Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
File: vMzI9LN9iSKM0CPSUh0plo3guSU.mft (raw, json)
Hash identifier: 6+RXRDXOIwuQmGQa60a/NfA4GX+GiCwpBKGH7hUWL/4=
Subject key identifier: F3:EB:CF:FE:E6:B7:F8:D8:40:A8:2A:23:9B:4B:11:21:B1:57:BB:4A
Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Certificate serial: 019A4EF45A5F495F2CAA24E4EFB6DF213709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
Manifest number: 1130
Signing time: Tue 04 Nov 2025 13:00:28 +0000
Manifest this update: Tue 04 Nov 2025 13:00:28 +0000
Manifest next update: Wed 05 Nov 2025 13:00:28 +0000
Files and hashes: 1: c9UMX3iq8tErq5TMlo_-MEWj5uw.roa (hash: 1c2+eOFvPteNDBjZlr3CfkaamwjtVyHeqkTL5YVw+fo=)
2: vMzI9LN9iSKM0CPSUh0plo3guSU.crl (hash: sPxBdGYrYjAg86ZS5hon21f58vErcazuMjyF2i3e7N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:5a:5f:49:5f:2c:aa:24:e4:ef:b6:df:21:37:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Validity
Not Before: Nov 4 13:00:28 2025 GMT
Not After : Nov 5 13:00:28 2025 GMT
Subject: CN=f3ebcffee6b7f8d840a82a239b4b1121b157bb4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:d5:3d:cc:04:fd:34:8b:4b:24:3f:9d:74:
59:0e:db:4c:2f:88:c3:82:51:df:44:65:2f:2f:29:
c1:f1:00:02:1a:cc:db:37:7f:d3:a3:71:60:36:3e:
7f:14:77:8b:f9:5c:a5:59:03:04:8e:95:88:f2:99:
9f:9b:48:c5:61:e8:98:55:28:5c:72:6d:f7:b5:30:
fc:f4:b5:bd:82:73:88:20:b7:4d:e3:bb:d4:c9:d1:
ba:b7:fa:d1:eb:24:94:e5:4d:e8:5a:d6:97:23:b8:
0e:dd:c4:ee:0d:c2:31:52:2d:f1:77:d4:09:be:05:
c5:ac:77:d0:4f:1e:69:4d:f2:94:6d:fc:2a:63:ff:
ff:75:51:15:0a:f2:e9:ff:f7:5b:88:61:d1:f1:c0:
44:b8:09:a5:80:52:34:f6:b8:57:a0:1e:7f:8a:87:
1c:29:da:85:cd:1e:c0:1a:f9:db:99:c2:f2:14:23:
9b:ad:6e:5c:fc:f8:44:06:83:9b:4c:e0:c6:c9:aa:
e9:7c:0f:76:1d:8d:4b:fe:aa:6a:cc:be:b4:bd:f8:
1b:e2:9c:3e:65:04:2c:7c:3a:79:9e:e3:78:7f:31:
a5:0d:13:4d:96:37:49:eb:16:28:67:66:1b:fd:d0:
1f:6f:56:e4:af:13:c2:c9:6e:25:be:a2:36:f8:f7:
e8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EB:CF:FE:E6:B7:F8:D8:40:A8:2A:23:9B:4B:11:21:B1:57:BB:4A
X509v3 Authority Key Identifier:
keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:22:18:56:06:39:c3:29:de:17:5d:c3:c6:2f:84:29:7e:31:
4e:2d:58:6f:22:4c:39:96:e7:73:75:87:0b:06:f3:50:79:60:
43:40:a8:fb:db:09:0f:dc:56:b6:e3:a7:4b:ba:5b:5c:71:39:
89:a9:5a:48:ef:3c:74:1d:70:cf:d0:7f:8e:41:e3:d6:38:57:
30:0b:06:63:72:95:1d:a2:85:56:dc:78:4e:e8:50:5e:37:81:
21:a4:4d:e9:ff:db:86:85:c6:83:94:c4:3e:70:a9:e3:02:48:
c3:f6:ca:15:95:88:72:a4:22:4f:6e:7f:4e:40:a5:ef:81:42:
8b:84:7c:0b:34:c9:bd:fa:5c:65:28:3b:b6:50:2a:2d:15:39:
a2:35:c9:3f:b3:f9:6b:01:56:5d:ca:45:d3:70:b5:03:f6:fd:
c3:d2:4f:25:b0:50:33:ef:fe:ac:b9:3e:cb:95:1f:a3:07:81:
ce:b6:f3:87:d3:85:07:33:8d:48:88:39:9b:cc:a0:e4:0d:54:
9c:1f:34:44:6d:14:eb:11:88:6c:85:20:e6:ec:36:4f:2b:bb:
80:d0:44:5d:5d:2a:6c:4a:b2:10:f7:44:a9:e4:f0:27:2f:59:
a7:8f:61:84:a0:b4:2c:e8:ba:10:96:08:28:10:f4:d2:aa:f4:
e9:69:ec:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:25 2025 by rpki-client