Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
File: vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft (raw, json)
Hash identifier: CsPgCODuLBZGobcVgUQp7p1lbbCesFFpdbrs4RSnCHM=
Subject key identifier: 60:17:0E:A2:90:70:49:B4:79:29:05:A1:5B:26:78:F9:87:1E:B9:2F
Authority key identifier: BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
Certificate issuer: /CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Certificate serial: 019A4D7472A3E573A7C523E4FDAB5B89983B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 06:01:08 +0000
Manifest this update: Tue 04 Nov 2025 06:01:08 +0000
Manifest next update: Wed 05 Nov 2025 06:01:08 +0000
Files and hashes: 1: PtAXY24lYtkFRHade4pTjXormLM.roa (hash: 1elZ7b8fLDvNPO81SeVzVwIAYPfLoIwWb4acP64QkQU=)
2: vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl (hash: Joo1WFWzp2jDKrX0xLO1KGgD8phSqjPORmtNjEdj7kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:72:a3:e5:73:a7:c5:23:e4:fd:ab:5b:89:98:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Validity
Not Before: Nov 4 06:01:08 2025 GMT
Not After : Nov 5 06:01:08 2025 GMT
Subject: CN=60170ea2907049b4792905a15b2678f9871eb92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:37:4a:c2:90:ac:e8:1f:a7:99:44:46:24:51:
9a:5c:cf:2a:73:9a:c7:96:24:46:dd:c4:c7:2e:7e:
3f:2f:cb:c6:84:49:86:54:90:c5:7c:17:13:bf:9b:
e3:fd:0b:d1:f9:84:84:9e:5f:65:f6:53:d8:20:a0:
e6:ab:87:43:5b:97:19:8e:27:57:15:69:46:c7:cd:
80:b6:15:1a:9e:af:5d:44:c6:99:e7:6a:6e:78:c2:
89:b0:a8:04:b9:ac:5e:fa:f5:65:64:36:e3:8f:dd:
12:36:5c:f8:ed:59:0e:86:58:55:81:17:6c:d2:9e:
da:8f:4b:64:7c:f9:05:32:10:79:dc:b8:7e:94:fa:
2f:18:74:c7:57:55:76:50:11:0c:af:7b:9d:6b:99:
da:21:40:7c:61:7b:67:3d:13:47:1e:14:69:a9:43:
a0:a1:a3:a3:b5:e9:38:ce:33:17:97:9d:97:1d:12:
64:1d:46:22:87:e9:46:cb:a2:e4:8e:9d:e5:23:d8:
0b:a1:b9:f7:20:fb:e1:7a:c7:6e:b6:d3:11:96:d2:
b5:3e:a6:3a:96:35:77:b1:43:d6:c0:c4:4f:27:e3:
92:16:23:6e:63:31:7b:b7:31:9c:4e:87:07:ca:c2:
38:24:b6:d5:8a:39:41:bf:d0:d2:22:e0:a0:a5:bd:
1c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:17:0E:A2:90:70:49:B4:79:29:05:A1:5B:26:78:F9:87:1E:B9:2F
X509v3 Authority Key Identifier:
keyid:BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ee:0a:44:2a:d5:98:f5:0f:df:b3:e4:68:77:9f:0a:fc:7a:
85:64:8e:2f:10:69:82:83:ed:da:41:fa:71:c1:6d:dd:da:29:
ae:41:f9:97:fc:5d:9c:c3:ea:95:dc:7e:12:44:c7:9a:f3:61:
97:be:b5:d4:10:44:40:70:7e:b1:15:1f:5a:81:22:11:50:1f:
68:3a:b7:48:95:9f:df:59:6e:57:96:67:fd:6e:85:a1:cd:8b:
ab:b1:0e:03:d9:84:f3:e9:99:c5:d3:1d:41:20:90:6a:e4:f3:
fd:d1:35:25:3e:89:04:06:43:58:2d:2f:82:75:c6:0b:57:4a:
56:05:a6:68:84:66:5b:1c:d7:33:01:ca:ae:29:b0:82:0a:65:
a6:8d:6b:a6:32:ef:31:65:15:4c:7f:4c:1c:bc:fb:cd:c3:26:
97:ec:93:b1:3a:76:78:3b:c3:2a:69:74:0c:51:d8:a7:af:8c:
04:26:8a:f3:32:fc:3c:24:b1:63:1d:56:ae:70:73:70:fd:43:
80:bd:b0:49:68:e7:fc:89:26:06:42:c3:0f:9b:a0:86:2c:64:
e3:5e:86:3c:98:d4:06:68:ee:9d:87:44:a3:9b:01:bc:c3:aa:
67:b1:07:f6:d7:82:56:3f:3a:e9:4d:a6:80:a3:f7:be:e3:c8:
ab:70:ca:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdHKj5XOnxSPk/atbiZg7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWQ3YzQyZTkxNzg0NGNiYzJkZTRhOTFjNmMxNzAxZGU1
OTcxYjUwHhcNMjUxMTA0MDYwMTA4WhcNMjUxMTA1MDYwMTA4WjAzMTEwLwYDVQQD
Eyg2MDE3MGVhMjkwNzA0OWI0NzkyOTA1YTE1YjI2NzhmOTg3MWViOTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzdKwpCs6B+nmURGJFGaXM8qc5rH
liRG3cTHLn4/L8vGhEmGVJDFfBcTv5vj/QvR+YSEnl9l9lPYIKDmq4dDW5cZjidX
FWlGx82AthUanq9dRMaZ52pueMKJsKgEuaxe+vVlZDbjj90SNlz47VkOhlhVgRds
0p7aj0tkfPkFMhB53Lh+lPovGHTHV1V2UBEMr3uda5naIUB8YXtnPRNHHhRpqUOg
oaOjtek4zjMXl52XHRJkHUYih+lGy6Lkjp3lI9gLobn3IPvhesduttMRltK1PqY6
ljV3sUPWwMRPJ+OSFiNuYzF7tzGcTocHysI4JLbVijlBv9DSIuCgpb0cywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAXDqKQcEm0eSkFoVsmePmHHrkvMB8GA1UdIwQY
MBaAFLydfELpF4RMvC3kqRxsFwHeWXG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yOWFlYTItYjZjOC00YWY5LWFkODQt
MDNmYjU0MTg3ZWUyLzEvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yOWFlYTItYjZjOC00YWY5LWFkODQtMDNmYjU0MTg3ZWUy
LzEvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+4KRCrV
mPUP37PkaHefCvx6hWSOLxBpgoPt2kH6ccFt3doprkH5l/xdnMPqldx+EkTHmvNh
l7611BBEQHB+sRUfWoEiEVAfaDq3SJWf31luV5Zn/W6Foc2Lq7EOA9mE8+mZxdMd
QSCQauTz/dE1JT6JBAZDWC0vgnXGC1dKVgWmaIRmWxzXMwHKrimwggplpo1rpjLv
MWUVTH9MHLz7zcMml+yTsTp2eDvDKml0DFHYp6+MBCaK8zL8PCSxYx1WrnBzcP1D
gL2wSWjn/IkmBkLDD5ughixk416GPJjUBmjunYdEo5sBvMOqZ7EH9teCVj866U2m
gKP3vuPIq3DKhA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:48 2025 by rpki-client