Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft
File: vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft (raw, json)
Hash identifier: xkuFjShBYu8ahoabEQcEcNAtQOmx5ONlKKR+BV2renQ=
Subject key identifier: 53:28:FC:B1:B8:03:F3:70:09:25:08:BA:96:F2:36:C0:27:19:99:57
Authority key identifier: BC:C8:60:D9:54:97:4D:CA:91:D5:B3:47:B6:3B:22:65:36:67:DA:6D
Certificate issuer: /CN=bcc860d954974dca91d5b347b63b22653667da6d
Certificate serial: 019A71EECF8A55E771B5235CCFD540920E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMhg2VSXTcqR1bNHtjsiZTZn2m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft
Manifest number: F4
Signing time: Tue 11 Nov 2025 08:01:07 +0000
Manifest this update: Tue 11 Nov 2025 08:01:07 +0000
Manifest next update: Wed 12 Nov 2025 08:01:07 +0000
Files and hashes: 1: jytXleuPSXKJn3uQWWaoGaj4Xmc.roa (hash: cKu9EW77Y32V8IP1VFJqq3q2CTjtGGwu/+qIVswSU0A=)
2: vMhg2VSXTcqR1bNHtjsiZTZn2m0.crl (hash: QUZU4the6zH4mmC4ZgHVohHx9IijYCF6iufl5MSmRkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMhg2VSXTcqR1bNHtjsiZTZn2m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:cf:8a:55:e7:71:b5:23:5c:cf:d5:40:92:0e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc860d954974dca91d5b347b63b22653667da6d
Validity
Not Before: Nov 11 08:01:07 2025 GMT
Not After : Nov 12 08:01:07 2025 GMT
Subject: CN=5328fcb1b803f370092508ba96f236c027199957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:83:98:cd:dd:da:b0:c8:a4:c7:ca:d5:71:4b:
e6:07:e1:5a:58:20:c3:36:14:44:00:16:cf:86:25:
27:0b:9f:48:44:0b:f4:e0:18:9a:89:17:c8:21:03:
d4:16:d2:72:d3:19:10:93:7b:68:4b:0d:f4:89:0b:
52:37:4a:40:d9:23:45:a3:0e:03:37:25:43:b3:24:
4f:4c:22:9b:dd:63:85:0e:ad:c5:67:30:a5:4a:9e:
3c:7b:36:f6:ce:bf:b9:56:39:46:f7:69:62:3e:34:
8e:0d:11:bf:91:49:bd:dc:39:04:74:54:ab:10:26:
d2:b2:ad:3e:b6:bb:82:87:b3:d2:ba:3e:99:ed:0d:
4f:50:5b:c3:21:04:74:b4:47:d7:10:37:da:d0:c4:
cc:6d:e6:10:83:4f:f6:8e:c4:46:bf:6a:1e:89:be:
1b:3d:f4:e9:f1:5b:b0:19:34:66:b0:a7:f1:e2:cc:
59:29:03:64:7e:58:17:59:88:d8:79:5f:6e:a8:89:
fe:07:f7:e9:11:97:25:cf:dc:b9:b9:72:01:0a:5d:
dc:9f:5b:36:e1:5d:bb:77:59:57:aa:55:81:97:74:
92:c9:1b:2a:8a:50:0a:a0:c2:17:09:38:3c:6a:e1:
b2:3c:2c:8b:c9:20:5e:01:69:80:ec:3d:3d:bb:da:
a7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:28:FC:B1:B8:03:F3:70:09:25:08:BA:96:F2:36:C0:27:19:99:57
X509v3 Authority Key Identifier:
keyid:BC:C8:60:D9:54:97:4D:CA:91:D5:B3:47:B6:3B:22:65:36:67:DA:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMhg2VSXTcqR1bNHtjsiZTZn2m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:fe:f8:43:cf:00:a9:b4:2e:15:fd:a2:49:a4:14:ae:72:7b:
fd:da:df:02:3f:52:f8:e7:8e:84:29:de:64:22:54:41:9b:1d:
c7:07:27:da:88:5a:72:96:f5:7f:4c:cd:1b:1a:ce:e1:19:c5:
36:6b:14:ae:e2:20:07:10:54:a2:d4:72:85:ac:ea:f1:7f:a9:
2e:c7:36:0d:78:00:46:66:e6:eb:7a:c5:48:60:28:39:0a:17:
22:aa:6d:b6:62:04:f9:31:fe:5d:4f:64:c8:b1:59:ca:20:8a:
a6:26:bc:9c:e0:61:43:5b:b9:64:e7:a1:62:8c:3f:d5:6e:18:
d1:f4:b9:9b:19:07:fe:ed:a4:a7:22:52:fe:0d:41:2a:32:a6:
aa:d5:ee:e8:5b:87:41:55:9f:53:38:2c:11:2b:d8:8f:4b:38:
8c:ed:d8:a1:a1:31:68:19:d8:c6:a6:de:6b:43:33:bc:b4:e7:
03:8c:e6:98:a0:2e:75:33:a2:65:64:a8:83:27:68:23:1f:96:
b3:1d:de:53:01:dc:e8:68:61:ea:f6:e0:c6:5c:9d:bc:d2:b7:
af:b4:45:ed:41:4e:a4:88:56:7d:fe:b7:69:d6:0c:07:06:f8:
0f:bb:76:94:f0:ea:8c:a7:6f:03:55:83:48:28:ff:09:76:d7:
e3:44:9f:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7s+KVedxtSNcz9VAkg6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYzg2MGQ5NTQ5NzRkY2E5MWQ1YjM0N2I2M2IyMjY1MzY2
N2RhNmQwHhcNMjUxMTExMDgwMTA3WhcNMjUxMTEyMDgwMTA3WjAzMTEwLwYDVQQD
Eyg1MzI4ZmNiMWI4MDNmMzcwMDkyNTA4YmE5NmYyMzZjMDI3MTk5OTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YOYzd3asMikx8rVcUvmB+FaWCDD
NhREABbPhiUnC59IRAv04BiaiRfIIQPUFtJy0xkQk3toSw30iQtSN0pA2SNFow4D
NyVDsyRPTCKb3WOFDq3FZzClSp48ezb2zr+5VjlG92liPjSODRG/kUm93DkEdFSr
ECbSsq0+truCh7PSuj6Z7Q1PUFvDIQR0tEfXEDfa0MTMbeYQg0/2jsRGv2oeib4b
PfTp8VuwGTRmsKfx4sxZKQNkflgXWYjYeV9uqIn+B/fpEZclz9y5uXIBCl3cn1s2
4V27d1lXqlWBl3SSyRsqilAKoMIXCTg8auGyPCyLySBeAWmA7D09u9qn2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMo/LG4A/NwCSUIupbyNsAnGZlXMB8GA1UdIwQY
MBaAFLzIYNlUl03KkdWzR7Y7ImU2Z9ptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk1oZzJWU1hUY3FSMWJOSHRqc2laVFpuMm0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS80Mzk4NzgtNGE5NS00NDc4LTgxNjMt
ZjM3MGYwNDI2NWE1LzEvdk1oZzJWU1hUY3FSMWJOSHRqc2laVFpuMm0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS80Mzk4NzgtNGE5NS00NDc4LTgxNjMtZjM3MGYwNDI2NWE1
LzEvdk1oZzJWU1hUY3FSMWJOSHRqc2laVFpuMm0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEP74Q88A
qbQuFf2iSaQUrnJ7/drfAj9S+OeOhCneZCJUQZsdxwcn2ohacpb1f0zNGxrO4RnF
NmsUruIgBxBUotRyhazq8X+pLsc2DXgARmbm63rFSGAoOQoXIqpttmIE+TH+XU9k
yLFZyiCKpia8nOBhQ1u5ZOehYow/1W4Y0fS5mxkH/u2kpyJS/g1BKjKmqtXu6FuH
QVWfUzgsESvYj0s4jO3YoaExaBnYxqbea0MzvLTnA4zmmKAudTOiZWSogydoIx+W
sx3eUwHc6Ghh6vbgxlydvNK3r7RF7UFOpIhWff63adYMBwb4D7t2lPDqjKdvA1WD
SCj/CXbX40SfvA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:01 2025 by rpki-client