
Ai0EXDa+DOAEHXXyRu5b9tgr1vuryahhWbvhgqkxAC3/J4mnvdXXj67U/qUJ606E
MRljPtXvnv0z3vK2lO2Uev55srcPePi6DZWQZLGBcanSgHGGKs3ZfoULFL8UjfV9
Vih+IPltxQPM6r1Dp7TZbmW3u4DLaoLBWjetnDmOzgnYJd19zu4WrYLpgv/xfPRf
ztXtOeMloqyd4dvJlAoJYb80kAghfGvV5JqVrH2O7OLNAaXUSxxy3KvifenJq83P
VEUqHTLVVD2DjUuvDcN9s/oxoR2k2ld00OFLOM8dgurCHvq81r3ZaAgqeeZsVtwp
Z5uu+6Mp6AueVA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:33 2025 by rpki-client