Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json)
Hash identifier: qQR5+nejgTzuPOWK4jd6dBYDdiBRDrzblqeAdxPVh5Q=
Subject key identifier: 12:8D:70:B6:CA:4D:8C:70:07:84:B9:97:21:86:6B:E8:C0:DE:E1:4C
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 019A7293A42B497A3347A76D799BFB3F085D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 11:01:09 +0000
Manifest this update: Tue 11 Nov 2025 11:01:09 +0000
Manifest next update: Wed 12 Nov 2025 11:01:09 +0000
Files and hashes: 1: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: 7GPw1Mf1GvBsTZAkqIENNsV9xJp2cdYyUVPo++v+W4U=)
2: ix-ZSSNlerCaWdEBa65HEpQka7I.roa (hash: 1tb0LpSD1iWi8R1yiZ2FFdKAVxcZDqiaztDvg3PO7k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:a4:2b:49:7a:33:47:a7:6d:79:9b:fb:3f:08:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: Nov 11 11:01:09 2025 GMT
Not After : Nov 12 11:01:09 2025 GMT
Subject: CN=128d70b6ca4d8c700784b99721866be8c0dee14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f4:c4:a8:b5:94:fe:2d:54:94:12:d6:0d:88:
a3:f5:e2:08:9b:dd:ca:21:a7:e9:97:49:a9:ca:73:
76:ec:7c:de:81:dc:31:95:66:ac:77:51:1a:7f:ac:
fe:59:4b:f6:05:de:ed:03:22:1c:95:af:7c:52:10:
4e:5d:fd:7a:31:44:2b:e8:05:83:af:a8:8c:55:92:
8b:ef:a6:02:df:36:f7:ff:e6:ae:08:44:86:4e:9d:
27:fb:dc:ac:fc:8b:fe:ad:a8:4d:30:1d:bd:d3:23:
9e:46:86:3a:60:f3:62:dd:52:c4:63:25:ef:74:b3:
15:bf:49:9e:64:87:dd:ce:66:95:84:77:c0:39:ce:
65:0b:bd:c4:ab:c5:6e:3f:f8:f1:75:9e:6f:88:0e:
6a:8f:5b:06:9e:03:1c:e8:b8:7a:dd:26:4a:c0:9a:
5a:70:3c:0f:77:7c:d5:cb:8a:b7:b9:90:6d:b0:dd:
64:4f:cb:70:43:d2:db:18:58:6b:21:4e:e8:49:f3:
5d:cc:c4:6e:02:21:1d:f0:15:0e:b8:4f:15:3c:0a:
f6:d1:0f:01:7a:56:9e:80:72:96:c5:ed:1c:83:b1:
e1:32:f5:3d:4b:70:c6:80:af:74:d6:b7:69:f5:ec:
69:81:94:e1:dc:d3:90:c1:6d:7a:33:e3:24:eb:74:
be:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8D:70:B6:CA:4D:8C:70:07:84:B9:97:21:86:6B:E8:C0:DE:E1:4C
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:41:41:ae:5b:a4:60:20:a3:d7:39:d5:5c:e6:f5:1a:8a:e1:
cd:d2:6f:0b:ab:9b:02:e3:ed:85:86:98:a6:bd:2b:3e:bf:15:
74:86:06:24:12:b3:7b:71:20:d5:3b:d2:61:af:d4:53:aa:02:
45:a9:7f:19:78:8c:47:4d:62:49:ed:f1:b5:45:a8:17:a3:f9:
85:19:67:ba:aa:ad:6f:d0:50:e7:87:9c:a0:91:b3:a9:07:f0:
9d:f2:a4:3e:60:8a:c5:91:12:27:2e:c7:13:24:41:48:1b:2e:
ee:e5:fb:5d:02:22:90:fd:9b:54:cd:4d:c2:49:08:d8:9f:98:
00:04:10:4e:f0:7e:55:d8:ff:6f:cd:0b:31:e0:d7:65:31:cc:
ac:4e:f2:31:78:44:56:87:bf:62:4a:3b:61:a3:ff:42:f7:9c:
d3:df:d6:45:85:57:6c:f4:58:d3:a5:ab:00:33:52:4e:3a:0d:
3a:40:b3:fa:ef:6c:8c:ac:4b:b8:a6:94:ff:0d:a3:76:ad:d4:
42:e2:25:0a:ce:e1:c8:f7:12:e9:8a:c2:c2:03:30:3c:3b:f1:
85:1a:37:3d:2a:f4:36:1a:f8:c8:76:09:77:16:2b:1a:8c:60:
9d:37:32:8c:c0:ce:2c:57:8e:cc:52:c2:60:14:84:a9:e5:8e:
a5:61:fb:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk6QrSXozR6dteZv7PwhdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOWUzNmJiNmZlZjkzMjhmNTE4ZTRiMTA1ZmMyMTJjMTUy
YThjNjgwHhcNMjUxMTExMTEwMTA5WhcNMjUxMTEyMTEwMTA5WjAzMTEwLwYDVQQD
EygxMjhkNzBiNmNhNGQ4YzcwMDc4NGI5OTcyMTg2NmJlOGMwZGVlMTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvTEqLWU/i1UlBLWDYij9eIIm93K
Iafpl0mpynN27HzegdwxlWasd1Eaf6z+WUv2Bd7tAyIcla98UhBOXf16MUQr6AWD
r6iMVZKL76YC3zb3/+auCESGTp0n+9ys/Iv+rahNMB290yOeRoY6YPNi3VLEYyXv
dLMVv0meZIfdzmaVhHfAOc5lC73Eq8VuP/jxdZ5viA5qj1sGngMc6Lh63SZKwJpa
cDwPd3zVy4q3uZBtsN1kT8twQ9LbGFhrIU7oSfNdzMRuAiEd8BUOuE8VPAr20Q8B
elaegHKWxe0cg7HhMvU9S3DGgK901rdp9expgZTh3NOQwW16M+Mk63S+vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKNcLbKTYxwB4S5lyGGa+jA3uFMMB8GA1UdIwQY
MBaAFIueNrtv75Mo9RjksQX8ISwVKoxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTU0MnUyX3ZreWoxR09TeEJmd2hMQlVxakdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80YTBlOGQtMGJiZS00MjEzLTk4YjEt
MWExMTZhNTM0NDgzLzEvaTU0MnUyX3ZreWoxR09TeEJmd2hMQlVxakdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS80YTBlOGQtMGJiZS00MjEzLTk4YjEtMWExMTZhNTM0NDgz
LzEvaTU0MnUyX3ZreWoxR09TeEJmd2hMQlVxakdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0FBrluk
YCCj1znVXOb1GorhzdJvC6ubAuPthYaYpr0rPr8VdIYGJBKze3Eg1TvSYa/UU6oC
Ral/GXiMR01iSe3xtUWoF6P5hRlnuqqtb9BQ54ecoJGzqQfwnfKkPmCKxZESJy7H
EyRBSBsu7uX7XQIikP2bVM1NwkkI2J+YAAQQTvB+Vdj/b80LMeDXZTHMrE7yMXhE
Voe/Yko7YaP/Qvec09/WRYVXbPRY06WrADNSTjoNOkCz+u9sjKxLuKaU/w2jdq3U
QuIlCs7hyPcS6YrCwgMwPDvxhRo3PSr0Nhr4yHYJdxYrGoxgnTcyjMDOLFeOzFLC
YBSEqeWOpWH7vA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:49 2025 by rpki-client