Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
File: vP76Crl0AEjYO0idnKTgKOD1z-8.mft (raw, json)
Hash identifier: JdgxpqBdov4rBzfmqtbrsOM4G+H9TPOIa+IS1Do+rTY=
Subject key identifier: BF:03:92:30:37:CD:A7:3B:12:72:5F:01:42:3E:C0:5E:45:53:56:48
Authority key identifier: BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF
Certificate issuer: /CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
Certificate serial: 019A4D3CC0FCB3B37401477BDACA1A48EF2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
Manifest number: 1269
Signing time: Tue 04 Nov 2025 05:00:18 +0000
Manifest this update: Tue 04 Nov 2025 05:00:18 +0000
Manifest next update: Wed 05 Nov 2025 05:00:18 +0000
Files and hashes: 1: 2TuJ468zw177jpyYFJB20BZ9Xpw.roa (hash: 3VZS4XpdpT/Xy05QO4Zu5eaSIrPsPgN7ySrg2oUytz0=)
2: vP76Crl0AEjYO0idnKTgKOD1z-8.crl (hash: PPxrj7gICAUNZ2ih/TYw+ij5NE5x8fivo3qSNIYRtm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:c0:fc:b3:b3:74:01:47:7b:da:ca:1a:48:ef:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
Validity
Not Before: Nov 4 05:00:18 2025 GMT
Not After : Nov 5 05:00:18 2025 GMT
Subject: CN=bf03923037cda73b12725f01423ec05e45535648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dc:fb:c6:6f:88:50:41:e4:57:d9:6d:c8:2d:
e7:b7:d0:d8:a6:7d:0e:22:27:8b:69:84:03:5b:7d:
3e:be:2a:8a:53:5d:79:eb:20:60:00:cc:1f:3a:6f:
e5:b4:ed:41:bb:6d:56:cd:53:45:1e:88:50:d3:a3:
22:18:27:00:13:33:e0:6b:d1:24:6a:39:40:f3:0e:
11:63:a8:0a:39:bc:ca:0d:2b:70:88:6e:46:fe:a6:
36:71:42:43:6c:2c:f6:6d:49:f2:28:1d:cc:a1:5e:
0c:e3:a7:3e:27:a7:aa:fd:06:bf:c3:de:ae:d5:39:
e9:91:a8:0c:fe:67:60:71:36:1f:cb:d9:26:57:84:
e2:f2:1a:10:b7:30:e4:4c:14:9a:c2:ab:38:6e:19:
c7:a9:35:e0:98:54:b8:70:7c:04:d8:40:27:ab:05:
d5:30:e3:8c:2f:90:6a:c8:37:87:8e:50:48:a0:49:
f0:5b:a1:33:37:de:b3:bf:91:fd:79:9a:82:e2:b3:
36:9f:7a:9a:63:54:99:2f:6a:28:73:d2:cb:65:53:
cb:71:70:32:5e:75:78:7c:10:6e:6b:fe:1c:f9:48:
5c:b1:69:10:8a:ab:aa:d1:b0:18:87:73:38:58:b1:
de:9d:53:6e:80:15:b3:0b:bc:29:d3:6c:b1:39:f6:
4d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:03:92:30:37:CD:A7:3B:12:72:5F:01:42:3E:C0:5E:45:53:56:48
X509v3 Authority Key Identifier:
keyid:BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b2:80:ff:14:2d:55:11:0e:cb:5e:d2:94:4f:49:5c:e0:f3:
dd:b6:7f:95:80:a0:44:93:86:aa:18:2d:30:c7:14:88:ee:52:
3a:bb:91:2e:7f:d8:69:49:a5:02:4e:7c:c4:a2:4c:03:8f:da:
c6:c1:46:0d:e1:bc:b0:40:ec:8f:6f:e5:08:16:ee:45:02:8f:
f7:40:0f:4a:d6:1e:df:cc:db:c0:67:27:64:db:56:4c:69:69:
7c:6d:7b:c7:2b:85:67:65:19:fd:84:36:b4:ff:47:74:d0:07:
d6:41:88:73:de:8a:a8:81:68:ff:b8:cf:87:98:fe:8e:ff:94:
25:18:09:bd:4d:fc:0f:6c:dc:31:ee:f1:65:f0:62:de:27:ff:
ad:d0:87:82:ed:43:97:b5:da:8f:89:f9:81:6f:e4:c4:e6:60:
66:5d:f4:5b:8f:55:44:55:43:ba:16:4d:a6:7c:cc:07:f5:c8:
54:94:65:76:d6:b3:35:7d:8b:e0:29:70:0e:8b:2c:4f:9c:bf:
43:45:f2:7c:ac:b8:d6:f1:98:45:ea:a2:64:15:c7:75:f2:82:
ac:03:37:0d:93:24:96:91:02:79:88:6e:b1:5e:78:43:22:76:
12:06:69:e0:d3:1d:58:70:d4:58:64:a3:aa:f9:5b:14:56:2f:
95:68:3d:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPMD8s7N0AUd72soaSO8tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmVmYTBhYjk3NDAwNDhkODNiNDg5ZDljYTRlMDI4ZTBm
NWNmZWYwHhcNMjUxMTA0MDUwMDE4WhcNMjUxMTA1MDUwMDE4WjAzMTEwLwYDVQQD
EyhiZjAzOTIzMDM3Y2RhNzNiMTI3MjVmMDE0MjNlYzA1ZTQ1NTM1NjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutz7xm+IUEHkV9ltyC3nt9DYpn0O
IieLaYQDW30+viqKU1156yBgAMwfOm/ltO1Bu21WzVNFHohQ06MiGCcAEzPga9Ek
ajlA8w4RY6gKObzKDStwiG5G/qY2cUJDbCz2bUnyKB3MoV4M46c+J6eq/Qa/w96u
1TnpkagM/mdgcTYfy9kmV4Ti8hoQtzDkTBSawqs4bhnHqTXgmFS4cHwE2EAnqwXV
MOOML5BqyDeHjlBIoEnwW6EzN96zv5H9eZqC4rM2n3qaY1SZL2ooc9LLZVPLcXAy
XnV4fBBua/4c+UhcsWkQiquq0bAYh3M4WLHenVNugBWzC7wp02yxOfZNYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8DkjA3zac7EnJfAUI+wF5FU1ZIMB8GA1UdIwQY
MBaAFLz++gq5dABI2DtInZyk4Cjg9c/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlA3NkNybDBBRWpZTzBpZG5LVGdLT0Qxei04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mYjhlZGItZTMwNC00NzE0LTk1MmUt
YzY2YmVhMWYxYWEyLzEvdlA3NkNybDBBRWpZTzBpZG5LVGdLT0Qxei04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9mYjhlZGItZTMwNC00NzE0LTk1MmUtYzY2YmVhMWYxYWEy
LzEvdlA3NkNybDBBRWpZTzBpZG5LVGdLT0Qxei04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLKA/xQt
VREOy17SlE9JXODz3bZ/lYCgRJOGqhgtMMcUiO5SOruRLn/YaUmlAk58xKJMA4/a
xsFGDeG8sEDsj2/lCBbuRQKP90APStYe38zbwGcnZNtWTGlpfG17xyuFZ2UZ/YQ2
tP9HdNAH1kGIc96KqIFo/7jPh5j+jv+UJRgJvU38D2zcMe7xZfBi3if/rdCHgu1D
l7Xaj4n5gW/kxOZgZl30W49VRFVDuhZNpnzMB/XIVJRldtazNX2L4ClwDossT5y/
Q0XyfKy41vGYReqiZBXHdfKCrAM3DZMklpECeYhusV54QyJ2EgZp4NMdWHDUWGSj
qvlbFFYvlWg9mg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:02 2025 by rpki-client