Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
File: vx9s1vq5XSQc2axfhfTQX53lj5s.mft (raw, json)
Hash identifier: EmyE77n1ctwIt4ajIii/sLs2XowzhLYte3AHitgf7p4=
Subject key identifier: EC:40:C6:BE:E5:AD:09:46:DC:B7:1A:EE:3D:DE:AB:B9:4B:F4:B5:EF
Authority key identifier: BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B
Certificate issuer: /CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
Certificate serial: 019923A1001994A57E652C4E17BC26C13AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
Manifest number: 144E
Signing time: Sun 07 Sep 2025 10:02:57 +0000
Manifest this update: Sun 07 Sep 2025 10:02:57 +0000
Manifest next update: Mon 08 Sep 2025 10:02:57 +0000
Files and hashes: 1: EBHjm8uQ-LmD4evvwOZ6E0JwNQA.roa (hash: Tk02eWTtsJNpE3RvUJnaO0ovgb/O/tJmPY6vH9oMVtQ=)
2: vx9s1vq5XSQc2axfhfTQX53lj5s.crl (hash: BiWvNhVwKoyL+TqedNRPZ4VVLLpHGD8MjHgVF+pMXg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a1:00:19:94:a5:7e:65:2c:4e:17:bc:26:c1:3a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
Validity
Not Before: Sep 7 10:02:57 2025 GMT
Not After : Sep 8 10:02:57 2025 GMT
Subject: CN=ec40c6bee5ad0946dcb71aee3ddeabb94bf4b5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e0:c8:a9:f1:7c:e6:bc:f6:6f:12:81:86:e0:
7e:2a:96:02:6a:5e:d3:62:9e:32:f9:7d:ef:af:6d:
a6:af:09:5f:17:b1:cc:32:77:e4:a7:23:64:31:44:
53:71:15:63:be:ec:55:ba:56:ae:b5:60:28:db:68:
5e:6d:fb:9d:1b:e4:3b:15:00:52:6e:92:a0:0c:97:
78:37:c9:b7:af:9c:3d:03:51:03:1c:78:e7:81:49:
6f:92:b6:2f:ed:e9:59:3e:44:82:c0:62:af:2a:b4:
b3:05:ca:e1:28:ff:00:a9:ea:d5:16:c6:5c:7d:2c:
61:0b:b7:a2:36:ed:92:fc:df:87:9e:80:37:cf:d0:
6f:8f:f8:64:fe:d9:f5:b2:81:df:8f:30:9d:e0:1d:
e2:36:7a:d8:d9:67:9d:97:ae:3c:ab:6e:aa:d8:00:
7f:42:9e:07:22:61:e3:88:9b:cc:85:47:6f:a9:92:
5e:e0:a3:8e:a3:6d:7c:9d:16:9c:80:c0:d9:99:a6:
8d:57:dd:9c:cc:52:57:1c:92:e5:b2:fa:72:d2:0a:
34:07:ec:02:f1:97:51:9a:81:58:64:cd:b0:b4:ca:
70:19:49:9a:58:f2:30:6a:b6:e3:6c:ad:36:9e:3b:
1c:95:0f:7a:b4:c6:08:b0:a6:4d:d0:4e:0f:11:f4:
f2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:40:C6:BE:E5:AD:09:46:DC:B7:1A:EE:3D:DE:AB:B9:4B:F4:B5:EF
X509v3 Authority Key Identifier:
keyid:BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:39:a0:71:bd:13:39:b5:4c:1e:ab:b9:55:ac:0d:04:d9:40:
fc:5c:a3:cd:63:41:cd:7a:a3:7e:c9:3b:51:22:23:bb:93:a3:
93:67:49:ac:08:c4:1a:15:f3:3e:ce:77:eb:f6:71:49:41:be:
b1:5e:ee:67:98:d8:f6:31:a2:79:5c:16:3f:3c:bd:42:44:ab:
81:a8:51:8f:cf:ee:95:c0:5a:2d:68:43:a4:ca:b0:d1:4b:ee:
3b:18:52:73:7a:ce:e6:11:7a:90:fe:89:8f:40:14:9c:93:c0:
d9:ac:4e:e2:31:8a:ff:85:1c:30:f7:f9:12:00:9b:d3:0d:64:
ed:66:20:c7:de:66:f1:6a:3f:97:86:0c:67:62:3d:7f:39:31:
08:fe:ea:ed:bd:04:8f:80:a4:ac:67:13:c7:86:4c:80:dc:85:
65:55:44:90:bb:3c:c6:b2:1f:d5:87:12:2f:92:05:ed:f9:8c:
31:11:20:a5:d9:fa:17:5f:49:24:30:f5:cd:70:57:bc:3d:2d:
ae:32:52:88:cd:3c:f5:8a:85:1d:88:b1:d5:f2:c9:3a:b5:98:
08:c2:ee:41:91:d6:33:aa:6b:43:5f:69:bb:90:bd:1b:18:e4:
f3:6c:74:58:11:80:17:ad:9b:f5:37:2f:d4:3f:77:db:23:bb:
6a:1f:c2:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoQAZlKV+ZSxOF7wmwTr2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMWY2Y2Q2ZmFiOTVkMjQxY2Q5YWM1Zjg1ZjRkMDVmOWRl
NThmOWIwHhcNMjUwOTA3MTAwMjU3WhcNMjUwOTA4MTAwMjU3WjAzMTEwLwYDVQQD
EyhlYzQwYzZiZWU1YWQwOTQ2ZGNiNzFhZWUzZGRlYWJiOTRiZjRiNWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleDIqfF85rz2bxKBhuB+KpYCal7T
Yp4y+X3vr22mrwlfF7HMMnfkpyNkMURTcRVjvuxVulautWAo22hebfudG+Q7FQBS
bpKgDJd4N8m3r5w9A1EDHHjngUlvkrYv7elZPkSCwGKvKrSzBcrhKP8AqerVFsZc
fSxhC7eiNu2S/N+HnoA3z9Bvj/hk/tn1soHfjzCd4B3iNnrY2Wedl648q26q2AB/
Qp4HImHjiJvMhUdvqZJe4KOOo218nRacgMDZmaaNV92czFJXHJLlsvpy0go0B+wC
8ZdRmoFYZM2wtMpwGUmaWPIwarbjbK02njsclQ96tMYIsKZN0E4PEfTyvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxAxr7lrQlG3Lca7j3eq7lL9LXvMB8GA1UdIwQY
MBaAFL8fbNb6uV0kHNmsX4X00F+d5Y+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdng5czF2cTVYU1FjMmF4ZmhmVFFYNTNsajVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lM2M5NzEtNTMyNC00MTM0LWJlYWQt
NTk3YzQzNTk4NTc3LzEvdng5czF2cTVYU1FjMmF4ZmhmVFFYNTNsajVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lM2M5NzEtNTMyNC00MTM0LWJlYWQtNTk3YzQzNTk4NTc3
LzEvdng5czF2cTVYU1FjMmF4ZmhmVFFYNTNsajVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojmgcb0T
ObVMHqu5VawNBNlA/FyjzWNBzXqjfsk7USIju5Ojk2dJrAjEGhXzPs536/ZxSUG+
sV7uZ5jY9jGieVwWPzy9QkSrgahRj8/ulcBaLWhDpMqw0UvuOxhSc3rO5hF6kP6J
j0AUnJPA2axO4jGK/4UcMPf5EgCb0w1k7WYgx95m8Wo/l4YMZ2I9fzkxCP7q7b0E
j4CkrGcTx4ZMgNyFZVVEkLs8xrIf1YcSL5IF7fmMMREgpdn6F19JJDD1zXBXvD0t
rjJSiM089YqFHYix1fLJOrWYCMLuQZHWM6prQ19pu5C9Gxjk82x0WBGAF62b9Tcv
1D932yO7ah/CeA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:54 2025 by rpki-client