Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
File: VQt8DIuuYQ9-UZwEhaR3O860jas.mft (raw, json)
Hash identifier: FpT/9bx1k9gnX5izt4gyxWVLAXgITNQV8uFHxtfe8J4=
Subject key identifier: 9D:79:BE:75:4A:11:F4:0B:4C:79:10:71:6D:A4:62:A1:E2:04:CD:87
Authority key identifier: 55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
Certificate issuer: /CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Certificate serial: 019A18E1EE1EF4818A03101F36286E422038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
Manifest number: 16F4
Signing time: Sat 25 Oct 2025 01:00:50 +0000
Manifest this update: Sat 25 Oct 2025 01:00:50 +0000
Manifest next update: Sun 26 Oct 2025 01:00:50 +0000
Files and hashes: 1: 3qH8ZS9wbp4ZckrapmstLsBtl4U.roa (hash: 15PfLViKUV8ieAONMSTBZ+uuNJdfqoHQHR26dEyF8eQ=)
2: 5puypGdPqGafWp1AyvNSb1EuBNw.roa (hash: qaaid804rsK3hU7FOxciCy5ptxREK/wMCBWzAUs6cK0=)
3: VQt8DIuuYQ9-UZwEhaR3O860jas.crl (hash: AGDJ40VkwuERkq2BWQMqty/pDPMJGZm+3uKX68qRxHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:e1:ee:1e:f4:81:8a:03:10:1f:36:28:6e:42:20:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Validity
Not Before: Oct 25 01:00:50 2025 GMT
Not After : Oct 26 01:00:50 2025 GMT
Subject: CN=9d79be754a11f40b4c7910716da462a1e204cd87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:3c:00:f1:60:d0:6e:f6:3c:0d:d8:d4:6b:
9d:1e:11:ed:98:25:4b:06:b9:e7:67:55:ad:3b:e3:
6e:3d:ec:0d:3e:82:9a:68:f8:c1:6f:02:bd:dc:cd:
fd:22:4c:4d:7f:5a:1e:08:ff:70:15:54:33:99:53:
b6:1c:b5:2a:92:4b:76:b1:fe:39:f6:88:b9:83:88:
93:41:9c:e3:ca:0b:0f:0e:5f:13:ff:24:d6:c9:e7:
bc:24:34:23:bf:ce:e1:9c:08:e4:cd:fc:68:4d:99:
5b:29:d2:a2:37:ca:55:cd:5c:5a:80:cd:87:8a:98:
f7:0e:7b:30:10:8a:9d:9f:7b:37:15:25:9a:30:05:
48:2f:5b:b2:ae:95:46:af:61:a0:75:90:00:38:aa:
a7:99:8d:80:d7:37:af:6e:36:cb:0f:48:a0:93:4b:
b0:35:ee:7f:97:fd:3c:44:f7:09:dc:32:12:84:0e:
30:3e:39:1d:2d:45:a5:89:5b:74:3a:8c:c0:c0:0f:
0b:74:90:92:de:bd:71:b6:de:38:2f:9a:74:9f:bd:
ae:79:01:4c:b8:65:18:cb:07:b3:6c:7c:b8:a8:77:
e8:50:3b:eb:a9:ab:69:80:cc:0d:b8:8b:60:10:ec:
54:e0:d2:39:00:2b:00:b1:5c:fb:13:33:43:03:22:
df:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:79:BE:75:4A:11:F4:0B:4C:79:10:71:6D:A4:62:A1:E2:04:CD:87
X509v3 Authority Key Identifier:
keyid:55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:81:07:aa:97:0b:69:51:6e:2f:ab:81:2d:a9:2c:e3:70:91:
60:14:d5:9b:e0:f2:a5:70:c6:df:76:bc:c9:99:98:0e:23:3c:
64:af:74:5e:f1:d5:dc:ef:07:e9:6e:eb:87:cb:f1:c8:97:aa:
a8:7e:ad:6f:22:2a:5e:d6:a0:47:32:7b:f5:f5:a7:3a:c0:0f:
fd:d2:2e:fa:c2:85:02:bb:10:9d:54:fd:59:3f:d7:43:4e:b6:
97:83:52:92:39:1c:b5:88:e1:71:80:f4:c6:e9:2d:38:7f:76:
73:31:a9:9e:a7:9a:b9:45:3e:63:ae:e9:50:7e:e2:02:9e:7b:
e5:16:47:ae:c9:5b:60:76:3f:7f:be:7e:8a:da:a5:ba:c2:d0:
ea:b3:60:43:a1:ce:d7:1c:6c:41:91:64:38:18:a3:d5:cc:60:
7d:13:46:e4:71:f2:2a:b9:e4:31:49:55:ab:9b:f4:9a:25:39:
67:8c:f6:19:d7:05:ab:46:5e:3c:c2:fc:37:3d:2e:d8:82:fc:
fc:21:db:33:87:2f:c4:27:bd:d0:b7:8b:13:f7:12:c7:f9:f4:
e6:fb:99:c2:e7:c1:d8:8a:e8:80:3e:0d:95:f5:94:aa:92:cd:
a3:35:98:58:b9:21:fb:6a:d2:3e:e3:ac:67:9d:e3:2b:11:31:
2d:1f:79:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoY4e4e9IGKAxAfNihuQiA4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MGI3YzBjOGJhZTYxMGY3ZTUxOWMwNDg1YTQ3NzNiY2Vi
NDhkYWIwHhcNMjUxMDI1MDEwMDUwWhcNMjUxMDI2MDEwMDUwWjAzMTEwLwYDVQQD
Eyg5ZDc5YmU3NTRhMTFmNDBiNGM3OTEwNzE2ZGE0NjJhMWUyMDRjZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMc8APFg0G72PA3Y1GudHhHtmCVL
BrnnZ1WtO+NuPewNPoKaaPjBbwK93M39IkxNf1oeCP9wFVQzmVO2HLUqkkt2sf45
9oi5g4iTQZzjygsPDl8T/yTWyee8JDQjv87hnAjkzfxoTZlbKdKiN8pVzVxagM2H
ipj3DnswEIqdn3s3FSWaMAVIL1uyrpVGr2GgdZAAOKqnmY2A1zevbjbLD0igk0uw
Ne5/l/08RPcJ3DIShA4wPjkdLUWliVt0OozAwA8LdJCS3r1xtt44L5p0n72ueQFM
uGUYywezbHy4qHfoUDvrqatpgMwNuItgEOxU4NI5ACsAsVz7EzNDAyLfHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ15vnVKEfQLTHkQcW2kYqHiBM2HMB8GA1UdIwQY
MBaAFFULfAyLrmEPflGcBIWkdzvOtI2rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlF0OERJdXVZUTktVVp3RWhhUjNPODYwamFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hZWRiMDMtYjA0Yy00MjEyLTgxM2It
ZmYyNWJhNTk5MDMxLzEvVlF0OERJdXVZUTktVVp3RWhhUjNPODYwamFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hZWRiMDMtYjA0Yy00MjEyLTgxM2ItZmYyNWJhNTk5MDMx
LzEvVlF0OERJdXVZUTktVVp3RWhhUjNPODYwamFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcoEHqpcL
aVFuL6uBLaks43CRYBTVm+DypXDG33a8yZmYDiM8ZK90XvHV3O8H6W7rh8vxyJeq
qH6tbyIqXtagRzJ79fWnOsAP/dIu+sKFArsQnVT9WT/XQ062l4NSkjkctYjhcYD0
xuktOH92czGpnqeauUU+Y67pUH7iAp575RZHrslbYHY/f75+itqlusLQ6rNgQ6HO
1xxsQZFkOBij1cxgfRNG5HHyKrnkMUlVq5v0miU5Z4z2GdcFq0ZePML8Nz0u2IL8
/CHbM4cvxCe90LeLE/cSx/n05vuZwufB2IrogD4NlfWUqpLNozWYWLkh+2rSPuOs
Z53jKxExLR95XA==
-----END CERTIFICATE-----
Generated at Sat Oct 25 05:58:24 2025 by rpki-client