Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
File: vf89luiqFB0ixCQq7_eK9x74skQ.mft (raw, json)
Hash identifier: t5ktaKkPgecJU3frEp3wnAerPWxK8WNWLz2uDWcnmiE=
Subject key identifier: DA:E0:4A:5A:5D:3E:E8:A7:C0:18:2F:AB:8A:D1:85:34:BA:CF:1C:F1
Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
Certificate issuer: /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Certificate serial: 019A533ED52C38280A657D05F8134D0B7DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
Manifest number: 16A3
Signing time: Wed 05 Nov 2025 09:00:17 +0000
Manifest this update: Wed 05 Nov 2025 09:00:17 +0000
Manifest next update: Thu 06 Nov 2025 09:00:17 +0000
Files and hashes: 1: 41AytB41hodYM5wYhqpxuiF8N9s.roa (hash: OnxInRURjXFa44Bu3c4RrKsYyRXWI0CzeYkFHBMxcR8=)
2: vf89luiqFB0ixCQq7_eK9x74skQ.crl (hash: l1CxNmdKFFVVxzI9+6U58sg1658KzOWyDkUpRouZToo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:d5:2c:38:28:0a:65:7d:05:f8:13:4d:0b:7d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Validity
Not Before: Nov 5 09:00:17 2025 GMT
Not After : Nov 6 09:00:17 2025 GMT
Subject: CN=dae04a5a5d3ee8a7c0182fab8ad18534bacf1cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4a:07:22:6a:25:40:68:1b:21:89:5a:c6:fe:
55:3b:88:74:18:d5:c3:46:5b:54:e6:da:f4:bb:12:
16:3f:c2:09:d7:96:cc:03:a5:5d:7c:3e:81:ac:68:
67:11:7a:fa:e2:7c:32:fd:86:d5:ad:48:8a:7f:09:
f3:00:6c:31:55:36:5d:45:25:73:8d:5f:7d:5a:d0:
6a:2b:26:24:7a:de:23:7d:5b:24:88:7d:f8:46:4c:
d2:b3:9f:b5:90:8f:24:b3:f9:84:a0:cb:eb:a8:3a:
05:fe:20:e9:3d:e3:bc:ed:eb:26:c0:18:70:2c:bf:
c1:f9:bc:91:c1:ee:67:64:fa:05:5e:78:2b:fd:01:
91:cb:d0:35:eb:bc:f6:c2:21:dd:90:7b:0a:18:e0:
4d:e9:a0:d1:c5:3e:c7:ee:f5:e2:c8:24:71:93:5c:
2c:ff:6d:18:13:b0:3e:e4:34:a3:4e:ee:1c:e4:5c:
7a:02:87:57:d4:ff:24:67:09:ed:43:c6:4b:60:ad:
91:5c:e1:9c:02:bf:37:0d:1c:d4:2e:38:e4:34:1b:
7e:db:02:e9:b7:ca:96:f9:67:f7:1b:bb:29:01:fc:
2e:09:32:22:b1:cb:52:d7:c0:26:21:b9:c7:cc:83:
05:79:1b:8d:0c:15:7b:26:6a:bd:af:12:8f:3d:45:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E0:4A:5A:5D:3E:E8:A7:C0:18:2F:AB:8A:D1:85:34:BA:CF:1C:F1
X509v3 Authority Key Identifier:
keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ee:cb:ec:c2:57:04:fe:9b:fb:de:0b:8f:d5:99:16:03:6c:
a5:f4:e1:c7:29:3f:84:b1:e4:c1:82:0f:30:ad:d7:af:5c:8e:
fc:bb:f7:8b:fc:5d:66:98:e1:3a:eb:44:48:a7:2b:2b:01:a4:
3e:95:92:a6:e6:7c:4c:0a:63:d9:aa:cb:e4:e1:4c:00:bb:19:
f5:ba:82:10:78:9b:38:56:cd:b4:87:77:5e:fc:cc:60:e2:92:
51:ad:2e:cc:3b:94:09:25:c7:dc:77:60:4f:09:6a:28:27:83:
10:70:33:91:0c:b7:b2:75:de:95:d7:33:10:f4:09:0a:21:9e:
b4:6e:b8:9c:45:0d:ae:b0:a5:fc:4b:6e:be:c6:5c:68:e2:03:
ba:e6:f4:96:1d:a3:46:dc:38:1b:ba:a1:8a:46:b7:88:07:f7:
d4:e3:8e:cc:1b:a9:cb:ad:c9:35:00:5e:96:bb:2d:16:14:34:
42:56:7b:b9:4a:19:3d:18:b8:0a:ad:e4:f9:75:aa:a7:d4:fd:
af:08:45:99:85:94:82:5f:ac:4f:14:90:84:0b:70:15:3b:d1:
7e:43:c6:da:aa:fe:c6:49:ee:ed:f5:80:1c:9b:da:87:c8:c0:
21:85:6a:4f:c6:4c:5e:d6:d6:1f:39:40:00:71:55:98:48:2c:
d8:ff:62:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTPtUsOCgKZX0F+BNNC33aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmYzZDk2ZThhYTE0MWQyMmM0MjQyYWVmZjc4YWY3MWVm
OGIyNDQwHhcNMjUxMTA1MDkwMDE3WhcNMjUxMTA2MDkwMDE3WjAzMTEwLwYDVQQD
EyhkYWUwNGE1YTVkM2VlOGE3YzAxODJmYWI4YWQxODUzNGJhY2YxY2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0oHImolQGgbIYlaxv5VO4h0GNXD
RltU5tr0uxIWP8IJ15bMA6VdfD6BrGhnEXr64nwy/YbVrUiKfwnzAGwxVTZdRSVz
jV99WtBqKyYket4jfVskiH34RkzSs5+1kI8ks/mEoMvrqDoF/iDpPeO87esmwBhw
LL/B+byRwe5nZPoFXngr/QGRy9A167z2wiHdkHsKGOBN6aDRxT7H7vXiyCRxk1ws
/20YE7A+5DSjTu4c5Fx6AodX1P8kZwntQ8ZLYK2RXOGcAr83DRzULjjkNBt+2wLp
t8qW+Wf3G7spAfwuCTIisctS18AmIbnHzIMFeRuNDBV7Jmq9rxKPPUWNsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrgSlpdPuinwBgvq4rRhTS6zxzxMB8GA1UdIwQY
MBaAFL3/PZboqhQdIsQkKu/3ivce+LJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82MTFjN2YtYjEyNS00NzEyLTllZjct
M2M3OTg3YzQyYzE2LzEvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82MTFjN2YtYjEyNS00NzEyLTllZjctM2M3OTg3YzQyYzE2
LzEvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASu7L7MJX
BP6b+94Lj9WZFgNspfThxyk/hLHkwYIPMK3Xr1yO/Lv3i/xdZpjhOutESKcrKwGk
PpWSpuZ8TApj2arL5OFMALsZ9bqCEHibOFbNtId3XvzMYOKSUa0uzDuUCSXH3Hdg
TwlqKCeDEHAzkQy3snXeldczEPQJCiGetG64nEUNrrCl/EtuvsZcaOIDuub0lh2j
Rtw4G7qhika3iAf31OOOzBupy63JNQBelrstFhQ0QlZ7uUoZPRi4Cq3k+XWqp9T9
rwhFmYWUgl+sTxSQhAtwFTvRfkPG2qr+xknu7fWAHJvah8jAIYVqT8ZMXtbWHzlA
AHFVmEgs2P9irQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:49:14 2025 by rpki-client