Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: ipJTsBpKL6qW0l36NDftbshSxFnDt81rREmOFkK94Ec=
Subject key identifier: 33:0F:CD:87:FD:A7:30:84:77:56:07:D9:FB:5A:C7:B4:BA:14:E8:B8
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 019A4E18B8DDBF9172ABB2BE73F78BB0CC2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 0B99
Signing time: Tue 04 Nov 2025 09:00:34 +0000
Manifest this update: Tue 04 Nov 2025 09:00:34 +0000
Manifest next update: Wed 05 Nov 2025 09:00:34 +0000
Files and hashes: 1: 1-joLXxcr_bVIX8GYv6pA9Fl0-sU.roa (hash: fC8xsMT8pkAhb0cnhW19TBbsU5HJIWYiSjKEjJGjv0I=)
2: sYPkj1N3no6PTM91c5Pov65EAC8.roa (hash: uAS0kma3H4GS4hrLx52tm2yalQVMm9OuSp2lJZ08j2k=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: Sx8hWFjqyvKaxiQCYwaU6Ooifs/xSpdiPV0pNHe5mzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b8:dd:bf:91:72:ab:b2:be:73:f7:8b:b0:cc:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Nov 4 09:00:34 2025 GMT
Not After : Nov 5 09:00:34 2025 GMT
Subject: CN=330fcd87fda73084775607d9fb5ac7b4ba14e8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b0:fd:c2:52:fa:9c:7c:eb:65:56:b0:fa:b3:
7f:eb:eb:a8:c7:d9:42:43:0e:7a:62:97:82:1e:36:
a2:3f:2f:29:e9:6d:17:05:a8:54:98:16:78:8c:28:
55:84:7b:72:f6:1e:3b:f7:f5:73:ea:fb:a5:b2:d5:
eb:26:c7:48:9a:54:99:49:d3:80:b8:3b:68:74:09:
21:57:a7:3a:b6:27:d9:ef:6f:44:b4:96:f8:31:dc:
20:14:b1:ed:7e:b5:bf:e7:99:69:30:9e:a9:e0:65:
2d:a2:6d:3a:24:b9:4e:40:68:76:e7:a7:81:83:38:
7a:fe:3a:83:e3:c6:58:1f:f3:16:26:6f:fa:b6:b7:
01:e0:ef:fb:5f:63:07:2a:f1:b2:58:13:f0:5a:73:
f8:fe:8c:c8:8b:a2:48:b5:40:b3:43:35:a6:ac:d9:
3e:76:26:80:3b:92:7d:b3:0d:e0:1b:87:2b:ac:c7:
24:20:4e:14:a7:db:a9:85:ba:c1:ab:2b:fe:a3:af:
40:60:d2:e1:9f:18:6a:80:2d:7c:d7:eb:f1:e9:91:
b9:70:b9:9e:36:86:e1:6e:79:83:3f:40:52:79:c5:
58:5d:b0:27:8d:bf:b3:30:c5:a4:58:62:4a:64:ee:
5f:ac:df:ba:3b:ca:29:30:1a:9f:72:86:9d:f4:c5:
6a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0F:CD:87:FD:A7:30:84:77:56:07:D9:FB:5A:C7:B4:BA:14:E8:B8
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:81:37:09:0d:fe:00:94:46:55:9e:6a:37:ef:7c:93:43:06:
5e:b0:a2:e7:f1:d9:03:ad:7d:5e:07:a3:72:f6:5f:48:e3:7e:
88:a4:c1:6c:ba:77:13:f9:20:1f:ad:4d:75:48:32:cb:a2:e9:
82:9d:8b:51:c7:e6:56:5a:45:e2:73:d4:2c:58:f6:cc:31:c7:
85:94:10:65:01:51:56:55:1e:11:7e:43:1f:0c:86:f3:a3:d7:
b0:85:d3:d3:75:9f:5c:72:aa:b0:98:5d:91:69:c7:38:79:f9:
7e:ab:a3:f5:22:3e:1d:40:63:aa:70:4e:c2:d4:fb:5c:40:2b:
f9:d3:36:77:ff:eb:e5:40:f3:fa:dd:d9:19:ca:b5:5f:75:15:
29:4d:8b:57:c0:36:ed:2b:9e:f9:82:a9:39:6c:9a:11:3d:47:
be:6c:61:60:2c:6f:f4:77:ad:09:29:31:ec:4d:ec:49:3f:e3:
ce:90:6f:d5:4a:1e:3f:cc:d1:89:c5:7c:8d:d7:66:d1:fc:22:
e2:7f:e4:50:69:c6:24:86:33:c1:74:4f:67:8d:67:04:6d:e3:
12:36:db:97:29:bd:0e:9b:7e:3e:72:d5:54:52:80:97:84:f2:
a2:80:2d:aa:fa:e0:0a:30:37:8b:be:ee:a4:14:8d:59:92:9d:
4c:7c:ab:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGLjdv5Fyq7K+c/eLsMwqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNjE0NGI0NTliY2UxMzlmMjczNGE0NGZiZGI0NmM5ODEz
MjliMmIwHhcNMjUxMTA0MDkwMDM0WhcNMjUxMTA1MDkwMDM0WjAzMTEwLwYDVQQD
EygzMzBmY2Q4N2ZkYTczMDg0Nzc1NjA3ZDlmYjVhYzdiNGJhMTRlOGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLD9wlL6nHzrZVaw+rN/6+uox9lC
Qw56YpeCHjaiPy8p6W0XBahUmBZ4jChVhHty9h479/Vz6vulstXrJsdImlSZSdOA
uDtodAkhV6c6tifZ729EtJb4MdwgFLHtfrW/55lpMJ6p4GUtom06JLlOQGh256eB
gzh6/jqD48ZYH/MWJm/6trcB4O/7X2MHKvGyWBPwWnP4/ozIi6JItUCzQzWmrNk+
diaAO5J9sw3gG4crrMckIE4Up9uphbrBqyv+o69AYNLhnxhqgC181+vx6ZG5cLme
NobhbnmDP0BSecVYXbAnjb+zMMWkWGJKZO5frN+6O8opMBqfcoad9MVqYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMPzYf9pzCEd1YH2ftax7S6FOi4MB8GA1UdIwQY
MBaAFL5hRLRZvOE58nNKRPvbRsmBMpsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zYjg0YmQtMTMzYi00M2Q5LWI5Y2Yt
MTdlZmE1N2IzOWQ3LzEvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zYjg0YmQtMTMzYi00M2Q5LWI5Y2YtMTdlZmE1N2IzOWQ3
LzEvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYE3CQ3+
AJRGVZ5qN+98k0MGXrCi5/HZA619XgejcvZfSON+iKTBbLp3E/kgH61NdUgyy6Lp
gp2LUcfmVlpF4nPULFj2zDHHhZQQZQFRVlUeEX5DHwyG86PXsIXT03WfXHKqsJhd
kWnHOHn5fquj9SI+HUBjqnBOwtT7XEAr+dM2d//r5UDz+t3ZGcq1X3UVKU2LV8A2
7Sue+YKpOWyaET1HvmxhYCxv9HetCSkx7E3sST/jzpBv1UoeP8zRicV8jddm0fwi
4n/kUGnGJIYzwXRPZ41nBG3jEjbblym9Dpt+PnLVVFKAl4TyooAtqvrgCjA3i77u
pBSNWZKdTHyruA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:23 2025 by rpki-client