Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json)
Hash identifier: caySAlKwdvz53GgYyvf3MBoVyLEHpDYvYEFx5lBeOfY=
Subject key identifier: 40:25:12:95:8A:33:A5:E5:E9:0E:6F:F6:C2:23:77:4C:89:90:B9:EA
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial: 019A0BCACDE140E061B4DE8DC246E2395B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
Manifest number: 16EC
Signing time: Wed 22 Oct 2025 12:00:31 +0000
Manifest this update: Wed 22 Oct 2025 12:00:31 +0000
Manifest next update: Thu 23 Oct 2025 12:00:31 +0000
Files and hashes: 1: OTqu6ofFTyzK0xc5jrx6KgXbQ7M.roa (hash: McteydyUGW+LpPCexm+O1QefOp1oYc2XsREa8UjCVIA=)
2: dKgonROO4xpKslqbxO1osnY3m3M.roa (hash: Hl3GLighJnfdP7Jed7jsC0ysJmCVrDY4pvlKDvOdEYc=)
3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: /RYtEuyxIuwtwHM/aRke0ka5tsw0Niie4u5K7e+eLFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:ca:cd:e1:40:e0:61:b4:de:8d:c2:46:e2:39:5b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Validity
Not Before: Oct 22 12:00:31 2025 GMT
Not After : Oct 23 12:00:31 2025 GMT
Subject: CN=402512958a33a5e5e90e6ff6c223774c8990b9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:89:42:51:e2:c8:ec:5c:a7:eb:ab:50:b6:78:
ec:0d:55:b6:7f:eb:e2:3b:d8:51:a6:cc:53:bb:47:
4d:6e:01:8b:29:c9:4e:4c:ec:4d:70:09:54:31:ad:
cf:35:b6:52:44:ea:bb:a4:ed:c7:12:9d:d7:28:d6:
bb:aa:57:f8:30:7e:8c:c6:da:25:b7:c0:4e:6a:0a:
9a:b1:a2:6c:9e:40:d4:cf:27:b7:69:1d:10:d2:4f:
ff:3f:25:e7:1f:cf:e5:be:6d:65:f9:93:c4:06:b7:
60:bb:a3:4f:8e:d4:7b:ac:6f:06:40:a7:1f:11:5e:
e1:4b:47:1e:4a:f2:58:a8:61:de:60:ce:f0:bb:dc:
d7:b9:fc:93:1b:0c:60:01:2a:eb:4a:b1:b3:4f:df:
c2:a8:0a:85:1e:04:d8:b1:17:4b:e0:2a:98:8e:6d:
d6:a6:31:d7:83:70:67:59:05:ea:2d:bc:f2:f2:0f:
48:23:68:cb:6c:af:ce:84:de:da:02:a0:4a:77:ae:
46:ef:aa:30:70:a7:15:6c:53:09:c8:e3:96:76:a1:
c2:6a:ac:c1:35:ed:8f:b8:0a:e5:a5:ba:05:a5:9e:
ec:0c:4b:fe:58:ac:17:bb:03:1d:c6:cb:f5:70:85:
26:e5:87:a6:70:bb:f4:d7:9c:55:b6:8f:b9:62:06:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:25:12:95:8A:33:A5:E5:E9:0E:6F:F6:C2:23:77:4C:89:90:B9:EA
X509v3 Authority Key Identifier:
keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:37:ed:f6:d2:e4:5c:dd:de:31:48:ad:ed:01:16:4a:4c:41:
64:c0:58:89:a1:4e:e4:df:7f:06:a7:b9:94:d4:24:14:3d:bb:
7b:ce:bc:e8:4c:d2:96:1f:00:7b:90:ca:d6:0c:57:ae:f1:2d:
68:ea:66:1e:d9:01:56:7e:8b:fe:13:12:63:6e:8c:7c:12:a4:
8e:44:c3:d4:3c:36:78:7f:cf:7e:97:88:00:c9:61:1b:62:c5:
18:e9:2e:90:39:1e:4f:9a:f5:49:2b:52:20:0f:ba:71:78:93:
12:e5:cf:62:0d:3a:ba:b7:15:64:b9:19:82:05:32:0a:c0:6b:
1d:ae:0c:2a:79:16:f3:f6:8f:af:f9:e1:e3:dd:fe:c4:37:88:
2b:bd:2b:d3:20:b3:f8:ab:46:61:df:e8:8f:9b:8f:a1:fb:14:
d9:36:19:a0:2a:07:89:e3:2a:d7:ba:ff:2a:f0:11:66:fc:46:
59:49:0c:2d:c0:39:d6:94:69:d8:0e:98:27:32:ee:f7:df:48:
ff:d5:e0:04:91:bc:d0:23:a7:43:5a:f6:96:f9:3a:ad:e0:8d:
ab:88:aa:28:cb:d3:0f:8f:76:1e:ec:00:00:b2:04:ba:c3:56:
0e:98:c1:5f:ff:58:f5:c1:77:97:6c:1a:26:99:2c:23:33:5c:
c3:e4:9f:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoLys3hQOBhtN6NwkbiOVtdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMzEyNDdmMzU5YTZkNDkyZGM5OTQzYWUwZjAwZmM4YmUy
MTZjNzgwHhcNMjUxMDIyMTIwMDMxWhcNMjUxMDIzMTIwMDMxWjAzMTEwLwYDVQQD
Eyg0MDI1MTI5NThhMzNhNWU1ZTkwZTZmZjZjMjIzNzc0Yzg5OTBiOWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIlCUeLI7Fyn66tQtnjsDVW2f+vi
O9hRpsxTu0dNbgGLKclOTOxNcAlUMa3PNbZSROq7pO3HEp3XKNa7qlf4MH6Mxtol
t8BOagqasaJsnkDUzye3aR0Q0k//PyXnH8/lvm1l+ZPEBrdgu6NPjtR7rG8GQKcf
EV7hS0ceSvJYqGHeYM7wu9zXufyTGwxgASrrSrGzT9/CqAqFHgTYsRdL4CqYjm3W
pjHXg3BnWQXqLbzy8g9II2jLbK/OhN7aAqBKd65G76owcKcVbFMJyOOWdqHCaqzB
Ne2PuArlpboFpZ7sDEv+WKwXuwMdxsv1cIUm5YemcLv015xVto+5YgaU0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAlEpWKM6Xl6Q5v9sIjd0yJkLnqMB8GA1UdIwQY
MBaAFLwxJH81mm1JLcmUOuDwD8i+IWx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zNDZiZWYtMGE1ZS00NDAwLTlmODQt
NTY4MDVjYTExYzMzLzEvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8zNDZiZWYtMGE1ZS00NDAwLTlmODQtNTY4MDVjYTExYzMz
LzEvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjft9tLk
XN3eMUit7QEWSkxBZMBYiaFO5N9/Bqe5lNQkFD27e8686EzSlh8Ae5DK1gxXrvEt
aOpmHtkBVn6L/hMSY26MfBKkjkTD1Dw2eH/PfpeIAMlhG2LFGOkukDkeT5r1SStS
IA+6cXiTEuXPYg06urcVZLkZggUyCsBrHa4MKnkW8/aPr/nh493+xDeIK70r0yCz
+KtGYd/oj5uPofsU2TYZoCoHieMq17r/KvARZvxGWUkMLcA51pRp2A6YJzLu999I
/9XgBJG80COnQ1r2lvk6reCNq4iqKMvTD492HuwAALIEusNWDpjBX/9Y9cF3l2wa
JpksIzNcw+SfhA==
-----END CERTIFICATE-----
Generated at Wed Oct 22 19:50:22 2025 by rpki-client