Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
File: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft (raw, json)
Hash identifier: qi770tdcegz6ztKEiTpdXxXWbCunq4VVwZOMCz/SmqI=
Subject key identifier: 28:8B:29:8E:3A:99:56:95:FB:0C:5B:08:E0:BF:F9:54:2C:13:82:38
Authority key identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
Certificate issuer: /CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Certificate serial: 019A53E3F0CF87B4E8F2832B0FAFBD58B03F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
Manifest number: 01A4
Signing time: Wed 05 Nov 2025 12:00:38 +0000
Manifest this update: Wed 05 Nov 2025 12:00:38 +0000
Manifest next update: Thu 06 Nov 2025 12:00:38 +0000
Files and hashes: 1: D98Ck1_qKOXalzx0pMS_FarSGM8.roa (hash: u49BF5lQyjsLl1bn3ULD3SUQ9N/pcixaCTatnIvy4v0=)
2: tCV34_eFEm-bBTr3p-Dum9J6ZzA.roa (hash: lJs/8jun541iQ5FmJ+SShA8Wi27D6ss5N6YmTLmASl4=)
3: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl (hash: gNzYLIqfOTcaEKw+fYNPSb+OOJhJi6b14X9ZLJUjteg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:f0:cf:87:b4:e8:f2:83:2b:0f:af:bd:58:b0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Validity
Not Before: Nov 5 12:00:38 2025 GMT
Not After : Nov 6 12:00:38 2025 GMT
Subject: CN=288b298e3a995695fb0c5b08e0bff9542c138238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:1c:3b:2b:e7:72:e6:a7:d8:2e:16:90:d0:
07:12:cd:a4:0c:77:ac:d2:c2:b8:41:4b:0d:39:34:
6d:17:8c:7a:18:10:39:21:dc:80:a7:a9:51:06:a5:
05:b0:17:83:20:2e:59:ed:60:3a:3c:b7:9e:8e:0a:
68:54:39:80:b5:83:03:41:d4:ae:15:57:d5:4d:cc:
80:73:58:3f:53:6b:bf:76:5b:70:9b:34:55:b7:99:
85:2b:a3:ef:35:e6:47:49:d6:d7:99:58:76:73:7c:
e4:9e:13:bd:65:21:c5:88:e5:68:20:a2:a0:7d:67:
47:59:80:6f:34:d3:ab:dd:f3:15:20:e2:5c:2b:2d:
90:23:48:61:45:71:a6:ba:21:e6:2f:7d:1c:e5:47:
56:c6:1c:8a:7e:97:04:1a:53:18:d0:ac:94:84:d4:
eb:4d:0e:36:86:f2:99:57:7c:95:e5:5c:91:80:1c:
ba:58:14:ae:30:67:c4:17:09:0b:62:45:9d:01:b0:
dc:e0:8b:b0:b6:5b:e1:9d:3f:07:30:3d:50:cd:8f:
db:0b:cd:5b:52:8a:54:d8:ee:58:a1:c0:ec:8a:ae:
86:bb:cd:dc:6d:88:ac:7a:84:36:dc:1f:bb:0a:b1:
a1:24:75:01:84:30:5b:14:f3:60:57:32:a1:7a:04:
eb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8B:29:8E:3A:99:56:95:FB:0C:5B:08:E0:BF:F9:54:2C:13:82:38
X509v3 Authority Key Identifier:
keyid:BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:dc:08:bb:4e:e5:0f:b2:1e:af:26:5e:83:7b:ff:bc:53:99:
2a:01:c2:64:67:6f:35:fa:b4:fc:64:66:3e:8a:4e:9a:d2:04:
b8:eb:1a:ee:28:b9:62:dd:2d:b0:33:69:2b:26:62:35:8b:4a:
68:c3:05:1b:27:0b:4e:ac:27:24:da:55:6f:81:17:72:0c:70:
b2:06:ca:ea:54:7b:15:f4:81:37:ef:d9:ad:57:aa:d4:b5:cd:
b0:8f:49:33:77:5f:b4:da:99:51:46:4d:05:c6:3d:41:04:11:
3f:07:fa:29:b9:58:c0:fe:97:79:c1:2d:2f:88:7e:3b:17:e9:
ea:40:98:fd:a1:ec:ce:93:32:c5:52:c0:22:a4:24:f0:22:5e:
49:df:91:6f:50:89:04:db:1c:1a:f9:46:8b:c3:73:d5:35:6c:
7a:39:cb:3f:81:a0:d3:08:99:bd:6e:6e:f7:58:ff:1b:81:35:
e0:16:9a:37:c7:76:6f:b7:88:de:3d:6c:94:07:41:cd:9d:aa:
73:1c:9e:66:ee:e4:fb:bd:c9:e8:20:45:40:da:9f:1e:4a:85:
8c:f4:41:fc:9a:fe:9c:67:02:4f:42:18:72:e6:34:cd:b4:42:
81:d0:ff:57:46:77:25:c8:66:d8:14:69:dd:dc:df:1e:d0:03:
c0:f6:33:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpT4/DPh7To8oMrD6+9WLA/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNzM3NDdmNzhiZDMyOGQwYWUxYzg5MTcxYjM4MWFhMTkw
MTFhY2UwHhcNMjUxMTA1MTIwMDM4WhcNMjUxMTA2MTIwMDM4WjAzMTEwLwYDVQQD
EygyODhiMjk4ZTNhOTk1Njk1ZmIwYzViMDhlMGJmZjk1NDJjMTM4MjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxMcOyvncuan2C4WkNAHEs2kDHes
0sK4QUsNOTRtF4x6GBA5IdyAp6lRBqUFsBeDIC5Z7WA6PLeejgpoVDmAtYMDQdSu
FVfVTcyAc1g/U2u/dltwmzRVt5mFK6PvNeZHSdbXmVh2c3zknhO9ZSHFiOVoIKKg
fWdHWYBvNNOr3fMVIOJcKy2QI0hhRXGmuiHmL30c5UdWxhyKfpcEGlMY0KyUhNTr
TQ42hvKZV3yV5VyRgBy6WBSuMGfEFwkLYkWdAbDc4IuwtlvhnT8HMD1QzY/bC81b
UopU2O5YocDsiq6Gu83cbYiseoQ23B+7CrGhJHUBhDBbFPNgVzKhegTrkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiLKY46mVaV+wxbCOC/+VQsE4I4MB8GA1UdIwQY
MBaAFL1zdH94vTKNCuHIkXGzgaoZARrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlhOMGYzaTlNbzBLNGNpUmNiT0JxaGtCR3M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hNTU1NTMtMjk3NS00MjQ0LWIyNjAt
NWJkYmY2Zjg0N2Y5LzEvdlhOMGYzaTlNbzBLNGNpUmNiT0JxaGtCR3M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9hNTU1NTMtMjk3NS00MjQ0LWIyNjAtNWJkYmY2Zjg0N2Y5
LzEvdlhOMGYzaTlNbzBLNGNpUmNiT0JxaGtCR3M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9wIu07l
D7IeryZeg3v/vFOZKgHCZGdvNfq0/GRmPopOmtIEuOsa7ii5Yt0tsDNpKyZiNYtK
aMMFGycLTqwnJNpVb4EXcgxwsgbK6lR7FfSBN+/ZrVeq1LXNsI9JM3dftNqZUUZN
BcY9QQQRPwf6KblYwP6XecEtL4h+Oxfp6kCY/aHszpMyxVLAIqQk8CJeSd+Rb1CJ
BNscGvlGi8Nz1TVsejnLP4Gg0wiZvW5u91j/G4E14BaaN8d2b7eI3j1slAdBzZ2q
cxyeZu7k+73J6CBFQNqfHkqFjPRB/Jr+nGcCT0IYcuY0zbRCgdD/V0Z3Jchm2BRp
3dzfHtADwPYz8g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:24:39 2025 by rpki-client