Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
File: vJjaCfCkWkCPW38brm2R4zM9VzI.mft (raw, json)
Hash identifier: CsDEgKUxVwWR/18ameQr1eik9Tz7No6x9xtxv5immU4=
Subject key identifier: 0D:90:D3:DE:62:E1:32:C3:59:DF:18:20:92:8D:5F:8E:BE:B4:A4:E1
Authority key identifier: BC:98:DA:09:F0:A4:5A:40:8F:5B:7F:1B:AE:6D:91:E3:33:3D:57:32
Certificate issuer: /CN=bc98da09f0a45a408f5b7f1bae6d91e3333d5732
Certificate serial: 01995A1FD3FD1608A829AF9A9DF64CA5F4A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
Manifest number: 168D
Signing time: Thu 18 Sep 2025 00:00:59 +0000
Manifest this update: Thu 18 Sep 2025 00:00:59 +0000
Manifest next update: Fri 19 Sep 2025 00:00:59 +0000
Files and hashes: 1: fxhyywtkkeQkBb1LWBBLmBYmdhw.roa (hash: JEDR1+B65jcWiXG9Txje4CaMRNTaWS3SE4CY6nIrNeE=)
2: vJjaCfCkWkCPW38brm2R4zM9VzI.crl (hash: uTku8C5qRNOWlcNQox4L2nx0VZQDCAqPhCnDZlYXEM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 21:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5a:1f:d3:fd:16:08:a8:29:af:9a:9d:f6:4c:a5:f4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc98da09f0a45a408f5b7f1bae6d91e3333d5732
Validity
Not Before: Sep 18 00:00:59 2025 GMT
Not After : Sep 19 00:00:59 2025 GMT
Subject: CN=0d90d3de62e132c359df1820928d5f8ebeb4a4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:46:4c:a5:5f:f8:08:99:5c:b2:7d:15:f3:2b:
03:d8:68:da:70:dc:f7:03:f1:72:59:84:64:34:5f:
2f:a7:e6:8e:6e:e2:f2:80:8c:32:b3:54:ac:5e:89:
6d:07:1d:d4:9b:2e:15:03:30:fc:26:75:44:7d:8e:
09:58:43:09:be:7c:c7:78:0a:cd:0a:04:2b:18:a3:
44:83:cd:d4:54:d4:34:30:0d:b4:76:0f:ad:07:16:
b9:b4:a2:bf:2d:24:cd:d8:54:ff:e3:36:87:55:d3:
4c:56:d6:df:7c:24:59:3b:07:d1:32:63:b8:3d:80:
69:90:1c:66:b7:28:f3:64:56:e4:59:fe:d8:95:2e:
2f:35:f6:12:11:ed:bf:28:21:40:5e:7e:10:50:03:
d6:27:bf:64:36:d7:db:a1:10:95:ca:dd:8e:ea:78:
e3:d5:b8:49:7e:0f:27:59:b4:7a:a7:24:26:3a:cf:
e4:5c:47:d4:49:b2:9f:a5:45:93:53:c9:87:1d:71:
7b:c6:32:e3:b9:3a:20:16:01:2c:fe:d8:f8:4b:f9:
82:24:d1:86:2c:05:3f:4c:cf:ff:0c:98:44:e6:20:
ac:b8:79:c0:25:98:5e:fa:db:01:eb:63:67:83:14:
d1:8f:07:19:0b:c0:87:05:ae:79:f0:da:5f:e2:79:
58:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:90:D3:DE:62:E1:32:C3:59:DF:18:20:92:8D:5F:8E:BE:B4:A4:E1
X509v3 Authority Key Identifier:
keyid:BC:98:DA:09:F0:A4:5A:40:8F:5B:7F:1B:AE:6D:91:E3:33:3D:57:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:15:ff:08:44:77:fd:45:8b:3b:3c:20:ba:b4:22:35:0d:be:
c3:f9:f4:8a:37:cf:8a:f3:41:17:f7:a6:fa:33:f1:c5:f1:15:
77:bc:03:d0:55:19:a0:ba:2a:3b:2f:1e:8e:94:e1:91:0a:f8:
09:fa:cf:cb:55:8d:7c:0f:cb:b1:b3:0a:5e:1a:9f:49:bd:b2:
5e:26:27:b1:9f:5f:26:0d:d2:4a:7f:3b:c2:c5:13:29:03:6f:
43:93:32:a4:5c:84:d7:c0:16:05:fb:58:69:bb:ee:67:f5:f3:
84:b4:81:2e:e9:95:55:7a:b8:1a:ab:01:8b:06:94:05:5f:c1:
4d:b0:3b:09:c2:d3:6d:bf:b8:31:13:75:39:c2:6e:93:d7:4b:
13:f3:04:73:b4:8b:51:b8:d8:cc:0e:c2:a1:10:87:6f:54:80:
39:22:ed:6f:e6:09:e3:31:91:88:11:f7:5d:52:f2:73:94:0d:
ac:a5:ea:9c:36:2a:55:a4:26:2a:94:40:3c:ac:17:70:17:f5:
3d:44:4a:06:3a:3c:89:1e:57:68:b1:c7:5c:ca:03:4f:55:ec:
0b:07:17:ac:03:e1:f2:47:5a:f9:7a:59:e9:9b:79:ac:72:2a:
fd:0e:56:1e:72:6c:01:b7:f5:b5:76:2f:b7:ce:ea:9a:2d:22:
8e:7c:88:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlaH9P9FgioKa+anfZMpfSpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOThkYTA5ZjBhNDVhNDA4ZjViN2YxYmFlNmQ5MWUzMzMz
ZDU3MzIwHhcNMjUwOTE4MDAwMDU5WhcNMjUwOTE5MDAwMDU5WjAzMTEwLwYDVQQD
EygwZDkwZDNkZTYyZTEzMmMzNTlkZjE4MjA5MjhkNWY4ZWJlYjRhNGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEZMpV/4CJlcsn0V8ysD2GjacNz3
A/FyWYRkNF8vp+aObuLygIwys1SsXoltBx3Umy4VAzD8JnVEfY4JWEMJvnzHeArN
CgQrGKNEg83UVNQ0MA20dg+tBxa5tKK/LSTN2FT/4zaHVdNMVtbffCRZOwfRMmO4
PYBpkBxmtyjzZFbkWf7YlS4vNfYSEe2/KCFAXn4QUAPWJ79kNtfboRCVyt2O6njj
1bhJfg8nWbR6pyQmOs/kXEfUSbKfpUWTU8mHHXF7xjLjuTogFgEs/tj4S/mCJNGG
LAU/TM//DJhE5iCsuHnAJZhe+tsB62NngxTRjwcZC8CHBa558Npf4nlY4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2Q095i4TLDWd8YIJKNX46+tKThMB8GA1UdIwQY
MBaAFLyY2gnwpFpAj1t/G65tkeMzPVcyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkpqYUNmQ2tXa0NQVzM4YnJtMlI0ek05VnpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9mMmNkNWUtZmQxYy00YjQ3LWFhNjUt
NWU4NjExNjU4ODRjLzEvdkpqYUNmQ2tXa0NQVzM4YnJtMlI0ek05VnpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9mMmNkNWUtZmQxYy00YjQ3LWFhNjUtNWU4NjExNjU4ODRj
LzEvdkpqYUNmQ2tXa0NQVzM4YnJtMlI0ek05VnpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAxX/CER3
/UWLOzwgurQiNQ2+w/n0ijfPivNBF/em+jPxxfEVd7wD0FUZoLoqOy8ejpThkQr4
CfrPy1WNfA/LsbMKXhqfSb2yXiYnsZ9fJg3SSn87wsUTKQNvQ5MypFyE18AWBftY
abvuZ/XzhLSBLumVVXq4GqsBiwaUBV/BTbA7CcLTbb+4MRN1OcJuk9dLE/MEc7SL
UbjYzA7CoRCHb1SAOSLtb+YJ4zGRiBH3XVLyc5QNrKXqnDYqVaQmKpRAPKwXcBf1
PURKBjo8iR5XaLHHXMoDT1XsCwcXrAPh8kda+XpZ6Zt5rHIq/Q5WHnJsAbf1tXYv
t87qmi0ijnyI3Q==
-----END CERTIFICATE-----
Generated at Thu Sep 18 06:50:24 2025 by rpki-client