Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft
File: v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft (raw, json)
Hash identifier: jp7gF24eZUhlV8/Y7PpVmHqWDiaKRCakmmN6L3ppNtI=
Subject key identifier: 81:92:B6:E0:8B:4A:54:62:0F:97:C8:4A:F1:43:3E:4F:3A:C8:78:A9
Authority key identifier: BF:EA:AB:1B:A6:8E:87:C9:F7:AB:0D:90:50:BF:F9:F2:0A:62:67:DA
Certificate issuer: /CN=bfeaab1ba68e87c9f7ab0d9050bff9f20a6267da
Certificate serial: 019A4E18AD73B06E3BD9D2ED04F7060B4BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft
Manifest number: 13AA
Signing time: Tue 04 Nov 2025 09:00:31 +0000
Manifest this update: Tue 04 Nov 2025 09:00:31 +0000
Manifest next update: Wed 05 Nov 2025 09:00:31 +0000
Files and hashes: 1: Li-Y8dn1F69FZoMGQvQz_fZ7l4Y.roa (hash: caOJpFofpginvCZ1ci6afUcY092BORN7MXA50NlfY8Y=)
2: v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl (hash: aGjHlN7obGWggkRSV5Uhb/0BqkeIlHvSWCD7d3JYJOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ad:73:b0:6e:3b:d9:d2:ed:04:f7:06:0b:4b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfeaab1ba68e87c9f7ab0d9050bff9f20a6267da
Validity
Not Before: Nov 4 09:00:31 2025 GMT
Not After : Nov 5 09:00:31 2025 GMT
Subject: CN=8192b6e08b4a54620f97c84af1433e4f3ac878a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2a:69:e8:6b:07:bb:de:be:32:2b:fb:03:75:
ff:47:17:43:3a:81:37:56:48:79:32:f8:b8:c6:99:
61:43:e7:93:90:da:28:c3:4c:87:4c:2b:d2:f0:2d:
0e:42:83:38:48:5c:3a:5d:8d:7c:ea:ea:c0:2d:fc:
98:ff:a6:5d:74:0d:9d:d2:80:15:00:b4:a9:1c:a5:
69:e4:53:24:b1:ef:62:28:7f:05:c3:a4:4c:76:84:
d3:2b:5a:5d:92:67:18:11:68:63:ae:14:a2:66:33:
a3:fa:71:d4:38:7c:78:68:ba:f7:b8:5c:94:49:a1:
23:88:c6:f2:f6:d7:27:72:9e:7a:1b:f4:d7:c7:99:
85:e9:78:81:dd:a2:f1:8c:24:76:a2:94:6d:66:44:
a9:9d:7f:66:8b:e7:7b:f5:fd:35:44:ce:e6:9e:ea:
e6:11:78:e7:d6:25:de:be:f5:2b:0a:39:72:a9:63:
61:f0:aa:34:28:28:11:5f:a2:76:e8:c2:3c:eb:1c:
e3:a1:bd:d3:6c:7f:5b:06:55:95:ec:8f:2d:b2:e1:
a3:76:a3:ce:7a:62:0a:a5:bc:6a:a6:eb:37:1c:40:
68:fc:a4:fc:6e:a5:fd:be:f2:8e:3e:d4:0e:17:bb:
9f:93:29:c7:5a:50:4a:b9:b8:86:20:91:17:31:43:
43:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:92:B6:E0:8B:4A:54:62:0F:97:C8:4A:F1:43:3E:4F:3A:C8:78:A9
X509v3 Authority Key Identifier:
keyid:BF:EA:AB:1B:A6:8E:87:C9:F7:AB:0D:90:50:BF:F9:F2:0A:62:67:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:f1:01:87:62:97:1f:a8:63:01:ee:34:60:bf:40:66:b0:a0:
d7:78:3a:c9:6c:05:9b:e3:76:4e:b1:f4:34:1b:d1:c0:7c:78:
8f:7c:6b:ef:84:e4:54:b5:a8:b8:4b:37:d0:5e:b5:dd:ba:11:
f1:7e:df:67:79:90:28:a2:b4:a0:c2:6f:e0:e3:22:12:53:92:
4c:fe:90:41:cc:50:1a:d8:04:3a:9b:2d:36:53:2d:dd:8f:62:
e7:91:7b:8e:5d:9d:78:ab:78:ba:b5:b8:ba:84:f6:53:c3:23:
98:88:82:1c:8a:6d:75:bc:c1:d8:de:49:10:c7:5f:c3:35:95:
2f:e5:37:b3:b3:43:b1:2c:d5:da:ed:6c:81:b0:42:be:72:f8:
54:2b:82:a8:2d:cd:1e:2a:c3:2e:d9:6d:37:38:84:a8:44:ba:
89:24:f2:77:69:86:72:22:dd:c5:97:c8:b9:69:bc:58:bc:7b:
2d:73:c7:79:23:9d:ac:5a:b7:e1:39:84:40:29:ce:03:e3:a5:
5b:60:42:47:f1:44:79:67:6e:19:8a:a1:8b:13:64:e0:17:95:
f8:91:fe:2f:32:04:aa:de:e2:64:19:0e:c9:cd:bf:8c:32:d6:
c4:c2:2a:01:04:e9:08:a6:cb:7b:88:0d:75:33:10:61:f6:08:
15:02:1e:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGK1zsG472dLtBPcGC0uwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZWFhYjFiYTY4ZTg3YzlmN2FiMGQ5MDUwYmZmOWYyMGE2
MjY3ZGEwHhcNMjUxMTA0MDkwMDMxWhcNMjUxMTA1MDkwMDMxWjAzMTEwLwYDVQQD
Eyg4MTkyYjZlMDhiNGE1NDYyMGY5N2M4NGFmMTQzM2U0ZjNhYzg3OGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCpp6GsHu96+Miv7A3X/RxdDOoE3
Vkh5Mvi4xplhQ+eTkNoow0yHTCvS8C0OQoM4SFw6XY186urALfyY/6ZddA2d0oAV
ALSpHKVp5FMkse9iKH8Fw6RMdoTTK1pdkmcYEWhjrhSiZjOj+nHUOHx4aLr3uFyU
SaEjiMby9tcncp56G/TXx5mF6XiB3aLxjCR2opRtZkSpnX9mi+d79f01RM7mnurm
EXjn1iXevvUrCjlyqWNh8Ko0KCgRX6J26MI86xzjob3TbH9bBlWV7I8tsuGjdqPO
emIKpbxqpus3HEBo/KT8bqX9vvKOPtQOF7ufkynHWlBKubiGIJEXMUND8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGStuCLSlRiD5fISvFDPk86yHipMB8GA1UdIwQY
MBaAFL/qqxumjofJ96sNkFC/+fIKYmfaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdi1xckc2YU9oOG4zcXcyUVVMXzU4Z3BpWjlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xMzc3ODYtNDY2Yy00YjU4LWE3YWYt
ZjMzNzQxMjk1MTAxLzEvdi1xckc2YU9oOG4zcXcyUVVMXzU4Z3BpWjlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8xMzc3ODYtNDY2Yy00YjU4LWE3YWYtZjMzNzQxMjk1MTAx
LzEvdi1xckc2YU9oOG4zcXcyUVVMXzU4Z3BpWjlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx/EBh2KX
H6hjAe40YL9AZrCg13g6yWwFm+N2TrH0NBvRwHx4j3xr74TkVLWouEs30F613boR
8X7fZ3mQKKK0oMJv4OMiElOSTP6QQcxQGtgEOpstNlMt3Y9i55F7jl2deKt4urW4
uoT2U8MjmIiCHIptdbzB2N5JEMdfwzWVL+U3s7NDsSzV2u1sgbBCvnL4VCuCqC3N
HirDLtltNziEqES6iSTyd2mGciLdxZfIuWm8WLx7LXPHeSOdrFq34TmEQCnOA+Ol
W2BCR/FEeWduGYqhixNk4BeV+JH+LzIEqt7iZBkOyc2/jDLWxMIqAQTpCKbLe4gN
dTMQYfYIFQIeBA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:52 2025 by rpki-client