Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
File: b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft (raw, json)
Hash identifier: YZw/2338WnQzs6x8s/fTbez+krndBKkcPXjEQcdduPk=
Subject key identifier: 3B:2E:99:91:17:1D:FA:20:36:5B:1B:D5:0A:4B:28:92:E8:45:DF:76
Authority key identifier: 6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
Certificate issuer: /CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Certificate serial: 019A4EF54ECDDA1D81980E26A4C10ECE22C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
Manifest number: 1459
Signing time: Tue 04 Nov 2025 13:01:30 +0000
Manifest this update: Tue 04 Nov 2025 13:01:30 +0000
Manifest next update: Wed 05 Nov 2025 13:01:30 +0000
Files and hashes: 1: EMuW5Z9DWUHZG18MkN4T9RSyVCo.roa (hash: bxVgw2um9ah/cRF/XmN35x0nCwDRiz2wAFfpllVfiIs=)
2: b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl (hash: hy58SHpRBEseqY9JISlpItHqZkE7M7GW6rcLFR8Ztlc=)
3: xZnyBjCkriJ1YeC3VfWZrgA556Q.roa (hash: 293GfITlnhmhe1K2eILEjZ2R6DzcMg4jFXcmpOzbL/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:4e:cd:da:1d:81:98:0e:26:a4:c1:0e:ce:22:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Validity
Not Before: Nov 4 13:01:30 2025 GMT
Not After : Nov 5 13:01:30 2025 GMT
Subject: CN=3b2e9991171dfa20365b1bd50a4b2892e845df76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:58:3f:71:d7:f9:15:e8:9a:15:fc:06:6e:b6:
82:65:b6:8c:05:ef:41:40:05:17:aa:18:90:e3:d0:
10:e5:05:5c:d2:6e:84:e9:b7:62:94:09:55:1a:e5:
d6:27:1e:e8:49:99:4a:bf:6d:d7:1b:a4:f5:ac:66:
85:1c:25:c8:b8:82:9d:bf:cb:b4:ad:bb:3d:cb:46:
2c:59:dc:9d:9f:3b:e8:8b:bf:f2:45:2e:57:45:15:
31:22:91:70:dd:74:c6:5b:58:3a:d8:d0:7c:f2:58:
62:7c:3f:b7:19:8a:27:17:37:c7:cb:59:15:17:a6:
c2:0a:4f:d0:46:75:d9:a7:6d:9f:47:6d:70:1d:e7:
36:4d:95:21:4b:4b:9b:89:9c:46:d1:04:c3:95:98:
e2:4f:16:ce:f7:27:d9:07:4a:72:70:c3:a1:d8:46:
92:06:26:2e:e1:8b:48:5f:80:30:01:e2:b3:04:1f:
76:50:5b:66:27:fe:7c:e1:25:a9:6c:85:0a:40:cc:
99:49:d0:54:1e:e6:95:64:10:67:ed:78:76:60:e9:
9e:4b:2e:56:eb:ea:f9:94:45:93:e0:85:50:64:8b:
8c:74:37:b2:5c:3c:c8:60:3d:7b:0e:73:95:0b:36:
21:1c:8f:b8:b9:7f:4f:76:d3:a0:b9:64:d4:e0:6b:
8c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2E:99:91:17:1D:FA:20:36:5B:1B:D5:0A:4B:28:92:E8:45:DF:76
X509v3 Authority Key Identifier:
keyid:6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5c:18:d5:a8:6f:28:12:71:b6:d3:d2:97:cd:ff:6f:e0:58:
b3:e1:7f:18:55:2f:70:e8:43:e9:7d:b3:06:3e:69:37:e3:05:
8b:8d:a4:f7:d8:0c:37:52:f2:b8:16:16:e5:5a:7e:e1:b7:db:
57:03:92:26:9d:42:4a:9d:9e:29:74:16:b0:13:bb:19:84:e7:
58:32:02:15:89:24:d3:f1:23:a6:66:25:e6:9d:4d:85:29:dc:
b4:2b:13:2f:62:ef:96:07:70:f9:29:1c:50:51:9a:22:6e:13:
03:30:1e:82:e9:fe:99:2d:8c:5a:d2:1e:91:f6:f9:ac:4b:36:
0d:a0:a4:2f:e2:b1:25:68:39:70:a2:1d:4e:ac:48:a2:89:3d:
4f:2e:c1:28:57:e5:92:d9:75:fa:ba:3e:db:d7:21:a6:b7:80:
a9:4d:a0:bb:89:cf:57:2e:89:14:94:c4:2f:06:f1:3a:72:10:
86:9d:94:7c:f4:cd:9d:4a:68:bd:44:b0:43:93:f7:36:aa:6b:
e2:c5:23:1b:88:d6:34:64:6c:13:48:97:5d:88:4f:63:70:09:
dd:49:c0:8b:0a:e5:8e:4e:43:8b:80:ad:21:53:4e:79:b1:69:
0d:6d:7b:7f:7e:cd:28:9e:82:0c:8e:b0:d9:a6:13:9b:f1:84:
b5:16:16:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9U7N2h2BmA4mpMEOziLIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZTU2MWY4NGM1YmFiMTdkNTAzYmY5M2QzYzNkMzI1YzJh
MjI1MmUwHhcNMjUxMTA0MTMwMTMwWhcNMjUxMTA1MTMwMTMwWjAzMTEwLwYDVQQD
EygzYjJlOTk5MTE3MWRmYTIwMzY1YjFiZDUwYTRiMjg5MmU4NDVkZjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVg/cdf5FeiaFfwGbraCZbaMBe9B
QAUXqhiQ49AQ5QVc0m6E6bdilAlVGuXWJx7oSZlKv23XG6T1rGaFHCXIuIKdv8u0
rbs9y0YsWdydnzvoi7/yRS5XRRUxIpFw3XTGW1g62NB88lhifD+3GYonFzfHy1kV
F6bCCk/QRnXZp22fR21wHec2TZUhS0ubiZxG0QTDlZjiTxbO9yfZB0pycMOh2EaS
BiYu4YtIX4AwAeKzBB92UFtmJ/584SWpbIUKQMyZSdBUHuaVZBBn7Xh2YOmeSy5W
6+r5lEWT4IVQZIuMdDeyXDzIYD17DnOVCzYhHI+4uX9PdtOguWTU4GuMCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsumZEXHfogNlsb1QpLKJLoRd92MB8GA1UdIwQY
MBaAFG/lYfhMW6sX1QO/k9PD0yXCoiUuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYi1WaC1FeGJxeGZWQTctVDA4UFRKY0tpSlM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82MjY2YWYtZmZiYi00NDYyLWJhYTYt
NTczOWVkODNjNjkxLzEvYi1WaC1FeGJxeGZWQTctVDA4UFRKY0tpSlM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC82MjY2YWYtZmZiYi00NDYyLWJhYTYtNTczOWVkODNjNjkx
LzEvYi1WaC1FeGJxeGZWQTctVDA4UFRKY0tpSlM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVwY1ahv
KBJxttPSl83/b+BYs+F/GFUvcOhD6X2zBj5pN+MFi42k99gMN1LyuBYW5Vp+4bfb
VwOSJp1CSp2eKXQWsBO7GYTnWDICFYkk0/EjpmYl5p1NhSnctCsTL2Lvlgdw+Skc
UFGaIm4TAzAegun+mS2MWtIekfb5rEs2DaCkL+KxJWg5cKIdTqxIook9Ty7BKFfl
ktl1+ro+29chpreAqU2gu4nPVy6JFJTELwbxOnIQhp2UfPTNnUpovUSwQ5P3Nqpr
4sUjG4jWNGRsE0iXXYhPY3AJ3UnAiwrljk5Di4CtIVNOebFpDW17f37NKJ6CDI6w
2aYTm/GEtRYWKw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:35 2025 by rpki-client