Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
File: vvZlBYLADbslkc7cKYwM08WWirA.mft (raw, json)
Hash identifier: xq72hP471XB5Rr10gw0sEyjAwhL7EDDjpFZCZeiD3W8=
Subject key identifier: BF:AA:42:B6:CA:44:E1:78:18:05:D2:BE:21:71:90:10:3A:CA:33:8E
Authority key identifier: BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0
Certificate issuer: /CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
Certificate serial: 019A24AEAD3D5D07F0177A8C1D9D8D481C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
Manifest number: 15CA
Signing time: Mon 27 Oct 2025 08:00:18 +0000
Manifest this update: Mon 27 Oct 2025 08:00:18 +0000
Manifest next update: Tue 28 Oct 2025 08:00:18 +0000
Files and hashes: 1: VJcY17IQh2BSqR-lhhdapfFR2Jg.roa (hash: 42V4cyYK1j/bnIgnYxXURiJulSqpvLBcVAwt2BGPORo=)
2: vvZlBYLADbslkc7cKYwM08WWirA.crl (hash: +PfM/16B+6KBmklFD/q7fXzgiLwaeQvvjSfoi6KU2G0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:ad:3d:5d:07:f0:17:7a:8c:1d:9d:8d:48:1c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
Validity
Not Before: Oct 27 08:00:18 2025 GMT
Not After : Oct 28 08:00:18 2025 GMT
Subject: CN=bfaa42b6ca44e1781805d2be217190103aca338e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:db:47:37:43:4b:aa:61:4a:ac:42:7b:e1:1c:
72:81:2b:27:0a:b8:3d:42:6b:64:91:f8:78:89:4d:
2a:f8:c9:7a:c3:ce:55:d8:b5:74:94:a2:bb:4e:b4:
6d:2e:0e:48:38:23:c6:e6:6c:13:6a:ca:51:3a:2f:
25:84:ab:ca:54:fb:61:d1:46:86:a1:ad:6f:c7:52:
7c:26:0a:0b:32:ed:f5:23:b4:63:da:62:1a:91:4b:
ff:ca:10:e0:6a:fc:57:b2:d1:b8:1f:8c:fc:b6:a6:
eb:56:26:db:1b:a7:9a:06:34:2f:f5:2f:75:6b:10:
0f:05:f6:54:79:a3:6f:7c:8f:51:53:09:4c:ef:d3:
25:91:39:05:a2:d9:9d:57:8e:d8:27:e9:df:b9:07:
b5:61:a2:73:bf:1d:90:8a:06:ac:8c:b9:eb:d7:4f:
28:48:97:51:e1:12:20:86:a1:23:a2:c3:cb:bb:38:
81:11:f6:47:17:4c:7f:c0:81:b8:e9:71:20:4e:f3:
72:52:ad:ba:31:ac:7c:92:ac:3c:af:8d:76:c0:db:
e5:ab:06:e2:0f:ea:8d:e6:f2:77:6a:73:b2:4d:78:
a3:cc:26:eb:c1:b0:e7:81:4c:90:c6:3e:21:a6:4d:
fb:6f:61:8d:5d:33:9e:e4:5c:aa:60:e9:79:8e:41:
f6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AA:42:B6:CA:44:E1:78:18:05:D2:BE:21:71:90:10:3A:CA:33:8E
X509v3 Authority Key Identifier:
keyid:BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6b:b1:72:43:78:a1:9c:db:db:1a:63:04:7f:7d:f5:2d:06:
a1:b9:72:63:e1:19:50:d3:61:4b:fb:82:ee:f9:b5:73:bc:42:
d3:95:f7:3e:79:aa:a2:f5:3d:0a:ed:75:2a:84:df:4b:8a:14:
11:b1:de:59:05:04:aa:14:8d:3a:50:c0:2d:03:51:a4:f2:98:
69:12:f4:e8:1d:11:32:98:b7:85:c7:91:2b:44:94:10:9e:4c:
ab:5b:84:f1:b4:0e:87:60:a1:84:72:01:23:e0:c6:59:ed:3c:
3b:08:39:14:63:48:38:ba:b7:c8:0b:36:da:24:e5:d3:c4:ed:
af:c2:42:ec:6e:6e:c8:44:0b:63:02:c2:09:31:50:81:f3:20:
f9:ac:0a:7c:e3:81:a8:65:f4:aa:6e:3b:35:e0:ab:fa:44:33:
22:85:be:d9:40:49:d1:7f:e2:86:f5:54:84:aa:ac:2a:30:74:
d6:7e:a7:96:55:05:13:ef:60:30:ef:11:34:7d:a4:82:70:7e:
4f:bd:76:d7:53:73:0b:bb:73:65:db:c2:9a:f5:6d:70:01:56:
80:59:a0:ae:70:84:f7:c2:bb:5c:f3:fe:c9:5b:65:33:3a:61:
e2:8d:ac:b5:53:dc:bf:26:f2:e2:08:c3:cc:90:78:0e:77:3b:
07:8a:00:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokrq09XQfwF3qMHZ2NSBwDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZjY2NTA1ODJjMDBkYmIyNTkxY2VkYzI5OGMwY2QzYzU5
NjhhYjAwHhcNMjUxMDI3MDgwMDE4WhcNMjUxMDI4MDgwMDE4WjAzMTEwLwYDVQQD
EyhiZmFhNDJiNmNhNDRlMTc4MTgwNWQyYmUyMTcxOTAxMDNhY2EzMzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dtHN0NLqmFKrEJ74RxygSsnCrg9
Qmtkkfh4iU0q+Ml6w85V2LV0lKK7TrRtLg5IOCPG5mwTaspROi8lhKvKVPth0UaG
oa1vx1J8JgoLMu31I7Rj2mIakUv/yhDgavxXstG4H4z8tqbrVibbG6eaBjQv9S91
axAPBfZUeaNvfI9RUwlM79MlkTkFotmdV47YJ+nfuQe1YaJzvx2QigasjLnr108o
SJdR4RIghqEjosPLuziBEfZHF0x/wIG46XEgTvNyUq26Max8kqw8r412wNvlqwbi
D+qN5vJ3anOyTXijzCbrwbDngUyQxj4hpk37b2GNXTOe5FyqYOl5jkH2iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+qQrbKROF4GAXSviFxkBA6yjOOMB8GA1UdIwQY
MBaAFL72ZQWCwA27JZHO3CmMDNPFloqwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnZabEJZTEFEYnNsa2M3Y0tZd00wOFdXaXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9mZmMyMDQtZDRkMi00YTY3LTg1YWYt
ZjlhMzNmZjAxMWNiLzEvdnZabEJZTEFEYnNsa2M3Y0tZd00wOFdXaXJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9mZmMyMDQtZDRkMi00YTY3LTg1YWYtZjlhMzNmZjAxMWNi
LzEvdnZabEJZTEFEYnNsa2M3Y0tZd00wOFdXaXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2uxckN4
oZzb2xpjBH999S0GoblyY+EZUNNhS/uC7vm1c7xC05X3PnmqovU9Cu11KoTfS4oU
EbHeWQUEqhSNOlDALQNRpPKYaRL06B0RMpi3hceRK0SUEJ5Mq1uE8bQOh2ChhHIB
I+DGWe08Owg5FGNIOLq3yAs22iTl08Ttr8JC7G5uyEQLYwLCCTFQgfMg+awKfOOB
qGX0qm47NeCr+kQzIoW+2UBJ0X/ihvVUhKqsKjB01n6nllUFE+9gMO8RNH2kgnB+
T71211NzC7tzZdvCmvVtcAFWgFmgrnCE98K7XPP+yVtlMzph4o2stVPcvyby4gjD
zJB4Dnc7B4oAzA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 17:44:22 2025 by rpki-client