Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
File: vZctRCdupBAu9q7TDyrljpmz51E.mft (raw, json)
Hash identifier: tyUeYTy8Z158dLehHIGZMhGy3XTPYCxdhSq8hGLzRxo=
Subject key identifier: D5:2D:A6:44:AC:E4:11:A2:B9:C3:82:14:68:D1:57:2A:3C:9B:1A:BD
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Certificate issuer: /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial: 019A51F5590E24182C8BFAC989719201BA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 03:00:24 +0000
Manifest this update: Wed 05 Nov 2025 03:00:24 +0000
Manifest next update: Thu 06 Nov 2025 03:00:24 +0000
Files and hashes: 1: vZctRCdupBAu9q7TDyrljpmz51E.crl (hash: FJ8lSE2LKyIP0kAQ7g0vHKg1F8sn1Mn+WhsNxyqfzWA=)
2: znul8D-ksNRhN2Cclb1d9oAN3m4.roa (hash: e1Z/F5VmaFQnbIQzB91uNx60SZ0/+TW0LayKFelguZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:59:0e:24:18:2c:8b:fa:c9:89:71:92:01:ba:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Validity
Not Before: Nov 5 03:00:24 2025 GMT
Not After : Nov 6 03:00:24 2025 GMT
Subject: CN=d52da644ace411a2b9c3821468d1572a3c9b1abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b7:23:77:53:51:f1:2f:ac:15:be:4a:1c:00:
30:32:3e:e5:46:8e:23:41:b1:c9:07:f8:6a:c8:36:
e9:2d:2d:1f:1f:ba:06:8a:2f:fd:fa:82:b0:64:ef:
21:b6:bb:60:ee:c1:d1:f1:b9:38:8a:5d:a6:71:ac:
ea:f0:26:f0:dc:84:f9:59:7f:7c:a0:a0:d8:31:42:
7f:43:9b:a7:09:4b:61:f8:93:99:35:ca:04:a8:1e:
64:a2:81:06:2d:15:6b:bf:2f:ef:62:cc:cd:9e:b6:
42:96:c6:f5:b8:18:0e:f1:49:e2:af:77:5c:c6:34:
67:a4:b8:a3:33:d3:67:80:2d:24:af:8e:bf:bd:04:
8c:ab:59:52:a8:f7:ab:35:b4:b0:bc:9c:c5:81:d3:
dd:b2:6b:07:c7:f3:de:b1:c9:c2:6e:92:88:bf:f1:
41:7b:80:d3:14:ef:e8:fd:ab:4f:2c:63:03:01:e6:
2e:ec:76:4f:56:da:d7:44:95:35:b8:34:f9:c7:ca:
77:57:28:02:93:76:45:95:6c:f1:0a:d0:5a:61:26:
71:35:a0:ec:f2:11:45:6a:15:3a:51:a7:ff:1e:8c:
1d:07:31:ee:c8:f0:c3:cf:67:b9:93:13:dd:43:f3:
2a:f8:0d:a2:4c:c1:7d:7c:db:74:b2:d2:ac:0d:1d:
db:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2D:A6:44:AC:E4:11:A2:B9:C3:82:14:68:D1:57:2A:3C:9B:1A:BD
X509v3 Authority Key Identifier:
keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:01:f6:a2:5f:e8:d9:b6:3c:72:4d:f8:d8:7c:d6:c5:bc:87:
8d:f2:a3:5c:73:2f:96:44:cf:61:45:9d:aa:02:59:0f:bb:b9:
b3:68:58:96:64:aa:12:85:d6:e7:0a:35:82:54:fd:03:d5:17:
0a:17:13:24:68:7f:55:4a:f0:37:59:16:b5:94:d5:bb:e7:a8:
76:e2:5a:1a:a4:24:46:d0:e4:6d:35:8f:a1:e3:0a:89:7f:84:
9a:78:ed:3a:f3:1a:93:27:7b:42:57:9a:35:74:eb:dd:1d:3f:
00:8e:98:04:dd:4e:94:f4:3b:d2:7d:70:80:88:33:bc:0f:20:
2b:e8:9a:6a:96:7f:9a:41:1c:30:11:40:20:1e:4a:ad:a5:87:
6c:3e:b8:84:4f:ba:b1:f3:b4:21:35:b2:62:57:cd:ec:d8:37:
74:e4:da:d2:6c:9e:ed:e6:b1:f8:11:83:af:67:13:5b:0c:7c:
29:39:f7:ea:75:81:e7:f1:a0:6a:e5:08:be:1f:a9:d7:5a:41:
9f:27:29:94:e0:07:25:d3:83:69:10:a9:71:0d:68:43:3f:13:
aa:f8:4a:90:1f:ce:61:eb:f4:3b:c8:56:af:c7:cc:13:76:1e:
c8:ad:ef:36:90:ab:d6:76:ba:df:10:2e:1c:a1:f7:1c:b5:c4:
48:ad:ff:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9VkOJBgsi/rJiXGSAbqRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOTcyZDQ0Mjc2ZWE0MTAyZWY2YWVkMzBmMmFlNThlOTli
M2U3NTEwHhcNMjUxMTA1MDMwMDI0WhcNMjUxMTA2MDMwMDI0WjAzMTEwLwYDVQQD
EyhkNTJkYTY0NGFjZTQxMWEyYjljMzgyMTQ2OGQxNTcyYTNjOWIxYWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Lcjd1NR8S+sFb5KHAAwMj7lRo4j
QbHJB/hqyDbpLS0fH7oGii/9+oKwZO8htrtg7sHR8bk4il2mcazq8Cbw3IT5WX98
oKDYMUJ/Q5unCUth+JOZNcoEqB5kooEGLRVrvy/vYszNnrZClsb1uBgO8Unir3dc
xjRnpLijM9NngC0kr46/vQSMq1lSqPerNbSwvJzFgdPdsmsHx/PescnCbpKIv/FB
e4DTFO/o/atPLGMDAeYu7HZPVtrXRJU1uDT5x8p3VygCk3ZFlWzxCtBaYSZxNaDs
8hFFahU6Uaf/HowdBzHuyPDDz2e5kxPdQ/Mq+A2iTMF9fNt0stKsDR3bCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUtpkSs5BGiucOCFGjRVyo8mxq9MB8GA1UdIwQY
MBaAFL2XLUQnbqQQLvau0w8q5Y6Zs+dRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlpjdFJDZHVwQkF1OXE3VER5cmxqcG16NTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80MTlkMWItNThiMC00NDgzLTkyZDIt
ODZjMWVlMmE5ZWJhLzEvdlpjdFJDZHVwQkF1OXE3VER5cmxqcG16NTFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80MTlkMWItNThiMC00NDgzLTkyZDItODZjMWVlMmE5ZWJh
LzEvdlpjdFJDZHVwQkF1OXE3VER5cmxqcG16NTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgH2ol/o
2bY8ck342HzWxbyHjfKjXHMvlkTPYUWdqgJZD7u5s2hYlmSqEoXW5wo1glT9A9UX
ChcTJGh/VUrwN1kWtZTVu+eoduJaGqQkRtDkbTWPoeMKiX+EmnjtOvMakyd7Qlea
NXTr3R0/AI6YBN1OlPQ70n1wgIgzvA8gK+iaapZ/mkEcMBFAIB5KraWHbD64hE+6
sfO0ITWyYlfN7Ng3dOTa0mye7eax+BGDr2cTWwx8KTn36nWB5/GgauUIvh+p11pB
nycplOAHJdODaRCpcQ1oQz8TqvhKkB/OYev0O8hWr8fME3YeyK3vNpCr1na63xAu
HKH3HLXESK3/2w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:46:41 2025 by rpki-client