Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
File: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft (raw, json)
Hash identifier: 8R18dUiQYCQbdo1OSPj4D9rPJbsGK1s/YIc46Y5s5pY=
Subject key identifier: D4:CC:47:B9:81:A0:21:31:08:62:68:68:57:23:A8:C4:B6:6B:F7:29
Authority key identifier: BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
Certificate issuer: /CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Certificate serial: 019A72935DC2EF9E2D3673181694F75F3E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:00:51 +0000
Manifest this update: Tue 11 Nov 2025 11:00:51 +0000
Manifest next update: Wed 12 Nov 2025 11:00:51 +0000
Files and hashes: 1: 1rkUPHoUCa7mNvZ-1McSv4VTlL4.roa (hash: 7aGZcVrrNLU0uixa8/gBU4YvCztU5V0t53AcHm6cX3E=)
2: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl (hash: suPJbeaC2xKOSvOREcfjFikp+ohXIriXgov8YV/QqG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:5d:c2:ef:9e:2d:36:73:18:16:94:f7:5f:3e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Validity
Not Before: Nov 11 11:00:51 2025 GMT
Not After : Nov 12 11:00:51 2025 GMT
Subject: CN=d4cc47b981a02131086268685723a8c4b66bf729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:45:fa:be:65:cf:2c:7e:f4:e0:5a:d9:95:b7:
7c:bb:72:5f:18:9f:cb:ea:0b:3d:c2:24:07:bd:54:
78:9c:24:6f:f3:49:0b:bf:85:1d:84:04:d3:6e:27:
9f:35:6f:4b:66:ca:6f:0f:6b:a2:19:19:d4:05:a5:
52:93:3f:27:ae:5e:12:9f:71:7a:e7:b0:0e:9a:f0:
7a:14:27:56:a9:93:45:ef:e9:6c:c1:52:1c:70:e1:
b2:a1:cb:63:8d:41:28:4a:61:f2:1a:06:5b:76:41:
7a:18:e7:b6:1a:13:1a:d6:5d:ce:27:6a:61:95:32:
da:55:17:83:25:e5:ad:9b:ff:87:05:b3:33:66:d3:
39:90:0e:d9:d0:19:62:58:4e:ea:a6:41:a0:e0:41:
b7:4b:7d:f5:16:70:c3:25:7a:4b:7b:46:4a:44:01:
4f:db:b6:4f:0f:4d:67:57:ae:28:43:66:04:bd:27:
40:cd:fb:ab:75:38:09:1f:d1:7f:ad:e1:46:65:a9:
57:52:cf:15:ab:2e:ef:e6:36:d7:c4:2d:4f:a8:c8:
88:bb:35:c5:a7:63:fe:1c:b0:9b:85:21:b5:c0:7a:
ec:55:29:9d:b4:37:46:21:b7:d1:2d:eb:c3:c4:08:
8b:ad:49:58:2c:3d:de:0c:d0:81:57:cc:d3:b7:a0:
5e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CC:47:B9:81:A0:21:31:08:62:68:68:57:23:A8:C4:B6:6B:F7:29
X509v3 Authority Key Identifier:
keyid:BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f0:21:cb:5a:ea:aa:4e:e5:2e:08:27:12:c5:af:82:8f:29:
35:5f:02:3d:80:66:be:b0:55:2c:ad:78:b2:f8:39:5f:2d:79:
57:75:ec:ff:32:25:12:e0:7f:d4:29:68:6d:cb:a0:7a:6d:0f:
ec:27:42:0d:b0:49:41:6c:76:fb:e8:f1:66:9e:c1:72:70:6f:
67:95:d1:f8:88:ba:bc:06:ef:14:ae:01:ab:34:ba:a6:df:30:
23:fb:a6:61:f9:13:f4:e1:ce:e3:33:c4:35:2e:a0:bf:4e:02:
eb:63:cf:04:06:a1:3b:8d:c5:70:34:40:72:91:0a:06:96:87:
25:b1:de:16:82:02:55:1d:16:1a:49:f1:7a:ab:cc:3a:e6:57:
05:ac:20:e4:56:59:06:7b:46:e6:59:2f:01:48:34:81:58:4e:
8b:bc:9e:db:d5:c8:f8:1d:fa:8b:1e:1c:6b:f6:a5:de:28:69:
62:cd:93:98:f5:83:ea:83:f4:1a:6f:6f:9f:32:81:58:b7:09:
e0:6d:17:da:18:54:07:e5:2c:1b:08:e9:13:6b:37:d6:9b:13:
70:88:97:98:01:4a:d3:da:56:81:70:88:fa:63:07:aa:5b:04:
cc:e6:c9:c3:1a:c5:d2:f1:c1:25:b3:1e:ad:4f:4b:ba:bf:6e:
75:12:4e:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk13C754tNnMYFpT3Xz4lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMzAzM2ExMDJiM2I3OTEyYTM2NjMyMGY0NDM1YzUzZmI5
NzczZjQwHhcNMjUxMTExMTEwMDUxWhcNMjUxMTEyMTEwMDUxWjAzMTEwLwYDVQQD
EyhkNGNjNDdiOTgxYTAyMTMxMDg2MjY4Njg1NzIzYThjNGI2NmJmNzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0X6vmXPLH704FrZlbd8u3JfGJ/L
6gs9wiQHvVR4nCRv80kLv4UdhATTbiefNW9LZspvD2uiGRnUBaVSkz8nrl4Sn3F6
57AOmvB6FCdWqZNF7+lswVIccOGyoctjjUEoSmHyGgZbdkF6GOe2GhMa1l3OJ2ph
lTLaVReDJeWtm/+HBbMzZtM5kA7Z0BliWE7qpkGg4EG3S331FnDDJXpLe0ZKRAFP
27ZPD01nV64oQ2YEvSdAzfurdTgJH9F/reFGZalXUs8Vqy7v5jbXxC1PqMiIuzXF
p2P+HLCbhSG1wHrsVSmdtDdGIbfRLevDxAiLrUlYLD3eDNCBV8zTt6BeRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTMR7mBoCExCGJoaFcjqMS2a/cpMB8GA1UdIwQY
MBaAFLwwM6ECs7eRKjZjIPRDXFP7l3P0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkRBem9RS3p0NUVxTm1NZzlFTmNVX3VYY19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zMGNmMDctM2ZhOC00NGE2LTkzNWIt
ZjlhN2FjZDkxYmNjLzEvdkRBem9RS3p0NUVxTm1NZzlFTmNVX3VYY19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zMGNmMDctM2ZhOC00NGE2LTkzNWItZjlhN2FjZDkxYmNj
LzEvdkRBem9RS3p0NUVxTm1NZzlFTmNVX3VYY19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/Ahy1rq
qk7lLggnEsWvgo8pNV8CPYBmvrBVLK14svg5Xy15V3Xs/zIlEuB/1Clobcugem0P
7CdCDbBJQWx2++jxZp7BcnBvZ5XR+Ii6vAbvFK4BqzS6pt8wI/umYfkT9OHO4zPE
NS6gv04C62PPBAahO43FcDRAcpEKBpaHJbHeFoICVR0WGknxeqvMOuZXBawg5FZZ
BntG5lkvAUg0gVhOi7ye29XI+B36ix4ca/al3ihpYs2TmPWD6oP0Gm9vnzKBWLcJ
4G0X2hhUB+UsGwjpE2s31psTcIiXmAFK09pWgXCI+mMHqlsEzObJwxrF0vHBJbMe
rU9Lur9udRJOrg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:02 2025 by rpki-client