Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
File: vx9s1vq5XSQc2axfhfTQX53lj5s.mft (raw, json)
Hash identifier: PaVxs3voutTGaroAOUSVxoBnM2Ad8wGIwWLlYpJZpMs=
Subject key identifier: 0B:10:6F:02:AF:91:66:8D:36:AD:10:F3:89:01:E4:24:5D:80:9D:57
Authority key identifier: BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B
Certificate issuer: /CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
Certificate serial: 019A71B7E45439ABED287252F56B181C1391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
Manifest number: 14FB
Signing time: Tue 11 Nov 2025 07:01:08 +0000
Manifest this update: Tue 11 Nov 2025 07:01:08 +0000
Manifest next update: Wed 12 Nov 2025 07:01:08 +0000
Files and hashes: 1: EBHjm8uQ-LmD4evvwOZ6E0JwNQA.roa (hash: Tk02eWTtsJNpE3RvUJnaO0ovgb/O/tJmPY6vH9oMVtQ=)
2: vx9s1vq5XSQc2axfhfTQX53lj5s.crl (hash: 6hJLgpYljq7bs+yKcGnbp4pJI3eIiBgnnoRE9YVVHWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e4:54:39:ab:ed:28:72:52:f5:6b:18:1c:13:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
Validity
Not Before: Nov 11 07:01:08 2025 GMT
Not After : Nov 12 07:01:08 2025 GMT
Subject: CN=0b106f02af91668d36ad10f38901e4245d809d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f9:d0:6c:13:9a:97:1c:f0:b7:9a:77:5e:50:
ed:eb:e6:c7:f5:8d:9c:83:bd:d4:22:5c:a1:ab:6c:
d1:81:c9:f1:af:5c:43:b5:b6:9f:de:6b:3d:dc:09:
56:62:12:50:1c:5b:bd:aa:1c:4e:a5:8a:ee:02:6b:
5c:bf:b9:2e:49:96:9d:d3:ca:b5:11:24:e0:1e:c5:
3b:dc:eb:ee:d8:6b:a0:0f:d9:ce:ba:a6:74:8a:c9:
bc:8b:26:3f:9d:1c:da:76:83:02:d2:9c:97:59:48:
7c:57:3f:b4:34:57:bb:6b:11:47:c4:89:01:8b:aa:
ea:43:4c:02:37:54:a9:ad:45:31:85:aa:88:47:66:
bc:24:e4:42:39:98:db:95:5e:90:32:7b:c9:d8:d6:
2e:62:86:42:e2:f1:16:7e:33:b6:50:99:9b:87:30:
dd:96:70:4e:66:d2:8c:96:ec:8d:82:d0:3f:e2:74:
e3:2b:6e:23:b6:ca:dd:c1:8f:2c:b6:12:83:3b:f8:
c6:d3:7e:c5:8c:66:2b:08:6d:26:4c:de:1e:d4:5d:
71:fd:12:09:41:ad:0e:b4:71:4f:0b:5e:48:36:21:
b6:f5:5d:11:fb:fc:6b:b3:94:3f:47:49:93:a7:95:
5c:48:b9:aa:ef:56:c1:e9:3e:a0:1a:db:da:ae:93:
0b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:10:6F:02:AF:91:66:8D:36:AD:10:F3:89:01:E4:24:5D:80:9D:57
X509v3 Authority Key Identifier:
keyid:BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:a4:fc:0e:f7:38:01:1b:e6:cb:a2:8c:4e:42:61:f4:a8:22:
7b:68:9d:47:32:93:02:cc:0f:30:20:7d:c0:da:6a:fc:03:8d:
ef:ab:88:a9:24:d4:9e:bd:38:3b:88:5f:cf:de:d7:96:4d:4a:
ea:19:5c:2b:73:f6:ec:ef:33:52:ed:43:55:ef:75:bc:80:17:
95:b9:54:b0:37:48:f0:d3:16:ba:28:5d:69:7e:17:1c:fa:21:
d9:58:16:53:45:4b:fa:38:22:32:01:67:9e:6d:40:a8:20:45:
69:d8:68:7f:c3:32:3a:d8:22:cd:f2:9c:f5:90:a0:13:2b:99:
3b:81:9b:5e:17:1e:14:05:18:db:03:60:ce:e3:fe:86:ef:0c:
7b:fb:57:65:f2:8b:39:83:fc:43:1e:e3:ca:39:6d:65:7e:f9:
62:bf:dc:cf:0b:52:29:aa:87:11:2a:d0:6b:8d:06:c6:58:39:
de:9e:07:c2:0b:61:2b:4b:c6:d3:fa:36:52:c8:73:55:86:b4:
91:c1:73:07:b8:58:ef:e1:94:96:bd:44:44:c4:0e:ef:0e:87:
e1:22:cb:6a:60:a9:9e:64:92:8c:08:b1:3b:59:29:38:3f:e3:
6e:d7:08:44:15:a1:8b:78:cc:f6:b6:f9:e9:04:7c:c3:27:57:
bd:47:45:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt+RUOavtKHJS9WsYHBORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMWY2Y2Q2ZmFiOTVkMjQxY2Q5YWM1Zjg1ZjRkMDVmOWRl
NThmOWIwHhcNMjUxMTExMDcwMTA4WhcNMjUxMTEyMDcwMTA4WjAzMTEwLwYDVQQD
EygwYjEwNmYwMmFmOTE2NjhkMzZhZDEwZjM4OTAxZTQyNDVkODA5ZDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/nQbBOalxzwt5p3XlDt6+bH9Y2c
g73UIlyhq2zRgcnxr1xDtbaf3ms93AlWYhJQHFu9qhxOpYruAmtcv7kuSZad08q1
ESTgHsU73Ovu2GugD9nOuqZ0ism8iyY/nRzadoMC0pyXWUh8Vz+0NFe7axFHxIkB
i6rqQ0wCN1SprUUxhaqIR2a8JORCOZjblV6QMnvJ2NYuYoZC4vEWfjO2UJmbhzDd
lnBOZtKMluyNgtA/4nTjK24jtsrdwY8sthKDO/jG037FjGYrCG0mTN4e1F1x/RIJ
Qa0OtHFPC15INiG29V0R+/xrs5Q/R0mTp5VcSLmq71bB6T6gGtvarpML4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsQbwKvkWaNNq0Q84kB5CRdgJ1XMB8GA1UdIwQY
MBaAFL8fbNb6uV0kHNmsX4X00F+d5Y+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdng5czF2cTVYU1FjMmF4ZmhmVFFYNTNsajVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lM2M5NzEtNTMyNC00MTM0LWJlYWQt
NTk3YzQzNTk4NTc3LzEvdng5czF2cTVYU1FjMmF4ZmhmVFFYNTNsajVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lM2M5NzEtNTMyNC00MTM0LWJlYWQtNTk3YzQzNTk4NTc3
LzEvdng5czF2cTVYU1FjMmF4ZmhmVFFYNTNsajVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2aT8Dvc4
ARvmy6KMTkJh9Kgie2idRzKTAswPMCB9wNpq/AON76uIqSTUnr04O4hfz97Xlk1K
6hlcK3P27O8zUu1DVe91vIAXlblUsDdI8NMWuihdaX4XHPoh2VgWU0VL+jgiMgFn
nm1AqCBFadhof8MyOtgizfKc9ZCgEyuZO4GbXhceFAUY2wNgzuP+hu8Me/tXZfKL
OYP8Qx7jyjltZX75Yr/czwtSKaqHESrQa40Gxlg53p4HwgthK0vG0/o2UshzVYa0
kcFzB7hY7+GUlr1ERMQO7w6H4SLLamCpnmSSjAixO1kpOD/jbtcIRBWhi3jM9rb5
6QR8wydXvUdFNw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:44 2025 by rpki-client