Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
File: _-vVS_BapQ7OnFJtDNVd5ivbEfs.mft (raw, json)
Hash identifier: H/Uvoa+0vFjlFlFgpV6rHP0Vsu7hVGJzQQw6l/vCtf8=
Subject key identifier: 9F:54:42:4C:34:DC:0D:BB:E1:0A:0F:29:EA:10:1A:CD:3E:8D:5B:BC
Authority key identifier: FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB
Certificate issuer: /CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb
Certificate serial: 019A4EF4FDDCD9F2354257AD54B04A2BC72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:09 +0000
Manifest this update: Tue 04 Nov 2025 13:01:09 +0000
Manifest next update: Wed 05 Nov 2025 13:01:09 +0000
Files and hashes: 1: JL56luCvuDGX5I8C7rCb_vRgTps.roa (hash: VNaKz+fumiDvVVA3InCplAYx5jTevb5UEEZ//o1jyAo=)
2: _-vVS_BapQ7OnFJtDNVd5ivbEfs.crl (hash: VET70MkdcbrIBL63KWsrxK2E2hiFZ7T3ihfknBbFmSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:fd:dc:d9:f2:35:42:57:ad:54:b0:4a:2b:c7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb
Validity
Not Before: Nov 4 13:01:09 2025 GMT
Not After : Nov 5 13:01:09 2025 GMT
Subject: CN=9f54424c34dc0dbbe10a0f29ea101acd3e8d5bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ca:74:93:12:f6:f0:82:8e:39:e9:3f:0f:35:
99:1c:64:55:a8:ab:a1:c8:49:f2:12:d9:68:0e:9a:
b0:45:86:8a:24:bb:65:64:b0:fb:11:e1:da:42:bb:
01:b7:61:50:76:c3:11:80:5a:36:98:24:ac:ed:9c:
31:07:34:be:b3:3e:21:e7:f6:b8:19:a6:0c:0e:bf:
12:40:84:ce:e3:79:1d:9b:9c:34:66:87:bf:49:a5:
c2:4d:0c:c8:90:1d:61:d3:52:fe:be:db:6b:27:54:
87:8b:8c:0c:42:b6:c9:e5:b7:53:84:d2:f2:77:7f:
b3:53:fc:f0:ab:21:50:ee:e3:99:76:bd:53:0d:0d:
da:05:7e:c0:9c:01:b2:7b:43:a2:7b:ca:ec:2f:75:
0c:93:d6:d7:39:31:6f:eb:a8:24:31:16:4b:a4:78:
24:95:ab:cc:4e:35:43:6c:24:c4:8b:52:9a:69:65:
d5:90:41:1a:de:c5:2a:2d:25:14:a7:cb:a9:f6:7b:
b1:8d:e9:85:de:fd:1a:53:6a:b9:2a:67:dd:4e:30:
02:bc:ed:2d:48:70:1b:65:d5:02:49:7a:4d:fa:34:
9f:b7:94:f7:14:92:ac:b5:50:6e:cc:76:9f:a4:d9:
c3:bc:e9:1b:3f:42:e9:dc:53:ad:8c:45:0d:e9:72:
06:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:54:42:4C:34:DC:0D:BB:E1:0A:0F:29:EA:10:1A:CD:3E:8D:5B:BC
X509v3 Authority Key Identifier:
keyid:FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:8f:8b:9d:1a:85:16:f7:cb:0c:f1:21:50:f8:e8:cd:7c:8a:
ec:56:77:2d:7f:9f:2b:23:9d:a8:00:b8:28:19:00:5e:a3:42:
88:1c:13:ce:23:7d:70:e7:39:cc:46:1e:5b:2f:ed:61:6f:f3:
61:48:9e:77:eb:81:14:cf:ae:21:77:43:71:79:bd:4b:b4:5d:
c4:fb:20:63:09:a0:83:e8:a5:f9:46:94:8d:5a:0c:13:d7:cc:
54:1c:70:41:b4:c1:98:f4:48:fc:87:3e:db:38:25:dd:f0:10:
bc:2e:d7:a4:4c:93:57:a7:4b:e0:8a:ad:42:c1:86:25:b9:85:
8b:90:cc:05:8b:fc:fa:0d:23:2c:c8:15:47:4c:8e:44:c9:be:
35:c2:c5:ac:08:ee:ff:4a:b5:b1:02:47:ef:07:38:ab:8a:f2:
25:1c:c4:3c:48:65:3b:8c:65:59:64:4d:f6:64:d2:79:37:96:
85:a0:28:cf:8d:dc:db:ea:79:ae:86:08:9b:b7:61:05:a7:ec:
a6:51:3f:ce:d2:f5:f2:a9:67:90:91:3b:c4:7f:83:13:ae:fa:
be:5d:fd:e4:af:83:7a:81:7b:91:46:3c:a6:c0:d4:02:9e:8e:
f2:0c:24:66:e0:e4:23:72:90:5c:5e:a7:bd:44:c8:be:7a:b7:
57:e0:6e:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9P3c2fI1QletVLBKK8crMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZWJkNTRiZjA1YWE1MGVjZTljNTI2ZDBjZDU1ZGU2MmJk
YjExZmIwHhcNMjUxMTA0MTMwMTA5WhcNMjUxMTA1MTMwMTA5WjAzMTEwLwYDVQQD
Eyg5ZjU0NDI0YzM0ZGMwZGJiZTEwYTBmMjllYTEwMWFjZDNlOGQ1YmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusp0kxL28IKOOek/DzWZHGRVqKuh
yEnyEtloDpqwRYaKJLtlZLD7EeHaQrsBt2FQdsMRgFo2mCSs7ZwxBzS+sz4h5/a4
GaYMDr8SQITO43kdm5w0Zoe/SaXCTQzIkB1h01L+vttrJ1SHi4wMQrbJ5bdThNLy
d3+zU/zwqyFQ7uOZdr1TDQ3aBX7AnAGye0Oie8rsL3UMk9bXOTFv66gkMRZLpHgk
lavMTjVDbCTEi1KaaWXVkEEa3sUqLSUUp8up9nuxjemF3v0aU2q5KmfdTjACvO0t
SHAbZdUCSXpN+jSft5T3FJKstVBuzHafpNnDvOkbP0Lp3FOtjEUN6XIGswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9UQkw03A274QoPKeoQGs0+jVu8MB8GA1UdIwQY
MBaAFP/r1UvwWqUOzpxSbQzVXeYr2xH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXy12VlNfQmFwUTdPbkZKdEROVmQ1aXZiRWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85MTU5MmUtYWViZS00MmI2LTgwODIt
NmZkNjdhOTJmMThmLzEvXy12VlNfQmFwUTdPbkZKdEROVmQ1aXZiRWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC85MTU5MmUtYWViZS00MmI2LTgwODItNmZkNjdhOTJmMThm
LzEvXy12VlNfQmFwUTdPbkZKdEROVmQ1aXZiRWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnI+LnRqF
FvfLDPEhUPjozXyK7FZ3LX+fKyOdqAC4KBkAXqNCiBwTziN9cOc5zEYeWy/tYW/z
YUied+uBFM+uIXdDcXm9S7RdxPsgYwmgg+il+UaUjVoME9fMVBxwQbTBmPRI/Ic+
2zgl3fAQvC7XpEyTV6dL4IqtQsGGJbmFi5DMBYv8+g0jLMgVR0yORMm+NcLFrAju
/0q1sQJH7wc4q4ryJRzEPEhlO4xlWWRN9mTSeTeWhaAoz43c2+p5roYIm7dhBafs
plE/ztL18qlnkJE7xH+DE676vl395K+DeoF7kUY8psDUAp6O8gwkZuDkI3KQXF6n
vUTIvnq3V+BuaQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:22 2025 by rpki-client