Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
File: vf3CTv25YU3JPpd3TOicHJcw5mU.mft (raw, json)
Hash identifier: 4G/21s8RVWmytwYygfFhI6MEqyAfUij3MskXflWf9LI=
Subject key identifier: C2:07:46:78:33:FE:D1:D9:EA:60:1A:38:85:0F:B6:9C:1D:0C:0A:D3
Authority key identifier: BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65
Certificate issuer: /CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
Certificate serial: 019A71EEE6FD699BBFF22F72DADCA9EBF9E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
Manifest number: 82
Signing time: Tue 11 Nov 2025 08:01:13 +0000
Manifest this update: Tue 11 Nov 2025 08:01:13 +0000
Manifest next update: Wed 12 Nov 2025 08:01:13 +0000
Files and hashes: 1: Lg4eCFYIYf5ZVutlcdxYXCP2T1k.roa (hash: /UYXd+Jxi7mk5U3i4C8s/Xff/x03jpYmnvrS9R7HXwg=)
2: vf3CTv25YU3JPpd3TOicHJcw5mU.crl (hash: 8ChELLeEAH5Mx8bxqdJXWcmqtwfa9HLpsAtf9KyV5TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e6:fd:69:9b:bf:f2:2f:72:da:dc:a9:eb:f9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
Validity
Not Before: Nov 11 08:01:13 2025 GMT
Not After : Nov 12 08:01:13 2025 GMT
Subject: CN=c207467833fed1d9ea601a38850fb69c1d0c0ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8a:33:c3:c5:1a:1a:d8:a9:48:7c:9b:16:db:
2e:3b:50:39:a3:3a:90:40:d6:cd:30:a8:49:7c:4f:
46:59:49:53:15:4a:d1:23:a0:19:44:0a:60:17:e3:
88:34:34:80:ba:42:f6:d5:90:78:64:2d:9c:b9:05:
93:f6:32:0e:4d:0e:80:6b:9e:17:5f:10:39:56:ab:
17:b0:af:0e:4f:07:4b:29:f8:a8:f3:62:43:b8:98:
a7:d5:1e:ae:77:fd:1d:a8:6b:9b:ff:00:21:ca:fc:
88:e6:0c:af:21:c1:bc:88:68:41:de:f2:25:92:bd:
e8:9c:b9:78:92:2a:dc:00:fa:cf:e8:8b:dd:28:66:
dd:68:38:35:bc:7e:b1:a5:54:d6:7e:54:5a:d5:4c:
7a:55:50:5f:5b:8a:53:b0:05:e3:32:4e:84:07:6a:
18:84:6e:32:d6:89:52:86:be:10:60:af:70:dc:20:
65:7e:8f:ff:94:41:66:d4:08:c2:f8:eb:c3:e2:38:
84:ee:5c:e1:19:3c:de:cf:c5:bd:a8:d6:ec:24:b5:
38:72:11:15:92:cb:14:0d:ea:4e:01:28:e5:74:d8:
46:2c:75:61:ce:d6:d4:fb:e5:44:3a:20:1c:f8:c4:
31:16:55:59:08:93:99:12:ad:2e:8a:63:92:f9:26:
32:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:07:46:78:33:FE:D1:D9:EA:60:1A:38:85:0F:B6:9C:1D:0C:0A:D3
X509v3 Authority Key Identifier:
keyid:BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:35:98:b9:00:59:22:17:68:74:7e:45:39:19:36:91:4b:92:
9a:0a:e0:24:2c:0a:dd:5b:47:31:a1:c9:4f:1e:4b:35:81:fb:
ab:cd:36:28:f5:47:1f:11:35:b7:03:e6:56:24:57:ce:96:b8:
03:aa:2f:1b:d6:f6:ad:c5:0e:67:ce:1d:e0:95:72:54:01:25:
62:29:79:bb:e3:03:56:d4:b2:ef:24:4d:c1:ea:28:8e:cb:21:
59:39:ba:7f:d7:1e:c9:65:97:d7:10:e4:b4:42:c4:b2:8f:7f:
d6:1e:d7:7f:af:30:c6:e1:8c:01:c9:74:1f:92:7a:b9:0c:73:
55:4b:4a:c4:f6:ca:bc:94:21:78:5c:2e:17:79:a9:26:14:8a:
ec:96:1c:93:cb:7e:03:29:04:6a:87:97:f3:5e:0e:f2:5f:05:
22:9f:e5:c2:d4:59:bd:0e:a3:29:7d:4e:9f:35:1e:9d:df:4e:
39:da:b7:91:64:95:e2:dd:2b:e3:35:67:b1:44:56:41:16:67:
65:ad:f8:fd:89:02:3b:a7:11:e6:16:60:a7:ad:30:6e:7b:78:
e8:58:70:2d:ad:2f:66:dd:e7:2e:2a:1f:d8:4e:39:ee:e0:f0:
3d:7d:cf:cc:2c:6b:6a:fe:b5:2d:17:0b:39:49:87:a4:81:b8:
ce:71:6d:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7ub9aZu/8i9y2typ6/nlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmRjMjRlZmRiOTYxNGRjOTNlOTc3NzRjZTg5YzFjOTcz
MGU2NjUwHhcNMjUxMTExMDgwMTEzWhcNMjUxMTEyMDgwMTEzWjAzMTEwLwYDVQQD
EyhjMjA3NDY3ODMzZmVkMWQ5ZWE2MDFhMzg4NTBmYjY5YzFkMGMwYWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oozw8UaGtipSHybFtsuO1A5ozqQ
QNbNMKhJfE9GWUlTFUrRI6AZRApgF+OINDSAukL21ZB4ZC2cuQWT9jIOTQ6Aa54X
XxA5VqsXsK8OTwdLKfio82JDuJin1R6ud/0dqGub/wAhyvyI5gyvIcG8iGhB3vIl
kr3onLl4kircAPrP6IvdKGbdaDg1vH6xpVTWflRa1Ux6VVBfW4pTsAXjMk6EB2oY
hG4y1olShr4QYK9w3CBlfo//lEFm1AjC+OvD4jiE7lzhGTzez8W9qNbsJLU4chEV
kssUDepOASjldNhGLHVhztbU++VEOiAc+MQxFlVZCJOZEq0uimOS+SYy3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIHRngz/tHZ6mAaOIUPtpwdDArTMB8GA1UdIwQY
MBaAFL39wk79uWFNyT6Xd0zonByXMOZlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmYzQ1R2MjVZVTNKUHBkM1RPaWNISmN3NW1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85Nzg1NDctZTEwMS00ZjRhLTk1Zjct
NGYzYTUzNDNhMDRmLzEvdmYzQ1R2MjVZVTNKUHBkM1RPaWNISmN3NW1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85Nzg1NDctZTEwMS00ZjRhLTk1ZjctNGYzYTUzNDNhMDRm
LzEvdmYzQ1R2MjVZVTNKUHBkM1RPaWNISmN3NW1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTWYuQBZ
IhdodH5FORk2kUuSmgrgJCwK3VtHMaHJTx5LNYH7q802KPVHHxE1twPmViRXzpa4
A6ovG9b2rcUOZ84d4JVyVAElYil5u+MDVtSy7yRNweoojsshWTm6f9ceyWWX1xDk
tELEso9/1h7Xf68wxuGMAcl0H5J6uQxzVUtKxPbKvJQheFwuF3mpJhSK7JYck8t+
AykEaoeX814O8l8FIp/lwtRZvQ6jKX1OnzUend9OOdq3kWSV4t0r4zVnsURWQRZn
Za34/YkCO6cR5hZgp60wbnt46FhwLa0vZt3nLiof2E457uDwPX3PzCxrav61LRcL
OUmHpIG4znFtbg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:12 2025 by rpki-client