Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
File: vhji2fUJydO0VREqoojTNhhYAaA.mft (raw, json)
Hash identifier: I9sVfp98oWaM8NJkKoUVc+VKT/AQzZ6ydvztwoWAQsw=
Subject key identifier: 67:E1:EF:06:43:C0:13:FF:FF:2B:56:8F:AA:B0:7F:B5:90:7B:9A:F7
Authority key identifier: BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
Certificate issuer: /CN=be18e2d9f509c9d3b455112aa288d336185801a0
Certificate serial: 019A72935E57233C8B108E0495839FDB5C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
Manifest number: 1102
Signing time: Tue 11 Nov 2025 11:00:51 +0000
Manifest this update: Tue 11 Nov 2025 11:00:51 +0000
Manifest next update: Wed 12 Nov 2025 11:00:51 +0000
Files and hashes: 1: K7bdbq2NQi5Og3pBR0VNiKqzF3o.roa (hash: Y5TCg/QVPxm4ctwH0Vu0TBEdMj0uZUrfAJN0ICvLjOc=)
2: vhji2fUJydO0VREqoojTNhhYAaA.crl (hash: xRq6imoZ7bd/G04KRYJ6aT9WfIDN2F9Wym4XIk1z2UE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:5e:57:23:3c:8b:10:8e:04:95:83:9f:db:5c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be18e2d9f509c9d3b455112aa288d336185801a0
Validity
Not Before: Nov 11 11:00:51 2025 GMT
Not After : Nov 12 11:00:51 2025 GMT
Subject: CN=67e1ef0643c013ffff2b568faab07fb5907b9af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:46:94:e5:8c:5e:22:97:45:49:7c:42:66:8a:
bd:97:e6:c2:e4:5d:24:27:9d:de:0e:00:a7:52:8e:
11:b5:7e:71:48:7b:20:60:04:f3:86:3d:af:ce:3c:
d1:82:09:97:09:b0:2a:42:3f:4b:38:9b:9f:73:92:
94:14:9a:8a:4d:5b:66:f0:ab:2d:a6:09:60:21:db:
f4:36:c6:8c:e2:27:23:e6:4e:b1:f3:86:19:02:34:
33:f7:b2:71:35:f2:dc:1e:f1:d9:99:c8:0c:37:c9:
bd:fb:d3:d8:89:3d:ee:bc:be:b3:84:35:ee:13:e1:
ab:d1:64:f4:fa:6f:27:5d:61:0c:a6:6c:39:07:62:
24:cd:e5:b8:e9:79:b9:62:69:48:96:6c:bf:2d:1b:
ae:fc:82:86:9c:1b:11:bf:91:66:18:2a:57:ad:c1:
26:c5:dc:4c:54:65:22:a0:cd:ae:dc:62:41:3e:2a:
53:7e:d1:69:60:4c:e0:49:22:1d:88:84:a0:f3:e9:
0f:02:26:34:2f:b7:3a:f2:dc:db:5e:8f:1a:7d:1d:
0c:fa:8f:49:19:98:ed:0a:ed:77:e5:f0:11:6d:2e:
94:a2:55:7d:a6:df:9f:5e:ff:04:51:8b:94:52:67:
b0:38:2e:88:55:b4:ad:9a:20:6b:18:10:36:4b:3e:
0a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E1:EF:06:43:C0:13:FF:FF:2B:56:8F:AA:B0:7F:B5:90:7B:9A:F7
X509v3 Authority Key Identifier:
keyid:BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:02:9e:1b:78:f9:07:0d:86:1b:84:17:6b:fe:94:23:71:e2:
41:fc:9e:98:0b:2e:f1:70:ec:32:2a:d3:6c:95:2c:0e:10:39:
64:16:4b:fb:b3:c3:0c:c9:ef:94:d0:66:0d:ce:8b:fa:0d:0d:
e9:96:32:52:5d:4c:cc:2b:25:0c:46:14:73:47:ab:7f:62:02:
84:1f:2b:ab:fb:91:3b:56:f5:9a:b0:32:4a:90:ef:07:88:49:
1e:2f:cf:65:c1:9b:8a:48:31:82:97:8a:f1:44:4f:d0:fa:d9:
b4:ce:60:e9:28:01:e1:8d:f1:dc:4d:3e:19:c7:ab:bd:19:8e:
62:b8:d1:b1:86:14:64:cd:21:41:cd:cc:9e:69:23:08:c1:a4:
c0:11:9a:e3:f2:ea:2c:10:10:a7:a5:fe:24:0e:06:7b:b6:79:
38:3d:26:b6:56:bc:8b:f0:a5:f4:48:e6:a8:6a:6d:e3:ad:90:
73:53:61:59:02:af:16:7a:0d:a2:e0:aa:c1:69:00:52:1f:7a:
67:aa:a0:08:96:3d:42:66:ae:cd:3f:6a:d5:ea:af:d9:04:a7:
18:ff:e8:d5:99:60:4e:67:ee:56:57:a7:38:61:a8:19:22:32:
df:39:81:76:3b:cf:5a:dd:ec:40:c7:1d:d3:8f:0c:38:fc:f5:
85:99:61:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk15XIzyLEI4ElYOf21xUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMThlMmQ5ZjUwOWM5ZDNiNDU1MTEyYWEyODhkMzM2MTg1
ODAxYTAwHhcNMjUxMTExMTEwMDUxWhcNMjUxMTEyMTEwMDUxWjAzMTEwLwYDVQQD
Eyg2N2UxZWYwNjQzYzAxM2ZmZmYyYjU2OGZhYWIwN2ZiNTkwN2I5YWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0aU5YxeIpdFSXxCZoq9l+bC5F0k
J53eDgCnUo4RtX5xSHsgYATzhj2vzjzRggmXCbAqQj9LOJufc5KUFJqKTVtm8Kst
pglgIdv0NsaM4icj5k6x84YZAjQz97JxNfLcHvHZmcgMN8m9+9PYiT3uvL6zhDXu
E+Gr0WT0+m8nXWEMpmw5B2IkzeW46Xm5YmlIlmy/LRuu/IKGnBsRv5FmGCpXrcEm
xdxMVGUioM2u3GJBPipTftFpYEzgSSIdiISg8+kPAiY0L7c68tzbXo8afR0M+o9J
GZjtCu135fARbS6UolV9pt+fXv8EUYuUUmewOC6IVbStmiBrGBA2Sz4K5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfh7wZDwBP//ytWj6qwf7WQe5r3MB8GA1UdIwQY
MBaAFL4Y4tn1CcnTtFURKqKI0zYYWAGgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmhqaTJmVUp5ZE8wVlJFcW9valROaGhZQWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82NjQ1ZDUtZDE5My00YTYzLTg1ZTYt
MmNhMGU1YzEwNGZkLzEvdmhqaTJmVUp5ZE8wVlJFcW9valROaGhZQWFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi82NjQ1ZDUtZDE5My00YTYzLTg1ZTYtMmNhMGU1YzEwNGZk
LzEvdmhqaTJmVUp5ZE8wVlJFcW9valROaGhZQWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQKeG3j5
Bw2GG4QXa/6UI3HiQfyemAsu8XDsMirTbJUsDhA5ZBZL+7PDDMnvlNBmDc6L+g0N
6ZYyUl1MzCslDEYUc0erf2IChB8rq/uRO1b1mrAySpDvB4hJHi/PZcGbikgxgpeK
8URP0PrZtM5g6SgB4Y3x3E0+GcervRmOYrjRsYYUZM0hQc3MnmkjCMGkwBGa4/Lq
LBAQp6X+JA4Ge7Z5OD0mtla8i/Cl9EjmqGpt462Qc1NhWQKvFnoNouCqwWkAUh96
Z6qgCJY9QmauzT9q1eqv2QSnGP/o1ZlgTmfuVlenOGGoGSIy3zmBdjvPWt3sQMcd
048MOPz1hZlhaA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:33 2025 by rpki-client