Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json)
Hash identifier: sfBMFOU23RiyxXVPuqBb0hLAnbN1drCxZp3NfaXxUrs=
Subject key identifier: 86:FA:BF:3F:B4:0C:D3:19:1F:B0:6C:65:C7:48:50:7C:79:7D:EC:0F
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial: 019A4D744683C29E7B35C3528F7B4954F7BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 06:00:57 +0000
Manifest this update: Tue 04 Nov 2025 06:00:57 +0000
Manifest next update: Wed 05 Nov 2025 06:00:57 +0000
Files and hashes: 1: OTqu6ofFTyzK0xc5jrx6KgXbQ7M.roa (hash: McteydyUGW+LpPCexm+O1QefOp1oYc2XsREa8UjCVIA=)
2: dKgonROO4xpKslqbxO1osnY3m3M.roa (hash: Hl3GLighJnfdP7Jed7jsC0ysJmCVrDY4pvlKDvOdEYc=)
3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: nciGRK9z00L5J8oRSUckDA5quv17rDTPvxwaA5hjToY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:46:83:c2:9e:7b:35:c3:52:8f:7b:49:54:f7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Validity
Not Before: Nov 4 06:00:57 2025 GMT
Not After : Nov 5 06:00:57 2025 GMT
Subject: CN=86fabf3fb40cd3191fb06c65c748507c797dec0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:69:81:fa:0b:3d:2b:83:22:9e:66:e1:4e:32:
86:4e:0e:42:50:b1:c8:e4:13:f3:c8:5b:43:57:ab:
64:c1:ad:af:38:8c:e2:6a:0f:d0:bb:a8:b1:db:dc:
19:b3:e6:6e:68:62:0b:fa:6c:aa:c2:b9:4a:c9:eb:
b0:3c:5f:e8:97:15:41:37:33:79:21:0e:15:7b:17:
00:88:24:a4:e8:e0:73:6f:87:85:37:07:1c:28:d0:
81:09:8c:52:b7:99:10:b9:57:b7:97:d2:bb:5b:d2:
20:71:99:ef:2c:81:12:f5:e1:31:63:a1:0f:59:c5:
a4:56:29:6b:85:2a:37:0f:16:03:3c:8b:99:87:ec:
da:a5:e8:6f:a3:b7:0b:b9:42:74:20:30:b4:0a:7f:
eb:a6:ee:c3:38:e3:6e:53:05:4a:a9:27:11:0f:19:
15:de:51:71:e9:ec:cd:7a:fe:b9:21:68:45:f4:7c:
a3:60:71:a2:a9:e8:41:a6:5a:77:67:92:bc:b7:2a:
a0:0c:10:0d:84:be:b3:f0:d7:4f:37:6f:91:c2:a4:
91:6d:ca:ae:d5:c0:f3:eb:c3:b7:df:a7:37:16:1e:
9e:e9:93:b1:8f:7c:ae:1b:ad:c0:88:b0:cb:8a:32:
c6:3d:38:89:7c:c4:7c:35:0a:4d:19:c5:46:92:f9:
11:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FA:BF:3F:B4:0C:D3:19:1F:B0:6C:65:C7:48:50:7C:79:7D:EC:0F
X509v3 Authority Key Identifier:
keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8c:b0:7e:f2:c4:fa:b6:a9:d1:fd:78:fb:d3:d8:cc:6c:55:
44:69:6c:39:cb:15:01:ba:3e:c3:bb:d2:e3:56:3f:08:00:c7:
71:93:39:28:ba:c9:ee:06:9e:89:2c:c1:fe:8b:3b:53:0b:1f:
ee:3e:1c:70:71:b7:e7:0e:fc:b5:2a:cc:73:cf:02:ad:a7:96:
34:7e:a6:1a:05:06:77:16:a5:9a:fb:e3:0d:bb:2f:c9:95:3e:
5a:bd:49:15:23:b8:f2:82:a6:87:d5:7f:a3:f5:b6:7a:03:0d:
3b:24:2a:8e:d3:b2:31:96:f5:2a:ad:31:0f:3e:ec:03:88:d3:
49:f2:3a:8e:57:53:df:5a:06:39:11:2a:8f:70:78:b7:79:f1:
1b:50:4d:c6:6f:b3:bf:f9:04:54:cc:98:59:c1:3c:63:d2:4f:
8c:6c:d8:2e:e4:10:ec:ed:45:b3:5d:55:1d:80:17:00:79:b7:
45:0d:5c:31:de:c1:39:4a:05:d2:b8:dc:fd:64:59:9b:25:52:
8d:63:bb:db:52:e9:99:09:6d:6c:ea:92:e8:30:5f:b8:3c:80:
39:f8:73:15:5a:89:8c:9c:05:9f:41:00:28:05:48:10:86:eb:
3f:e4:fb:14:64:e7:ec:11:19:42:ed:8a:97:b4:48:1c:e3:f0:
6e:52:37:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdEaDwp57NcNSj3tJVPe8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMzEyNDdmMzU5YTZkNDkyZGM5OTQzYWUwZjAwZmM4YmUy
MTZjNzgwHhcNMjUxMTA0MDYwMDU3WhcNMjUxMTA1MDYwMDU3WjAzMTEwLwYDVQQD
Eyg4NmZhYmYzZmI0MGNkMzE5MWZiMDZjNjVjNzQ4NTA3Yzc5N2RlYzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWmB+gs9K4MinmbhTjKGTg5CULHI
5BPzyFtDV6tkwa2vOIziag/Qu6ix29wZs+ZuaGIL+myqwrlKyeuwPF/olxVBNzN5
IQ4VexcAiCSk6OBzb4eFNwccKNCBCYxSt5kQuVe3l9K7W9IgcZnvLIES9eExY6EP
WcWkVilrhSo3DxYDPIuZh+zapehvo7cLuUJ0IDC0Cn/rpu7DOONuUwVKqScRDxkV
3lFx6ezNev65IWhF9HyjYHGiqehBplp3Z5K8tyqgDBANhL6z8NdPN2+RwqSRbcqu
1cDz68O336c3Fh6e6ZOxj3yuG63AiLDLijLGPTiJfMR8NQpNGcVGkvkRrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIb6vz+0DNMZH7BsZcdIUHx5fewPMB8GA1UdIwQY
MBaAFLwxJH81mm1JLcmUOuDwD8i+IWx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zNDZiZWYtMGE1ZS00NDAwLTlmODQt
NTY4MDVjYTExYzMzLzEvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8zNDZiZWYtMGE1ZS00NDAwLTlmODQtNTY4MDVjYTExYzMz
LzEvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeYywfvLE
+rap0f14+9PYzGxVRGlsOcsVAbo+w7vS41Y/CADHcZM5KLrJ7gaeiSzB/os7Uwsf
7j4ccHG35w78tSrMc88CraeWNH6mGgUGdxalmvvjDbsvyZU+Wr1JFSO48oKmh9V/
o/W2egMNOyQqjtOyMZb1Kq0xDz7sA4jTSfI6jldT31oGOREqj3B4t3nxG1BNxm+z
v/kEVMyYWcE8Y9JPjGzYLuQQ7O1Fs11VHYAXAHm3RQ1cMd7BOUoF0rjc/WRZmyVS
jWO721LpmQltbOqS6DBfuDyAOfhzFVqJjJwFn0EAKAVIEIbrP+T7FGTn7BEZQu2K
l7RIHOPwblI30g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:02:43 2025 by rpki-client