Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
File: vlJx8OFYfBRDTySA-RQQGFUHz6E.mft (raw, json)
Hash identifier: mUeCPRdskCcuNC3HbiX+1gdApqxHAVHtPtuhmETMkk8=
Subject key identifier: 6F:BB:25:29:22:2B:B9:8D:5D:AF:95:07:1E:97:5D:D1:75:EB:DB:21
Authority key identifier: BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
Certificate issuer: /CN=be5271f0e1587c14434f2480f91410185507cfa1
Certificate serial: 019A1E3F06CEA8C0008ED9DB0DE29F0669B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
Manifest number: 1684
Signing time: Sun 26 Oct 2025 02:00:38 +0000
Manifest this update: Sun 26 Oct 2025 02:00:38 +0000
Manifest next update: Mon 27 Oct 2025 02:00:38 +0000
Files and hashes: 1: bxyMDkypoYoPE36odgLUanwOaLY.roa (hash: /Tdt2l601ImlNiIyf1pfayzYn4s0xCETamIww0AgaGc=)
2: vlJx8OFYfBRDTySA-RQQGFUHz6E.crl (hash: hbXNiP9g66n+ZGUXq3q6c9yAA82HPJAaaIVuwh0upYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:3f:06:ce:a8:c0:00:8e:d9:db:0d:e2:9f:06:69:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5271f0e1587c14434f2480f91410185507cfa1
Validity
Not Before: Oct 26 02:00:38 2025 GMT
Not After : Oct 27 02:00:38 2025 GMT
Subject: CN=6fbb2529222bb98d5daf95071e975dd175ebdb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9b:70:b2:28:d0:45:26:8d:3d:3b:01:27:2a:
d8:86:8b:73:44:52:c8:00:66:63:d2:8d:d7:ab:91:
f4:0e:4e:7a:ae:ee:c4:c5:7b:54:39:e8:c5:4a:88:
a2:9f:87:24:79:53:c0:fe:80:e5:51:c2:c1:f8:ca:
75:59:94:9b:07:3d:c9:23:9b:93:b5:77:ef:d4:82:
34:eb:24:4d:56:6a:94:39:f5:61:da:f7:22:b9:06:
5c:e7:32:d4:c6:e6:c9:72:1e:a7:e4:9c:f3:f9:50:
59:da:12:ed:83:14:b7:6c:de:ea:4c:62:99:a6:1d:
d7:a6:25:4f:37:de:71:be:22:40:0e:b3:27:3f:9f:
aa:12:2e:76:b3:bb:60:9e:1f:5e:8d:ec:97:67:a9:
f4:e3:34:ce:f0:83:72:50:2c:3a:f4:9e:cd:49:d1:
4c:3c:36:ca:0e:cb:f2:a8:b7:80:ac:92:eb:90:c1:
83:64:42:c1:c1:32:87:38:fc:32:97:c3:8a:54:c1:
c3:99:79:db:8e:4f:ce:5d:eb:02:4d:03:38:04:c8:
bd:f9:e7:35:d0:26:8e:1f:15:cc:7a:ae:56:71:5d:
3e:67:93:b8:31:5b:4e:ed:2f:df:c9:af:c9:98:00:
48:59:57:e3:25:7d:4c:b0:a4:f7:bd:e5:69:f2:1c:
a4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BB:25:29:22:2B:B9:8D:5D:AF:95:07:1E:97:5D:D1:75:EB:DB:21
X509v3 Authority Key Identifier:
keyid:BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:42:d5:43:f7:6d:60:74:86:08:bf:62:6d:13:fd:8e:6f:97:
f7:62:7f:39:d2:57:a5:a0:48:ac:05:66:2a:01:de:56:44:4b:
d0:92:7e:4f:26:2a:9c:cc:a8:7b:66:c7:26:42:99:cd:c7:44:
13:7a:fd:1e:53:50:97:62:9f:f6:b3:2c:39:65:fb:b2:06:1c:
68:6c:c5:a2:fd:3d:50:18:6d:39:5f:16:b4:11:8b:d6:b5:e6:
89:9c:02:9c:c7:96:bc:fb:ef:ad:82:b9:7c:79:f0:a3:dc:32:
0c:43:ce:12:14:a4:dc:06:8b:bd:50:5c:32:23:f1:4f:5b:6b:
bc:4b:e4:ce:0e:13:32:f7:ab:69:68:78:3c:5b:7b:de:9c:e9:
46:df:81:fb:8f:8e:20:c4:f2:4a:fc:c8:03:9b:79:ad:42:78:
9f:10:73:ee:09:71:d0:e3:bc:b6:d3:5f:f8:5a:b8:0c:47:ae:
34:1a:df:e8:5b:eb:7e:4a:57:69:32:17:cf:8e:17:a3:fc:c0:
74:90:f9:20:d4:1b:e5:81:43:8b:52:3d:fa:56:bc:90:ec:8c:
93:22:00:85:25:94:fc:bc:4b:74:48:38:95:00:28:8b:c5:82:
39:d6:c7:99:99:c8:02:70:a4:df:b9:7c:f2:cb:9b:ac:a2:dc:
f9:16:8a:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoePwbOqMAAjtnbDeKfBmm4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNTI3MWYwZTE1ODdjMTQ0MzRmMjQ4MGY5MTQxMDE4NTUw
N2NmYTEwHhcNMjUxMDI2MDIwMDM4WhcNMjUxMDI3MDIwMDM4WjAzMTEwLwYDVQQD
Eyg2ZmJiMjUyOTIyMmJiOThkNWRhZjk1MDcxZTk3NWRkMTc1ZWJkYjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5twsijQRSaNPTsBJyrYhotzRFLI
AGZj0o3Xq5H0Dk56ru7ExXtUOejFSoiin4ckeVPA/oDlUcLB+Mp1WZSbBz3JI5uT
tXfv1II06yRNVmqUOfVh2vciuQZc5zLUxubJch6n5Jzz+VBZ2hLtgxS3bN7qTGKZ
ph3XpiVPN95xviJADrMnP5+qEi52s7tgnh9ejeyXZ6n04zTO8INyUCw69J7NSdFM
PDbKDsvyqLeArJLrkMGDZELBwTKHOPwyl8OKVMHDmXnbjk/OXesCTQM4BMi9+ec1
0CaOHxXMeq5WcV0+Z5O4MVtO7S/fya/JmABIWVfjJX1MsKT3veVp8hykwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+7JSkiK7mNXa+VBx6XXdF169shMB8GA1UdIwQY
MBaAFL5ScfDhWHwUQ08kgPkUEBhVB8+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmxKeDhPRllmQlJEVHlTQS1SUVFHRlVIejZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83NmRiYTAtZDg2Yi00ZDg0LWIxNWEt
NGQ2ZDEyNTZiZjliLzEvdmxKeDhPRllmQlJEVHlTQS1SUVFHRlVIejZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny83NmRiYTAtZDg2Yi00ZDg0LWIxNWEtNGQ2ZDEyNTZiZjli
LzEvdmxKeDhPRllmQlJEVHlTQS1SUVFHRlVIejZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkkLVQ/dt
YHSGCL9ibRP9jm+X92J/OdJXpaBIrAVmKgHeVkRL0JJ+TyYqnMyoe2bHJkKZzcdE
E3r9HlNQl2Kf9rMsOWX7sgYcaGzFov09UBhtOV8WtBGL1rXmiZwCnMeWvPvvrYK5
fHnwo9wyDEPOEhSk3AaLvVBcMiPxT1trvEvkzg4TMveraWh4PFt73pzpRt+B+4+O
IMTySvzIA5t5rUJ4nxBz7glx0OO8ttNf+Fq4DEeuNBrf6FvrfkpXaTIXz44Xo/zA
dJD5INQb5YFDi1I9+la8kOyMkyIAhSWU/LxLdEg4lQAoi8WCOdbHmZnIAnCk37l8
8subrKLc+RaKyQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 10:42:08 2025 by rpki-client