Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
File: veY2_1I-Xzc0In8zxEwuUP-NHuI.mft (raw, json)
Hash identifier: Ybnqh+K0nPmQD0aA0MnnnLHo2fR0KGUhtdb5FacHCfU=
Subject key identifier: AE:07:10:F3:3B:4D:FF:87:EF:90:EA:FF:80:DD:6E:C4:E9:53:F2:8E
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial: 019A5308119394BC45D3B3CE5096EA3612E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
Manifest number: 0AAD
Signing time: Wed 05 Nov 2025 08:00:28 +0000
Manifest this update: Wed 05 Nov 2025 08:00:28 +0000
Manifest next update: Thu 06 Nov 2025 08:00:28 +0000
Files and hashes: 1: 4NbkXu89FXOyQLhXi76KTLRS_8U.roa (hash: /R0anYXR39TgZMh7wTdh79H3PAU+bV4gIhm7ONZyMQ8=)
2: C9jlSQpiBO6Y73lSEYMO0KAZmVU.roa (hash: bHV8b0r3RZhEMBuy9WHUg2/V18JXKTeCJEmR8xzO1XQ=)
3: Sucl-ga8bKlbfGlHsxsq1Oo80t0.roa (hash: k1Htljgs56uFbBPsZWyrCnN1sbAvxLT63YyfljrMCbY=)
4: bfuZYtxjTAOdpCpRWdDszbBOycM.roa (hash: oKsbpIb+4VCZp3VPNUM0uIEJezlOZcr7unos7yGZizs=)
5: veY2_1I-Xzc0In8zxEwuUP-NHuI.crl (hash: Wup+CGxjvMoIfOzhfjmhthKzR21j8ySekZdoJcYcdZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:11:93:94:bc:45:d3:b3:ce:50:96:ea:36:12:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Validity
Not Before: Nov 5 08:00:28 2025 GMT
Not After : Nov 6 08:00:28 2025 GMT
Subject: CN=ae0710f33b4dff87ef90eaff80dd6ec4e953f28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:80:66:21:d4:ee:b5:4f:53:65:04:eb:f0:d7:
59:fc:26:a8:e1:1f:c0:42:f7:f7:c9:ed:0f:53:66:
1c:89:09:cc:a3:ed:59:cf:71:38:e9:12:0e:43:d8:
61:ce:70:02:0c:d1:d3:68:e5:e1:52:1b:88:be:d4:
a9:6c:16:02:2e:ac:f4:99:3f:5c:42:76:f3:02:34:
77:6a:dc:58:1a:34:48:8a:0f:d6:7a:21:a4:16:5c:
49:c7:b2:82:5a:cf:00:84:9d:02:80:d5:ec:36:43:
89:c6:75:b8:0d:0c:a2:0b:f4:63:db:19:cc:44:2a:
eb:f6:ef:3d:0f:ef:82:64:e9:63:b5:77:13:29:fe:
1e:07:9c:36:29:d7:e6:01:dc:dd:f6:38:ee:04:b4:
c7:2f:56:e0:61:df:e0:06:30:13:1b:05:38:3a:f6:
2b:f3:08:c4:12:e4:da:64:21:d3:41:a9:78:bc:e2:
04:5b:97:75:fe:8e:51:41:c9:f6:30:f3:90:18:af:
3c:5f:eb:10:f5:e6:28:ac:44:53:f2:9f:32:24:36:
47:31:2a:f8:ed:61:6c:d1:e3:e6:7c:c4:90:45:cf:
ca:a7:75:b9:84:21:91:05:4e:a1:01:70:d3:42:b2:
82:bd:ff:ab:ea:e6:fe:0b:ce:59:c7:87:13:c2:28:
bf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:07:10:F3:3B:4D:FF:87:EF:90:EA:FF:80:DD:6E:C4:E9:53:F2:8E
X509v3 Authority Key Identifier:
keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:81:f0:3b:85:d1:79:3b:08:64:c6:65:28:21:cf:50:82:9d:
68:72:45:62:3b:d0:4b:f6:36:4b:bd:d5:ee:2a:f9:69:e4:83:
55:0f:d8:0b:c2:05:f2:5e:72:1a:13:4c:c7:a7:49:f9:9b:91:
bd:af:66:35:1c:9c:68:c2:4b:83:9c:b8:51:8b:30:92:4c:0e:
5a:b1:71:42:6b:65:c0:4b:a0:6e:4a:99:3c:b5:96:4c:af:44:
f7:bd:55:b0:be:0e:fc:89:45:c6:f3:b0:06:63:2b:21:83:f2:
d5:97:c4:bf:5d:14:45:38:a6:6c:72:8b:ed:a7:47:ae:05:fc:
7c:95:54:3f:fe:e9:50:6b:bb:79:45:ef:15:b6:22:71:c4:ee:
c9:0c:fc:07:b8:f9:44:b3:83:43:92:80:df:80:c1:d1:8b:84:
df:4b:20:10:bc:9e:88:56:1d:d2:ae:79:5b:26:2d:bd:60:dc:
a0:c6:33:60:2d:fa:d4:6c:5c:0a:32:42:92:e4:0f:23:a5:47:
77:a5:83:fa:d9:8e:bc:08:4f:32:02:f4:de:aa:25:86:aa:5b:
40:53:d6:a6:33:c4:d0:be:3a:a6:7c:ff:5b:fe:5e:1c:1d:78:
23:44:b7:e2:79:96:a1:b2:28:08:85:ef:6d:dd:77:52:65:21:
8e:c9:77:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTCBGTlLxF07POUJbqNhLnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTYzNmZmNTIzZTVmMzczNDIyN2YzM2M0NGMyZTUwZmY4
ZDFlZTIwHhcNMjUxMTA1MDgwMDI4WhcNMjUxMTA2MDgwMDI4WjAzMTEwLwYDVQQD
EyhhZTA3MTBmMzNiNGRmZjg3ZWY5MGVhZmY4MGRkNmVjNGU5NTNmMjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YBmIdTutU9TZQTr8NdZ/Cao4R/A
Qvf3ye0PU2YciQnMo+1Zz3E46RIOQ9hhznACDNHTaOXhUhuIvtSpbBYCLqz0mT9c
QnbzAjR3atxYGjRIig/WeiGkFlxJx7KCWs8AhJ0CgNXsNkOJxnW4DQyiC/Rj2xnM
RCrr9u89D++CZOljtXcTKf4eB5w2KdfmAdzd9jjuBLTHL1bgYd/gBjATGwU4OvYr
8wjEEuTaZCHTQal4vOIEW5d1/o5RQcn2MPOQGK88X+sQ9eYorERT8p8yJDZHMSr4
7WFs0ePmfMSQRc/Kp3W5hCGRBU6hAXDTQrKCvf+r6ub+C85Zx4cTwii/NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4HEPM7Tf+H75Dq/4DdbsTpU/KOMB8GA1UdIwQY
MBaAFL3mNv9SPl83NCJ/M8RMLlD/jR7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYt
N2JmYjQzODFhYjU0LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYtN2JmYjQzODFhYjU0
LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoHwO4XR
eTsIZMZlKCHPUIKdaHJFYjvQS/Y2S73V7ir5aeSDVQ/YC8IF8l5yGhNMx6dJ+ZuR
va9mNRycaMJLg5y4UYswkkwOWrFxQmtlwEugbkqZPLWWTK9E971VsL4O/IlFxvOw
BmMrIYPy1ZfEv10URTimbHKL7adHrgX8fJVUP/7pUGu7eUXvFbYiccTuyQz8B7j5
RLODQ5KA34DB0YuE30sgELyeiFYd0q55WyYtvWDcoMYzYC361GxcCjJCkuQPI6VH
d6WD+tmOvAhPMgL03qolhqpbQFPWpjPE0L46pnz/W/5eHB14I0S34nmWobIoCIXv
bd13UmUhjsl3oA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:59:02 2025 by rpki-client