Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
File: _vkYxakzDbvm7uF8uaHWL7yFW94.mft (raw, json)
Hash identifier: p/J5CW8wh4OZLyu1AcNqW63cc/FSBbibXbOSOnlNqOQ=
Subject key identifier: DF:31:4B:23:DB:98:D9:2B:5D:1D:8F:02:79:14:8C:E3:D3:F8:16:AF
Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
Certificate issuer: /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Certificate serial: 019A4E50029D05FE9D1022648D521F5ABA5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
Manifest number: 0A33
Signing time: Tue 04 Nov 2025 10:00:57 +0000
Manifest this update: Tue 04 Nov 2025 10:00:57 +0000
Manifest next update: Wed 05 Nov 2025 10:00:57 +0000
Files and hashes: 1: _vkYxakzDbvm7uF8uaHWL7yFW94.crl (hash: GnVAKeyUPz0qmXWv8Hz9LVvorm66BzwG1gVc/iggf0Y=)
2: aeFVo5dh0x2s2x-G-DMeovNIBu0.roa (hash: aCQHOjIuExedt1H9Qi2wUbhVCXELk63ILm+7QLD2vmY=)
3: nhbcHBf3KyDRfxTTz6M2nv3FDrc.roa (hash: Zxdw2e4bDTlf7LQ65Hz/8o5/IiJ9rQjv2vVBLW/NpXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:50:02:9d:05:fe:9d:10:22:64:8d:52:1f:5a:ba:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Validity
Not Before: Nov 4 10:00:57 2025 GMT
Not After : Nov 5 10:00:57 2025 GMT
Subject: CN=df314b23db98d92b5d1d8f0279148ce3d3f816af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d0:52:a1:18:60:5e:78:99:82:fb:41:6c:8c:
cd:5c:0a:8a:b1:4e:08:10:60:3f:64:4b:7b:12:68:
30:de:6a:76:60:4f:ba:28:bc:54:c2:ed:ab:57:77:
fa:3a:70:67:1d:fd:2d:99:55:ee:72:fa:9b:70:49:
be:b3:39:68:cb:ee:14:59:7d:04:52:52:b0:c9:66:
3c:0c:28:07:10:82:59:11:0b:dd:48:3f:f3:a8:36:
3b:a6:4a:14:94:0c:38:05:1e:65:22:1d:0b:04:f8:
86:bd:83:c7:b7:56:c3:aa:fa:b6:2d:12:2a:c8:1b:
85:3b:43:59:55:69:d4:1b:2b:7e:d9:ea:49:7b:23:
c1:17:23:e0:fe:f0:36:2e:7c:fd:dd:a7:71:fc:35:
c3:52:c9:b3:a6:aa:17:0d:55:ad:18:dd:24:35:07:
e6:dd:3c:8a:72:f5:ed:85:f5:26:17:f9:3b:a3:0e:
c3:25:fe:a3:29:e0:8a:c3:9f:14:08:be:2a:6c:f3:
e8:00:9a:42:18:13:d8:d5:ed:6b:b0:90:d6:93:e5:
b3:17:1a:e9:8a:fa:b8:4e:f2:ae:71:7a:28:d5:68:
cf:32:05:2a:77:7a:88:f2:b1:9c:1c:2b:56:0e:22:
95:39:b1:42:7d:5c:9d:82:ad:d5:8e:73:3d:b8:7c:
e7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:31:4B:23:DB:98:D9:2B:5D:1D:8F:02:79:14:8C:E3:D3:F8:16:AF
X509v3 Authority Key Identifier:
keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:48:7e:b4:96:d2:0a:66:3f:d3:57:8e:80:3f:1b:21:35:83:
33:1c:87:55:9b:11:f7:fa:11:4e:a9:08:2a:ba:b2:bb:6f:58:
c3:83:a6:85:e6:41:4d:65:0b:f7:46:ac:79:e8:2d:56:f5:42:
c0:03:5f:5c:c2:d2:37:e5:9d:c9:51:54:47:f3:2f:ad:4e:93:
e9:7b:11:c9:88:73:b0:77:02:81:f1:97:93:66:bf:13:f2:c8:
ba:71:3e:bf:ad:49:01:9c:6c:7a:22:7a:7b:05:d0:2a:ad:13:
ea:f8:24:a7:6d:2a:0a:b4:b2:58:0c:ff:67:27:05:8d:42:13:
a4:21:5f:8a:6f:16:0e:ac:3a:97:33:50:1a:9d:75:ce:e7:23:
e7:9e:4e:78:1e:a7:86:db:ed:7f:35:eb:5f:bf:96:bb:65:3a:
0b:40:fa:d1:20:76:33:29:f5:32:0a:49:79:c8:86:61:63:41:
71:2f:b3:f8:a3:86:54:78:75:a4:dd:22:a3:8d:61:64:d8:17:
5c:f4:e1:8b:02:e4:98:b1:27:99:cc:72:aa:14:ed:ba:7e:7e:
42:07:b4:3b:25:36:1a:37:36:70:a1:13:c1:83:7d:c2:55:66:
61:70:1d:05:43:96:95:42:7e:d2:74:b7:92:3a:1b:4f:4a:73:
4b:3e:6f:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOUAKdBf6dECJkjVIfWrpeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZjkxOGM1YTkzMzBkYmJlNmVlZTE3Y2I5YTFkNjJmYmM4
NTViZGUwHhcNMjUxMTA0MTAwMDU3WhcNMjUxMTA1MTAwMDU3WjAzMTEwLwYDVQQD
EyhkZjMxNGIyM2RiOThkOTJiNWQxZDhmMDI3OTE0OGNlM2QzZjgxNmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9BSoRhgXniZgvtBbIzNXAqKsU4I
EGA/ZEt7Emgw3mp2YE+6KLxUwu2rV3f6OnBnHf0tmVXucvqbcEm+szloy+4UWX0E
UlKwyWY8DCgHEIJZEQvdSD/zqDY7pkoUlAw4BR5lIh0LBPiGvYPHt1bDqvq2LRIq
yBuFO0NZVWnUGyt+2epJeyPBFyPg/vA2Lnz93adx/DXDUsmzpqoXDVWtGN0kNQfm
3TyKcvXthfUmF/k7ow7DJf6jKeCKw58UCL4qbPPoAJpCGBPY1e1rsJDWk+WzFxrp
ivq4TvKucXoo1WjPMgUqd3qI8rGcHCtWDiKVObFCfVydgq3VjnM9uHzniwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8xSyPbmNkrXR2PAnkUjOPT+BavMB8GA1UdIwQY
MBaAFP75GMWpMw275u7hfLmh1i+8hVveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3ZrWXhha3pEYnZtN3VGOHVhSFdMN3lGVzk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lZDY1NWQtNTEwMi00OTMyLWIxZGIt
YmEyODg5YWZhYWRkLzEvX3ZrWXhha3pEYnZtN3VGOHVhSFdMN3lGVzk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lZDY1NWQtNTEwMi00OTMyLWIxZGItYmEyODg5YWZhYWRk
LzEvX3ZrWXhha3pEYnZtN3VGOHVhSFdMN3lGVzk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfEh+tJbS
CmY/01eOgD8bITWDMxyHVZsR9/oRTqkIKrqyu29Yw4OmheZBTWUL90aseegtVvVC
wANfXMLSN+WdyVFUR/MvrU6T6XsRyYhzsHcCgfGXk2a/E/LIunE+v61JAZxseiJ6
ewXQKq0T6vgkp20qCrSyWAz/ZycFjUITpCFfim8WDqw6lzNQGp11zucj555OeB6n
htvtfzXrX7+Wu2U6C0D60SB2Myn1MgpJeciGYWNBcS+z+KOGVHh1pN0io41hZNgX
XPThiwLkmLEnmcxyqhTtun5+Qge0OyU2Gjc2cKETwYN9wlVmYXAdBUOWlUJ+0nS3
kjobT0pzSz5vtw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:45 2025 by rpki-client