Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
File: vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft (raw, json)
Hash identifier: +VuXdWfwtOZj1MOxlCv+G1eg6L+362UhT4Tbh6fgds0=
Subject key identifier: F8:BA:E9:EC:1F:56:64:84:D9:22:4D:D7:3C:A2:2C:9C:34:6A:73:D6
Authority key identifier: BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58
Certificate issuer: /CN=bc75052b50256ba562904e6f134350d3e75ded58
Certificate serial: 019A4DE21FFEE80C7CE3ED7C279A6301C825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:56 +0000
Manifest this update: Tue 04 Nov 2025 08:00:56 +0000
Manifest next update: Wed 05 Nov 2025 08:00:56 +0000
Files and hashes: 1: vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl (hash: 2oHfqwfOFhNK4q4to8LNpNF4RYBm/dZBohLgz6gLFRE=)
2: yPRaM8Xt_LjcnEp6FMoPxSjubrg.roa (hash: 5MRfMsBo6t3UJiAKxq7MCbDbIZDyOCcBOja7hPHJABg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:1f:fe:e8:0c:7c:e3:ed:7c:27:9a:63:01:c8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc75052b50256ba562904e6f134350d3e75ded58
Validity
Not Before: Nov 4 08:00:56 2025 GMT
Not After : Nov 5 08:00:56 2025 GMT
Subject: CN=f8bae9ec1f566484d9224dd73ca22c9c346a73d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:86:b1:ab:1c:d7:02:2b:8c:86:0e:e2:55:
21:ef:5d:45:59:2f:59:f8:a9:25:bb:1b:9f:ae:6a:
08:52:e7:b1:11:35:0c:5c:84:d1:12:39:24:60:0e:
6e:3a:35:15:d9:5d:1a:60:6e:16:a0:bd:21:1c:64:
ff:75:5b:ab:8c:3f:f2:a8:f3:96:06:f2:04:a6:49:
0a:e5:36:8d:00:75:43:85:c1:41:14:87:18:b6:89:
54:dc:8b:09:bd:df:f5:cc:11:59:05:7e:c5:e6:57:
d1:50:08:ad:e1:0d:d3:1e:a3:a0:a4:4f:a2:c1:31:
38:7d:76:d1:bc:da:45:b9:27:0e:c4:3d:1a:20:ba:
9c:fa:48:23:e0:fc:4a:03:64:73:df:23:40:6e:41:
e5:7a:41:61:4e:2c:0b:12:15:96:db:24:52:cf:0c:
bc:4f:3f:f2:67:cf:25:cf:14:b6:35:32:96:4c:27:
5b:75:a4:9a:27:9f:05:d8:02:d2:1d:30:b2:cb:ad:
dd:48:85:c0:c7:5e:a2:58:c6:a5:6e:cf:88:78:76:
d1:4c:4c:55:ae:1f:37:fc:8f:0e:9f:b5:d5:23:41:
20:3a:49:5d:19:42:f9:92:7d:58:ee:1b:19:8c:77:
d2:50:8c:70:2c:49:df:3a:c2:7c:1d:e6:85:8a:08:
3c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BA:E9:EC:1F:56:64:84:D9:22:4D:D7:3C:A2:2C:9C:34:6A:73:D6
X509v3 Authority Key Identifier:
keyid:BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:06:4b:41:63:29:fc:0e:1b:49:18:e8:dd:5f:df:6d:6a:6b:
ed:1c:00:e8:8b:4c:b5:36:e9:32:80:2b:a7:a3:43:48:b6:ef:
00:19:de:88:2d:1e:05:e5:b8:44:d5:37:57:ea:21:2f:de:6b:
38:32:ed:83:49:91:71:13:e0:43:d2:c5:0f:85:91:49:e1:aa:
6c:63:c4:62:3d:71:88:1b:ef:fb:ec:2e:5b:3f:96:34:8d:d5:
5e:1d:77:f4:78:c5:e6:88:17:1d:fb:d1:24:2a:68:2e:96:27:
e5:74:eb:2a:e0:fb:96:86:20:46:68:f6:30:76:17:38:bb:b5:
3a:ba:c3:40:cf:19:94:e6:b8:3c:10:cd:4a:35:1f:f5:c6:ee:
fa:1e:87:6c:1d:4e:2c:38:5f:7f:d2:ea:ab:db:29:0a:f8:b7:
10:0a:07:5b:19:c4:be:00:f7:25:ec:b1:c3:d4:9e:af:02:0f:
5d:4c:98:27:9e:a4:e9:19:d4:f3:fd:9d:e3:65:85:de:d9:10:
08:4a:0f:94:1f:c9:ac:90:ab:f7:21:a7:33:16:56:6f:f8:d7:
de:22:77:1e:cd:50:18:51:44:d1:c1:42:7a:24:f7:4a:f5:2d:
3b:10:a7:5b:22:e6:a7:76:2f:1c:07:95:7c:74:9c:29:a1:21:
b3:f4:f7:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4h/+6Ax84+18J5pjAcglMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNzUwNTJiNTAyNTZiYTU2MjkwNGU2ZjEzNDM1MGQzZTc1
ZGVkNTgwHhcNMjUxMTA0MDgwMDU2WhcNMjUxMTA1MDgwMDU2WjAzMTEwLwYDVQQD
EyhmOGJhZTllYzFmNTY2NDg0ZDkyMjRkZDczY2EyMmM5YzM0NmE3M2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUmGsasc1wIrjIYO4lUh711FWS9Z
+KkluxufrmoIUuexETUMXITREjkkYA5uOjUV2V0aYG4WoL0hHGT/dVurjD/yqPOW
BvIEpkkK5TaNAHVDhcFBFIcYtolU3IsJvd/1zBFZBX7F5lfRUAit4Q3THqOgpE+i
wTE4fXbRvNpFuScOxD0aILqc+kgj4PxKA2Rz3yNAbkHlekFhTiwLEhWW2yRSzwy8
Tz/yZ88lzxS2NTKWTCdbdaSaJ58F2ALSHTCyy63dSIXAx16iWMalbs+IeHbRTExV
rh83/I8On7XVI0EgOkldGUL5kn1Y7hsZjHfSUIxwLEnfOsJ8HeaFigg8IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPi66ewfVmSE2SJN1zyiLJw0anPWMB8GA1UdIwQY
MBaAFLx1BStQJWulYpBObxNDUNPnXe1YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkhVRksxQWxhNlZpa0U1dkUwTlEwLWRkN1ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84ZmU4MmYtZTZjZi00YTYyLTg3ZGQt
ZWExM2ViNzk3ZThjLzEvdkhVRksxQWxhNlZpa0U1dkUwTlEwLWRkN1ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS84ZmU4MmYtZTZjZi00YTYyLTg3ZGQtZWExM2ViNzk3ZThj
LzEvdkhVRksxQWxhNlZpa0U1dkUwTlEwLWRkN1ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwZLQWMp
/A4bSRjo3V/fbWpr7RwA6ItMtTbpMoArp6NDSLbvABneiC0eBeW4RNU3V+ohL95r
ODLtg0mRcRPgQ9LFD4WRSeGqbGPEYj1xiBvv++wuWz+WNI3VXh139HjF5ogXHfvR
JCpoLpYn5XTrKuD7loYgRmj2MHYXOLu1OrrDQM8ZlOa4PBDNSjUf9cbu+h6HbB1O
LDhff9Lqq9spCvi3EAoHWxnEvgD3Jeyxw9SerwIPXUyYJ56k6RnU8/2d42WF3tkQ
CEoPlB/JrJCr9yGnMxZWb/jX3iJ3Hs1QGFFE0cFCeiT3SvUtOxCnWyLmp3YvHAeV
fHScKaEhs/T32A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:18 2025 by rpki-client