Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
File: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft (raw, json)
Hash identifier: GH2Wu9pkHcqhuXMg/ZEwfGqQ+mWhE85zDHxB8XV97es=
Subject key identifier: 6E:91:CA:A1:6C:60:6F:66:1E:4E:F2:72:F4:CB:74:99:40:E4:7D:B2
Authority key identifier: BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
Certificate issuer: /CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Certificate serial: 019A7301A2452C4E2E4A74F5BF5368A61EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 13:01:18 +0000
Manifest this update: Tue 11 Nov 2025 13:01:18 +0000
Manifest next update: Wed 12 Nov 2025 13:01:18 +0000
Files and hashes: 1: QGrvcoxIsYHGrK6BrR6dYV6XkJM.roa (hash: sWNP0/965vZch5nrsrQ4iKgd5GS8sH4fFHr8G2MSO3w=)
2: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl (hash: HFgmY2Gri+/aHModFN93XqshPFmA8jwLNtzTn76djHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:a2:45:2c:4e:2e:4a:74:f5:bf:53:68:a6:1e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Validity
Not Before: Nov 11 13:01:18 2025 GMT
Not After : Nov 12 13:01:18 2025 GMT
Subject: CN=6e91caa16c606f661e4ef272f4cb749940e47db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:21:b4:4f:07:bd:b1:40:d7:f5:4b:19:04:20:
a8:0c:f0:d8:ba:8b:6e:86:c8:bf:8c:ab:08:90:29:
81:5c:b8:1e:76:4b:9d:e8:ad:9e:30:94:08:69:b9:
11:fe:4a:53:68:fd:59:9f:f3:45:2d:de:03:db:45:
cf:b8:01:23:24:d1:76:b8:eb:a8:96:4f:e9:bf:1a:
99:6d:ab:a0:a5:a2:cf:bb:fc:35:98:e1:91:69:a6:
ee:c1:80:e2:8a:0b:3a:ec:52:6e:cd:a6:97:66:18:
36:0d:af:f6:c5:18:16:9b:25:ef:4b:23:4b:31:37:
62:d7:68:9f:77:51:a2:b8:db:b0:98:16:90:bc:e9:
fb:57:c4:6c:cc:87:65:e7:7c:eb:b7:ba:4b:1b:dc:
67:f6:23:33:53:16:e9:c1:0d:84:33:f0:fa:c8:ec:
92:af:7c:c9:46:86:c3:23:81:7a:f1:7c:0a:86:2a:
f8:6c:eb:7b:cb:73:9b:34:af:c9:56:e9:ba:d8:77:
a4:8a:9b:06:8c:1c:b7:73:7b:bf:5d:7d:28:99:82:
8a:9f:6a:50:7b:9b:7c:d8:0d:6a:8b:5c:60:9b:84:
af:6e:ce:56:79:34:88:c3:04:16:56:e1:51:cd:d5:
71:1c:97:47:e1:76:d3:a0:c7:f7:b4:b8:8e:d7:bd:
ac:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:91:CA:A1:6C:60:6F:66:1E:4E:F2:72:F4:CB:74:99:40:E4:7D:B2
X509v3 Authority Key Identifier:
keyid:BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ed:d5:20:ae:27:d2:2e:69:9d:78:87:12:d9:e0:21:3a:05:
fd:df:ad:f8:e3:97:39:e3:54:46:cf:9f:f1:6e:a1:8d:d4:ed:
c7:1a:30:9c:36:de:f6:5f:86:89:e4:79:d9:02:d9:b0:c0:f3:
b5:b6:e0:b6:e7:a4:02:3b:d2:e8:8e:e8:58:8a:fd:53:ad:52:
61:3a:18:12:1e:61:35:25:27:de:70:de:d5:5d:48:66:25:cb:
9c:bd:4c:2d:4f:17:10:a5:8f:28:da:29:c0:3b:ce:25:ca:13:
0c:84:7d:8d:65:13:b3:ae:10:44:2d:4f:53:8e:69:e4:93:b4:
89:19:c1:a3:6d:7e:53:69:a0:16:48:03:1c:ad:ef:11:0f:f5:
30:82:ce:b4:49:05:1a:72:f8:7b:4d:0d:97:93:0c:55:2b:78:
b1:52:d3:10:2b:0f:de:42:c5:95:94:e7:1d:f7:f2:52:0b:48:
24:bc:ed:5f:dc:90:63:07:ba:7b:a0:e0:b5:c6:80:51:c6:c0:
e9:0d:fa:70:22:da:af:1c:1b:64:d1:bb:38:9f:6e:ee:8e:ba:
9a:c8:21:1a:73:61:33:b1:cc:17:b6:d1:51:00:aa:c8:15:bc:
0b:f1:42:2a:4f:52:6f:64:ee:2b:b2:39:04:4f:ca:53:34:11:
63:84:8e:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAaJFLE4uSnT1v1Noph65MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMjBlNjRiMTg4MzFiYzk4NTI3Y2JlMGUxMDY3YzFhOTVk
MTY4N2QwHhcNMjUxMTExMTMwMTE4WhcNMjUxMTEyMTMwMTE4WjAzMTEwLwYDVQQD
Eyg2ZTkxY2FhMTZjNjA2ZjY2MWU0ZWYyNzJmNGNiNzQ5OTQwZTQ3ZGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSG0Twe9sUDX9UsZBCCoDPDYuotu
hsi/jKsIkCmBXLgedkud6K2eMJQIabkR/kpTaP1Zn/NFLd4D20XPuAEjJNF2uOuo
lk/pvxqZbaugpaLPu/w1mOGRaabuwYDiigs67FJuzaaXZhg2Da/2xRgWmyXvSyNL
MTdi12ifd1GiuNuwmBaQvOn7V8RszIdl53zrt7pLG9xn9iMzUxbpwQ2EM/D6yOyS
r3zJRobDI4F68XwKhir4bOt7y3ObNK/JVum62HekipsGjBy3c3u/XX0omYKKn2pQ
e5t82A1qi1xgm4Svbs5WeTSIwwQWVuFRzdVxHJdH4XbToMf3tLiO172s4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6RyqFsYG9mHk7ycvTLdJlA5H2yMB8GA1UdIwQY
MBaAFL8g5ksYgxvJhSfL4OEGfBqV0Wh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnlEbVN4aURHOG1GSjh2ZzRRWjhHcFhSYUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lYjM0MGYtODA1My00ZjVmLWEzYTUt
MjI5YjY0MDlmMmEwLzEvdnlEbVN4aURHOG1GSjh2ZzRRWjhHcFhSYUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9lYjM0MGYtODA1My00ZjVmLWEzYTUtMjI5YjY0MDlmMmEw
LzEvdnlEbVN4aURHOG1GSjh2ZzRRWjhHcFhSYUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEO3VIK4n
0i5pnXiHEtngIToF/d+t+OOXOeNURs+f8W6hjdTtxxownDbe9l+GieR52QLZsMDz
tbbgtuekAjvS6I7oWIr9U61SYToYEh5hNSUn3nDe1V1IZiXLnL1MLU8XEKWPKNop
wDvOJcoTDIR9jWUTs64QRC1PU45p5JO0iRnBo21+U2mgFkgDHK3vEQ/1MILOtEkF
GnL4e00Nl5MMVSt4sVLTECsP3kLFlZTnHffyUgtIJLztX9yQYwe6e6DgtcaAUcbA
6Q36cCLarxwbZNG7OJ9u7o66msghGnNhM7HMF7bRUQCqyBW8C/FCKk9Sb2TuK7I5
BE/KUzQRY4SOSQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:25:07 2025 by rpki-client