Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
File: vx1f6v05F0clv-S--RvSfHsvb5E.mft (raw, json)
Hash identifier: sTx9FxcNgG12AS4qLy8QJFa0XFkb/IUnVJs9l0B7htQ=
Subject key identifier: E3:9B:F6:32:D3:6D:72:C8:67:AD:CF:82:4C:DC:F6:13:D8:43:5B:A6
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 019A4E4F77BB657BD47CAB1ADBC4D4C2B738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
Manifest number: 173B
Signing time: Tue 04 Nov 2025 10:00:22 +0000
Manifest this update: Tue 04 Nov 2025 10:00:22 +0000
Manifest next update: Wed 05 Nov 2025 10:00:22 +0000
Files and hashes: 1: DFPMPjVgEXra9Yi746ueyHfFEfE.roa (hash: egcn+8V+rmTodHY7QllvkOnDLWLB5ryJAjHfdzE4gEE=)
2: FBtv0zQKgpSJGVwmOiWrJgdZXTQ.roa (hash: jZyVvy/AnilHzUcrfJcn+M+uqzeksVwB5ieR7HcmZ3o=)
3: JLZHp3zugUr0BJKEkPLt_peuCWY.roa (hash: xqh8b79ZtGYi3X/2gVjxCLbm1mPbREjzpn3t3zp8STc=)
4: QBbKMrewUV5LysqmZYBRCD2P-aU.roa (hash: pyCMXVW0aDhN3pnl3u7Ja6A+yxwNB3DI3wsCXDY581k=)
5: WJYzgmcrcmILpqEG0aOvuAZFJSY.roa (hash: 6cn2iTDXSQqMon3jkehha+lFwjisWUfx0Tw++dlztuk=)
6: a2N7ZqNTTwHGwfd7829psoPCAf8.roa (hash: l07jq1tDJlSMiPUaiQ9Tqz6dDSHfIb3Fw8fa48dds2M=)
7: laT6cLR_CsAMLDNRuHbw-QE9_Lg.roa (hash: /As0MXu+Jd4Zfmw66mysjQFz8bFMgrz+a8Z5fFD5uCE=)
8: vx1f6v05F0clv-S--RvSfHsvb5E.crl (hash: Qb0vpvEtqIX0jD0zV8FUbwcXkBvI5S9486Cqp0r1ZgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:77:bb:65:7b:d4:7c:ab:1a:db:c4:d4:c2:b7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Nov 4 10:00:22 2025 GMT
Not After : Nov 5 10:00:22 2025 GMT
Subject: CN=e39bf632d36d72c867adcf824cdcf613d8435ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:95:7a:b0:a7:be:eb:a6:9d:51:fe:65:0b:5d:
67:24:19:43:ea:dd:b8:d0:b6:bb:1e:73:e9:76:28:
4b:e5:22:ed:04:05:32:9a:09:ae:d3:d8:56:87:e5:
d3:e6:7a:fe:1b:7a:31:11:be:ee:07:6d:21:4c:01:
b4:36:78:31:ed:55:9b:76:68:11:01:32:5c:f3:0d:
46:ee:bf:a9:ba:03:b0:ca:73:42:a7:28:f6:2e:8d:
ed:27:e5:39:af:f1:49:e4:11:30:72:45:87:e9:3e:
ac:05:45:f6:ce:da:48:fd:84:4b:15:6a:33:b5:86:
af:5f:b9:cc:d8:a1:89:ef:5e:15:f9:82:46:e9:0e:
24:ce:a5:6e:77:31:d2:c9:f8:8e:ad:04:52:3c:6f:
a6:95:a2:d1:d8:b8:08:87:3e:cf:76:c1:97:90:01:
42:bb:44:a3:c9:a2:9c:5b:56:1b:c2:36:c6:18:34:
89:ad:e4:c2:8c:58:29:94:8f:62:6e:e8:ff:a1:62:
f3:3c:5d:87:47:54:c4:0a:a1:9b:f7:8d:61:32:df:
93:72:74:e8:13:82:35:88:41:a7:88:42:9e:f3:14:
c6:13:45:0b:f3:4c:e2:71:56:cb:c8:b4:4e:72:68:
c2:ac:08:25:ae:08:c9:96:b4:fe:f8:2c:37:71:94:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9B:F6:32:D3:6D:72:C8:67:AD:CF:82:4C:DC:F6:13:D8:43:5B:A6
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b3:48:34:40:14:ba:84:e5:8d:5c:fd:39:5e:3d:1e:c7:7b:
da:8d:62:a0:0f:b6:85:71:7b:8e:4a:db:94:78:22:63:7b:38:
b9:f5:b2:61:6d:20:70:29:72:7e:91:48:33:9a:f9:4b:02:5e:
92:53:4d:d1:7e:fd:18:7f:ae:3e:ee:2a:f7:40:1b:dc:1f:ab:
1e:08:69:49:6b:ab:0b:31:bf:32:71:0c:46:29:aa:54:fd:e7:
66:0c:d8:e1:eb:83:64:52:39:e2:8c:a6:f7:47:83:eb:29:38:
5a:7e:02:2f:a7:d4:d5:85:ce:1d:b4:35:b4:15:2c:a1:72:6c:
cb:5b:d4:0b:f5:f1:81:76:22:8b:c6:b9:a2:db:3b:a0:e1:57:
45:2a:32:0e:40:ba:9a:43:fa:29:7f:a8:c3:87:0c:f9:70:26:
ff:7b:25:31:b9:00:31:64:f3:38:04:71:a0:55:18:76:f1:a9:
6b:86:d7:6a:a7:f3:ac:0c:1a:c6:0d:80:36:50:82:ed:3d:41:
4a:aa:8a:57:ee:e9:2b:29:dc:10:29:e4:20:5c:7e:0a:4b:d7:
af:70:01:0d:c9:4f:7c:22:a8:8c:95:7e:d2:df:25:45:dd:bb:
0f:c8:a4:25:61:2c:dd:8a:18:09:d7:8b:0e:23:24:a0:47:ec:
d7:54:7b:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT3e7ZXvUfKsa28TUwrc4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMWQ1ZmVhZmQzOTE3NDcyNWJmZTRiZWY5MWJkMjdjN2Iy
ZjZmOTEwHhcNMjUxMTA0MTAwMDIyWhcNMjUxMTA1MTAwMDIyWjAzMTEwLwYDVQQD
EyhlMzliZjYzMmQzNmQ3MmM4NjdhZGNmODI0Y2RjZjYxM2Q4NDM1YmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5V6sKe+66adUf5lC11nJBlD6t24
0La7HnPpdihL5SLtBAUymgmu09hWh+XT5nr+G3oxEb7uB20hTAG0Nngx7VWbdmgR
ATJc8w1G7r+pugOwynNCpyj2Lo3tJ+U5r/FJ5BEwckWH6T6sBUX2ztpI/YRLFWoz
tYavX7nM2KGJ714V+YJG6Q4kzqVudzHSyfiOrQRSPG+mlaLR2LgIhz7PdsGXkAFC
u0SjyaKcW1YbwjbGGDSJreTCjFgplI9ibuj/oWLzPF2HR1TECqGb941hMt+TcnTo
E4I1iEGniEKe8xTGE0UL80zicVbLyLROcmjCrAglrgjJlrT++Cw3cZQzLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOb9jLTbXLIZ63Pgkzc9hPYQ1umMB8GA1UdIwQY
MBaAFL8dX+r9ORdHJb/kvvkb0nx7L2+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82MDY1ZDItMTAzZS00YWI3LWJmYjMt
MWE4Yzg0MmFmZTJhLzEvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82MDY1ZDItMTAzZS00YWI3LWJmYjMtMWE4Yzg0MmFmZTJh
LzEvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7NINEAU
uoTljVz9OV49Hsd72o1ioA+2hXF7jkrblHgiY3s4ufWyYW0gcClyfpFIM5r5SwJe
klNN0X79GH+uPu4q90Ab3B+rHghpSWurCzG/MnEMRimqVP3nZgzY4euDZFI54oym
90eD6yk4Wn4CL6fU1YXOHbQ1tBUsoXJsy1vUC/XxgXYii8a5ots7oOFXRSoyDkC6
mkP6KX+ow4cM+XAm/3slMbkAMWTzOARxoFUYdvGpa4bXaqfzrAwaxg2ANlCC7T1B
SqqKV+7pKyncECnkIFx+CkvXr3ABDclPfCKojJV+0t8lRd27D8ikJWEs3YoYCdeL
DiMkoEfs11R71g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 16:46:42 2025 by rpki-client