Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
File: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json)
Hash identifier: mEDWfJm0yRpTNWEuVbjTZP5CXcBuBQyknzlfsk2syZ0=
Subject key identifier: C1:F0:C7:FE:67:CC:DC:55:F2:B8:55:B6:94:F3:67:8A:7B:A0:8C:30
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 019A4E191B0E1A7BC5FD22DDEB64D5A5F38F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
Manifest number: 0B19
Signing time: Tue 04 Nov 2025 09:00:59 +0000
Manifest this update: Tue 04 Nov 2025 09:00:59 +0000
Manifest next update: Wed 05 Nov 2025 09:00:59 +0000
Files and hashes: 1: 4zZX5zJWUsfZ5zmG6bPbMr0lvbs.roa (hash: Qk/9tkVuHYR7bI8BB1K5v6WoVgCSt0kT7wqGusdLxvQ=)
2: eokrGDKKk0G74B46cfTWojQ52Jk.roa (hash: 3LPYckY4Mq2pqzQbZ2q+2fT9RSskgmzOaPcUGiyhlMY=)
3: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: iqClh7pYIV7gif8ytpNcLCRpOCzMA8UtG4G2Sy1g3XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:1b:0e:1a:7b:c5:fd:22:dd:eb:64:d5:a5:f3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Nov 4 09:00:59 2025 GMT
Not After : Nov 5 09:00:59 2025 GMT
Subject: CN=c1f0c7fe67ccdc55f2b855b694f3678a7ba08c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:9f:4f:9a:99:d4:08:57:31:aa:bc:90:98:
c7:5b:54:8f:3a:e6:66:95:5a:91:68:a0:a2:28:0d:
2e:00:cf:da:9d:e1:a2:d4:4f:66:4d:ba:a2:fb:79:
89:59:50:d6:07:83:77:de:8d:c7:84:dd:6f:18:5f:
72:05:c2:2b:4b:13:36:a2:b3:e7:53:32:53:c5:75:
e9:eb:93:02:83:46:a7:93:a6:f9:f2:ca:65:f6:3b:
48:d6:60:9d:a8:bf:47:96:2f:5b:0d:55:1b:34:df:
21:35:12:8b:07:62:81:dc:b5:c4:f2:d4:00:c0:06:
53:aa:2a:6a:ed:97:69:6a:75:f8:97:24:b6:16:b0:
4e:74:be:93:b7:10:7d:bf:3b:08:97:08:da:03:f6:
92:da:25:7e:b0:31:b0:32:83:95:13:5b:30:da:ae:
4f:7c:5e:41:95:27:9f:6a:a8:28:a3:a4:b8:ae:30:
5b:7d:6c:69:b4:88:65:69:8f:08:ce:60:a8:3f:ff:
21:4c:bb:07:62:0b:bd:8f:27:6c:17:45:e5:f6:f2:
dc:5a:4e:74:93:69:e8:d1:58:24:b9:87:de:a7:c9:
18:a5:51:48:91:34:2b:60:b2:51:01:dd:6c:a5:84:
28:91:e9:3b:a2:bc:bc:c1:21:35:29:56:fd:41:f7:
d8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F0:C7:FE:67:CC:DC:55:F2:B8:55:B6:94:F3:67:8A:7B:A0:8C:30
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:07:49:1b:ad:d2:f5:23:2a:65:55:09:59:83:68:bd:35:ea:
cd:eb:f1:e9:a0:a6:31:0c:e9:01:62:27:62:5d:cc:a9:b2:3c:
e8:78:7a:bc:03:82:5e:f6:22:0e:00:2c:54:38:ff:24:d7:a5:
57:a0:e6:ae:9a:d5:45:5d:7f:3f:7e:c5:f3:d3:34:d1:3b:b9:
7f:36:82:21:34:29:40:6f:68:06:cb:99:7a:7c:17:4c:ef:e5:
c8:c8:a2:85:99:49:af:0e:eb:04:5a:88:1d:67:4d:46:32:78:
5f:a1:01:83:0b:31:5b:4a:01:91:df:95:c1:df:1e:00:c9:be:
64:ee:1a:e1:db:ed:11:f4:3b:12:97:45:c0:99:92:c3:53:1f:
4a:cd:0e:b2:01:83:3a:81:bb:08:02:65:dc:02:01:54:fe:9d:
cb:a2:a3:5a:ed:13:37:4b:72:47:be:36:c0:0f:4b:b6:b4:20:
e8:a4:8c:ae:cc:f6:6e:ec:57:f1:74:a4:1c:30:0e:81:a8:98:
70:89:2c:87:80:c2:20:b2:fc:49:05:47:b9:32:58:d7:8a:2d:
43:b5:f4:1b:50:b8:a2:df:92:b1:f1:0c:26:7c:c6:47:e1:e5:
18:70:b0:24:13:80:e3:de:70:97:d4:f4:f5:26:d6:b8:0a:12:
5c:50:34:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGRsOGnvF/SLd62TVpfOPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNDQzZjdhYWU0N2UwYWIzOGJjZjhkNTM2Y2NhNjAzNTBk
MTcyNzAwHhcNMjUxMTA0MDkwMDU5WhcNMjUxMTA1MDkwMDU5WjAzMTEwLwYDVQQD
EyhjMWYwYzdmZTY3Y2NkYzU1ZjJiODU1YjY5NGYzNjc4YTdiYTA4YzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZWfT5qZ1AhXMaq8kJjHW1SPOuZm
lVqRaKCiKA0uAM/aneGi1E9mTbqi+3mJWVDWB4N33o3HhN1vGF9yBcIrSxM2orPn
UzJTxXXp65MCg0ank6b58spl9jtI1mCdqL9Hli9bDVUbNN8hNRKLB2KB3LXE8tQA
wAZTqipq7ZdpanX4lyS2FrBOdL6TtxB9vzsIlwjaA/aS2iV+sDGwMoOVE1sw2q5P
fF5BlSefaqgoo6S4rjBbfWxptIhlaY8IzmCoP/8hTLsHYgu9jydsF0Xl9vLcWk50
k2no0VgkuYfep8kYpVFIkTQrYLJRAd1spYQokek7ory8wSE1KVb9QffY6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHwx/5nzNxV8rhVtpTzZ4p7oIwwMB8GA1UdIwQY
MBaAFLxEP3quR+CrOLz41TbMpgNQ0XJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83NWI2OGItZmE1Ni00NGI3LWJmYmEt
NTAzNGYxOTk1M2EzLzEvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83NWI2OGItZmE1Ni00NGI3LWJmYmEtNTAzNGYxOTk1M2Ez
LzEvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwdJG63S
9SMqZVUJWYNovTXqzevx6aCmMQzpAWInYl3MqbI86Hh6vAOCXvYiDgAsVDj/JNel
V6DmrprVRV1/P37F89M00Tu5fzaCITQpQG9oBsuZenwXTO/lyMiihZlJrw7rBFqI
HWdNRjJ4X6EBgwsxW0oBkd+Vwd8eAMm+ZO4a4dvtEfQ7EpdFwJmSw1MfSs0OsgGD
OoG7CAJl3AIBVP6dy6KjWu0TN0tyR742wA9LtrQg6KSMrsz2buxX8XSkHDAOgaiY
cIksh4DCILL8SQVHuTJY14otQ7X0G1C4ot+SsfEMJnzGR+HlGHCwJBOA495wl9T0
9SbWuAoSXFA0Jw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:12 2025 by rpki-client