Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
File: vX2BeM7FzTdlSKkEkRf0acCnQxw.mft (raw, json)
Hash identifier: EyqQsR3LtnMwGlLWB3SPwmRNa+7poGgc9oow1ClkbNg=
Subject key identifier: 5F:7D:C2:7C:4A:07:94:6C:FA:70:2A:E1:83:BD:ED:FC:4E:3B:4D:38
Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Certificate serial: 019A4DAACF8B025886C4A71B7B6D63CE35D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
Manifest number: 171C
Signing time: Tue 04 Nov 2025 07:00:31 +0000
Manifest this update: Tue 04 Nov 2025 07:00:31 +0000
Manifest next update: Wed 05 Nov 2025 07:00:31 +0000
Files and hashes: 1: 0PxrjgmZQbJVDcH4mMDl7gGNKZc.roa (hash: bjnIOfIl4+9c19F8Gpi8S4s/MfRm6ysLGSGly8bkYvk=)
2: Ndw7HVDtjP0mKBQVp0z9A-CbAvY.roa (hash: Gvsu5qwW/HZfnE/HXNRfeWRnDFzMBicoBm7giJXuEbI=)
3: fHkoAZxOrb4jS9uptQ9di3MomH4.roa (hash: OuL9G7DUjjtpe04g3KNS/iW0YgxTMwqsjJxCgrATRoE=)
4: gA1d2jY3nghc_kTFDgqzR_V4tPo.roa (hash: MVElriob5MX1tbQ4YiwNJ86SZ2jP9GGb5E+1TagXoxo=)
5: vX2BeM7FzTdlSKkEkRf0acCnQxw.crl (hash: aWNPPXpyYfIaBVdB1i8dtCNv2PmdL2BWhyg4yWhoHv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:cf:8b:02:58:86:c4:a7:1b:7b:6d:63:ce:35:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Validity
Not Before: Nov 4 07:00:31 2025 GMT
Not After : Nov 5 07:00:31 2025 GMT
Subject: CN=5f7dc27c4a07946cfa702ae183bdedfc4e3b4d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:d8:d8:82:30:6f:5b:34:48:ea:79:12:e9:
d2:01:27:58:df:2b:30:e5:5f:41:e7:66:15:fb:e0:
f0:61:0e:f8:80:e7:bd:61:1f:23:ec:33:fe:33:53:
a1:de:7f:b1:50:d8:75:ce:56:bf:a2:10:06:f2:4a:
51:77:3b:86:3e:d1:a3:13:b1:36:88:ae:fe:27:29:
86:36:ee:8c:4e:f6:e0:d3:5f:01:b0:78:82:ae:e6:
70:2d:4b:f5:28:e0:ad:1a:38:30:db:8a:b8:d7:29:
b9:51:c8:2e:36:bd:74:df:17:58:68:a0:34:48:8a:
ca:93:f0:cd:2e:00:f1:a1:cb:b5:52:9a:3f:5a:cb:
6c:1c:24:56:cc:9e:be:41:52:bd:ef:db:da:6c:4c:
bc:12:61:36:c0:00:71:d3:e3:d6:24:9d:3c:38:ca:
8f:39:71:7a:db:c1:4e:92:99:c4:df:7b:90:b1:db:
59:90:51:ed:74:7a:8f:34:c4:c7:3a:07:2d:2d:a3:
66:cd:de:b8:1e:c6:04:c0:58:93:00:31:7f:f6:d5:
0f:00:cd:2a:f1:66:f6:3e:9a:d4:08:96:4b:93:ba:
b5:b2:6f:7f:bc:06:b8:53:e5:41:e9:86:12:5d:fd:
df:f6:97:2a:63:76:9c:c2:75:c3:f1:bb:3e:d1:c3:
f8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7D:C2:7C:4A:07:94:6C:FA:70:2A:E1:83:BD:ED:FC:4E:3B:4D:38
X509v3 Authority Key Identifier:
keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1d:ab:48:27:30:2e:ef:0a:40:d5:2f:a9:23:62:6d:4b:15:
d4:59:c0:a7:47:66:42:08:ee:be:ce:8c:83:e4:b5:f7:07:fe:
ba:ac:2a:08:62:14:21:6d:08:b0:6e:c3:00:9b:3d:5d:f1:d7:
cc:b5:0e:3e:87:7b:c5:44:25:28:03:65:5b:45:41:6d:97:3e:
90:7f:05:10:76:9d:91:d1:ac:27:63:aa:68:9f:10:e6:e4:97:
c2:63:92:20:94:71:4e:f9:fb:0c:09:07:00:59:5a:d7:f7:1a:
36:11:45:c4:2c:bc:4d:e4:b1:b8:90:24:ec:9a:8e:04:9f:d1:
52:a9:21:40:22:98:67:57:67:45:55:80:96:9a:8b:fd:d8:b4:
ee:bc:0a:93:8d:6f:98:d7:d5:40:cf:a7:3d:fe:7f:14:72:6b:
da:60:34:be:5f:81:e5:30:da:58:4f:db:93:e3:fc:fb:45:81:
08:fa:92:0c:ba:64:40:b4:5f:6e:44:f5:b5:5e:bc:80:1e:c8:
2a:9b:e2:4e:74:9b:38:ea:7f:53:52:99:e7:af:bd:2d:06:8d:
69:bc:9d:b3:7b:60:10:6e:84:30:35:14:60:ea:10:d9:e2:5e:
53:03:f8:91:49:9f:8d:5b:03:87:69:6b:b1:02:ff:88:67:0e:
0c:16:96:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqs+LAliGxKcbe21jzjXVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkN2Q4MTc4Y2VjNWNkMzc2NTQ4YTkwNDkxMTdmNDY5YzBh
NzQzMWMwHhcNMjUxMTA0MDcwMDMxWhcNMjUxMTA1MDcwMDMxWjAzMTEwLwYDVQQD
Eyg1ZjdkYzI3YzRhMDc5NDZjZmE3MDJhZTE4M2JkZWRmYzRlM2I0ZDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwInY2IIwb1s0SOp5EunSASdY3ysw
5V9B52YV++DwYQ74gOe9YR8j7DP+M1Oh3n+xUNh1zla/ohAG8kpRdzuGPtGjE7E2
iK7+JymGNu6MTvbg018BsHiCruZwLUv1KOCtGjgw24q41ym5UcguNr103xdYaKA0
SIrKk/DNLgDxocu1Upo/WstsHCRWzJ6+QVK979vabEy8EmE2wABx0+PWJJ08OMqP
OXF628FOkpnE33uQsdtZkFHtdHqPNMTHOgctLaNmzd64HsYEwFiTADF/9tUPAM0q
8Wb2PprUCJZLk7q1sm9/vAa4U+VB6YYSXf3f9pcqY3acwnXD8bs+0cP4wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF99wnxKB5Rs+nAq4YO97fxOO004MB8GA1UdIwQY
MBaAFL19gXjOxc03ZUipBJEX9GnAp0McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlgyQmVNN0Z6VGRsU0trRWtSZjBhY0NuUXh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mMzE3YjMtMDY2OC00ZTA0LTliNmQt
NjE1YWNhNTFlMmY2LzEvdlgyQmVNN0Z6VGRsU0trRWtSZjBhY0NuUXh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mMzE3YjMtMDY2OC00ZTA0LTliNmQtNjE1YWNhNTFlMmY2
LzEvdlgyQmVNN0Z6VGRsU0trRWtSZjBhY0NuUXh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHx2rSCcw
Lu8KQNUvqSNibUsV1FnAp0dmQgjuvs6Mg+S19wf+uqwqCGIUIW0IsG7DAJs9XfHX
zLUOPod7xUQlKANlW0VBbZc+kH8FEHadkdGsJ2OqaJ8Q5uSXwmOSIJRxTvn7DAkH
AFla1/caNhFFxCy8TeSxuJAk7JqOBJ/RUqkhQCKYZ1dnRVWAlpqL/di07rwKk41v
mNfVQM+nPf5/FHJr2mA0vl+B5TDaWE/bk+P8+0WBCPqSDLpkQLRfbkT1tV68gB7I
KpviTnSbOOp/U1KZ56+9LQaNabyds3tgEG6EMDUUYOoQ2eJeUwP4kUmfjVsDh2lr
sQL/iGcODBaWZg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:43 2025 by rpki-client