Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
File: vZoDUhhk_eVxr63vAfMpdZg9H2I.mft (raw, json)
Hash identifier: idBDbus32f6Irk0AkkxrcaM6vg815eDZEzSemNMPIIs=
Subject key identifier: 84:55:3A:08:CF:5D:A3:F8:D8:43:B7:E7:14:53:39:D1:79:D8:9D:16
Authority key identifier: BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
Certificate issuer: /CN=bd9a03521864fde571afadef01f32975983d1f62
Certificate serial: 019A52D1380AEDFD568F7F16493FEFDFFA83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
Manifest number: 01F4
Signing time: Wed 05 Nov 2025 07:00:34 +0000
Manifest this update: Wed 05 Nov 2025 07:00:34 +0000
Manifest next update: Thu 06 Nov 2025 07:00:34 +0000
Files and hashes: 1: RJNuysFIW66Gw4c0piXvnXkEo9o.roa (hash: /TsRrqxKejX5cWBdLvn7sFDNt5iNj6A7iHaePoLLWJk=)
2: vZoDUhhk_eVxr63vAfMpdZg9H2I.crl (hash: VXrxF0Db/UvY15Y1PT+MO6rtrYiWcasHxbXknyFp2Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:38:0a:ed:fd:56:8f:7f:16:49:3f:ef:df:fa:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9a03521864fde571afadef01f32975983d1f62
Validity
Not Before: Nov 5 07:00:34 2025 GMT
Not After : Nov 6 07:00:34 2025 GMT
Subject: CN=84553a08cf5da3f8d843b7e7145339d179d89d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:d6:99:65:05:00:63:cd:c6:da:b1:61:2a:
79:65:3c:77:21:94:f9:5c:6a:42:c9:45:f6:ae:1c:
2d:82:8e:c9:87:e9:b0:b6:df:a5:f3:e7:2d:c2:ee:
ce:01:90:41:da:e5:37:eb:89:86:e8:46:f1:20:cf:
03:a1:7e:36:d2:f6:4b:6b:1f:a1:39:97:dc:1f:7f:
1c:4b:ee:5d:05:b5:f8:fd:f9:a3:4c:7b:8a:8c:65:
f8:75:d4:a2:c7:51:83:d7:23:78:a0:d9:59:6e:6f:
0d:8a:b9:13:ec:5d:06:1a:ea:98:dc:d8:a3:8e:a4:
95:bb:79:51:e3:7a:d5:85:8e:74:17:86:94:6c:98:
75:55:a6:c7:4b:cd:c6:10:be:d2:71:c2:e5:4a:3a:
fc:82:46:ec:95:2c:15:1f:9e:d3:fb:90:12:6e:b9:
e7:23:e9:46:cd:98:82:30:9b:23:7d:92:6a:5b:e3:
f1:ce:54:e0:bb:f9:d2:d3:17:79:2f:e1:0a:ef:75:
8c:c6:49:c6:2c:50:bf:95:8d:9d:a6:f4:aa:bb:37:
00:ca:c1:f8:61:d2:3d:7e:dc:dc:c7:8e:61:a5:52:
e7:53:11:bf:2b:2f:4a:72:2e:df:47:a2:fc:a4:bb:
f7:a6:dd:80:d1:2d:ca:d1:8a:f3:3e:49:9b:07:b4:
5e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:55:3A:08:CF:5D:A3:F8:D8:43:B7:E7:14:53:39:D1:79:D8:9D:16
X509v3 Authority Key Identifier:
keyid:BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7c:15:60:96:2b:43:6b:e5:ac:c4:26:44:c1:21:80:d8:4f:
e9:aa:73:73:4c:80:c1:5c:37:14:6f:36:7d:f9:6f:77:81:ee:
b7:f7:cd:4a:cf:00:c0:9c:80:65:dc:6f:0c:eb:59:9f:ed:8c:
4c:56:4d:0d:2c:de:c5:42:db:72:e3:ff:73:ec:dc:97:04:c5:
95:0a:7f:a5:95:8d:0c:49:f6:8d:cd:89:48:f8:31:a1:ce:d7:
cf:c3:6b:05:62:ad:61:11:4a:b2:d5:7a:56:9a:c4:eb:ee:34:
09:ae:e1:cb:27:22:5e:a3:af:f0:cf:de:c2:73:d7:e0:49:40:
73:b4:cb:96:83:fe:d1:e8:bd:20:60:91:ee:8b:55:44:49:00:
aa:ca:a1:31:93:98:a8:38:9c:8a:45:61:b6:c6:d4:07:ec:aa:
b4:c7:94:a9:f5:82:78:f5:21:38:52:17:a9:a3:4f:c4:eb:c8:
a9:62:5e:b2:98:eb:cd:d1:fa:78:22:94:40:45:d9:56:7a:35:
95:e0:b3:c7:c7:97:f0:72:fc:a0:35:ee:2e:5b:68:65:4e:a9:
c3:52:5a:f0:b0:c7:1d:19:09:44:94:f3:6d:49:84:c3:dc:7b:
2f:dc:61:09:65:06:19:3c:a1:d2:ce:e7:24:fa:2a:09:08:3f:
93:1d:80:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0TgK7f1Wj38WST/v3/qDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOWEwMzUyMTg2NGZkZTU3MWFmYWRlZjAxZjMyOTc1OTgz
ZDFmNjIwHhcNMjUxMTA1MDcwMDM0WhcNMjUxMTA2MDcwMDM0WjAzMTEwLwYDVQQD
Eyg4NDU1M2EwOGNmNWRhM2Y4ZDg0M2I3ZTcxNDUzMzlkMTc5ZDg5ZDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkLWmWUFAGPNxtqxYSp5ZTx3IZT5
XGpCyUX2rhwtgo7Jh+mwtt+l8+ctwu7OAZBB2uU364mG6EbxIM8DoX420vZLax+h
OZfcH38cS+5dBbX4/fmjTHuKjGX4ddSix1GD1yN4oNlZbm8NirkT7F0GGuqY3Nij
jqSVu3lR43rVhY50F4aUbJh1VabHS83GEL7SccLlSjr8gkbslSwVH57T+5ASbrnn
I+lGzZiCMJsjfZJqW+PxzlTgu/nS0xd5L+EK73WMxknGLFC/lY2dpvSquzcAysH4
YdI9ftzcx45hpVLnUxG/Ky9Kci7fR6L8pLv3pt2A0S3K0YrzPkmbB7ReKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRVOgjPXaP42EO35xRTOdF52J0WMB8GA1UdIwQY
MBaAFL2aA1IYZP3lca+t7wHzKXWYPR9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlpvRFVoaGtfZVZ4cjYzdkFmTXBkWmc5SDJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9hZDU3MGUtN2UyMS00NjcxLWE3YmQt
Njc5NWU2Yzg3MjQ3LzEvdlpvRFVoaGtfZVZ4cjYzdkFmTXBkWmc5SDJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9hZDU3MGUtN2UyMS00NjcxLWE3YmQtNjc5NWU2Yzg3MjQ3
LzEvdlpvRFVoaGtfZVZ4cjYzdkFmTXBkWmc5SDJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3wVYJYr
Q2vlrMQmRMEhgNhP6apzc0yAwVw3FG82fflvd4Hut/fNSs8AwJyAZdxvDOtZn+2M
TFZNDSzexULbcuP/c+zclwTFlQp/pZWNDEn2jc2JSPgxoc7Xz8NrBWKtYRFKstV6
VprE6+40Ca7hyyciXqOv8M/ewnPX4ElAc7TLloP+0ei9IGCR7otVREkAqsqhMZOY
qDicikVhtsbUB+yqtMeUqfWCePUhOFIXqaNPxOvIqWJespjrzdH6eCKUQEXZVno1
leCzx8eX8HL8oDXuLltoZU6pw1Ja8LDHHRkJRJTzbUmEw9x7L9xhCWUGGTyh0s7n
JPoqCQg/kx2Adw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:31:23 2025 by rpki-client