Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft
File: _vf9VxCuWkc-FY3D_WyPF--j5Vs.mft (raw, json)
Hash identifier: CUav/dQ+g39rbL8JmeRRBTzoFIPPMsyrJIksSQcSmjM=
Subject key identifier: C6:B8:42:21:5A:48:88:2B:4C:84:C2:C0:94:48:94:03:15:99:9A:7F
Authority key identifier: FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B
Certificate issuer: /CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b
Certificate serial: 019A71B89FBE3CA87DCA529BA0C695502088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft
Manifest number: 0A1C
Signing time: Tue 11 Nov 2025 07:01:56 +0000
Manifest this update: Tue 11 Nov 2025 07:01:56 +0000
Manifest next update: Wed 12 Nov 2025 07:01:56 +0000
Files and hashes: 1: 718OhuWzPYV76do8dJwyLY1c4nY.roa (hash: 9f1oMEBCBFVGB8zDkVGomUjvRpOkdkFNzsMeZuhP+EQ=)
2: _vf9VxCuWkc-FY3D_WyPF--j5Vs.crl (hash: TZE/owasLqh7KMR0YvA3hkkoyrouJN4PuTAV/r5/r7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:9f:be:3c:a8:7d:ca:52:9b:a0:c6:95:50:20:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b
Validity
Not Before: Nov 11 07:01:56 2025 GMT
Not After : Nov 12 07:01:56 2025 GMT
Subject: CN=c6b842215a48882b4c84c2c09448940315999a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ea:24:bb:b8:58:d4:b8:4e:60:b2:3f:a5:3b:
d7:ad:0f:51:f2:06:f2:41:ec:33:67:2b:58:7f:6d:
ff:91:2a:07:07:9b:e7:64:2d:13:95:9a:37:60:40:
66:9a:f4:f4:e3:2e:22:88:db:25:c2:0e:59:34:ba:
03:c4:ca:9f:f8:9e:7f:5d:99:8f:3d:94:6d:95:76:
ad:93:0f:82:0f:7f:f2:ba:46:3d:0f:81:54:7d:ba:
85:99:86:46:55:07:3b:f5:04:ee:e1:68:bf:5e:99:
b9:07:3b:96:2a:d3:2e:07:30:3c:ef:b9:e2:ef:ff:
f9:c4:fb:9a:fe:c1:f0:93:c7:42:60:0e:ac:4f:a5:
1b:4e:cf:2a:b4:ae:22:13:94:ed:22:25:72:d6:4c:
d5:cf:31:2e:b5:04:5b:7c:52:16:45:2b:33:c4:1a:
bb:66:c3:8e:5c:26:ba:0a:42:c4:67:c7:e8:4d:cd:
00:28:34:0c:0a:65:89:f7:51:68:c8:6d:1a:2d:bb:
b7:57:3b:f5:23:79:5f:3d:bc:0a:10:c2:d6:46:4f:
ac:21:53:ee:9c:7f:81:ad:d7:97:6e:66:d7:d2:20:
f7:bb:8d:d2:ae:ad:4a:2a:2d:65:a9:ed:80:a4:a2:
93:8d:33:c0:7f:b8:60:23:1f:57:81:da:83:a8:f2:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B8:42:21:5A:48:88:2B:4C:84:C2:C0:94:48:94:03:15:99:9A:7F
X509v3 Authority Key Identifier:
keyid:FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:41:dd:92:0c:11:00:b5:4d:ec:d0:11:68:ed:61:d0:ac:b9:
41:b3:96:f7:a7:13:9f:0e:58:2e:e8:45:d2:bf:d2:b1:08:f2:
41:36:cd:46:9e:fd:56:3a:bc:94:6d:97:c4:11:b3:82:96:b0:
4d:01:47:15:6a:65:06:01:97:53:24:0d:08:5c:af:ed:a3:10:
ab:9a:33:3c:36:7b:bf:92:e4:0a:d7:2b:db:dd:70:11:57:b8:
df:38:3f:39:b2:2f:ac:9b:69:45:39:85:13:07:6b:65:f3:10:
71:78:5f:c7:a9:c8:53:f8:c2:a2:3c:88:bb:c2:a5:3d:dd:cb:
63:d1:49:00:18:db:e9:16:43:2c:ad:a4:ae:ea:10:a8:d7:24:
13:44:0e:88:24:86:0c:1f:6c:d2:2b:7f:b0:7d:b5:f8:62:6e:
00:e2:0a:70:4f:2f:d0:86:43:82:bb:da:56:07:21:a9:19:a9:
90:9f:9f:ae:83:65:6a:8b:01:4e:17:06:d4:09:d0:71:df:ac:
22:1d:22:81:b1:bb:29:c2:bb:9a:dd:41:52:1c:74:d9:a7:df:
2e:51:3b:ad:37:a5:69:7c:48:0c:38:17:d6:f0:9b:cf:e3:41:
69:cd:fb:c6:62:fb:ae:92:22:eb:65:6b:64:1a:ad:94:d7:4a:
79:e9:3a:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuJ++PKh9ylKboMaVUCCIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZjdmZDU3MTBhZTVhNDczZTE1OGRjM2ZkNmM4ZjE3ZWZh
M2U1NWIwHhcNMjUxMTExMDcwMTU2WhcNMjUxMTEyMDcwMTU2WjAzMTEwLwYDVQQD
EyhjNmI4NDIyMTVhNDg4ODJiNGM4NGMyYzA5NDQ4OTQwMzE1OTk5YTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+oku7hY1LhOYLI/pTvXrQ9R8gby
QewzZytYf23/kSoHB5vnZC0TlZo3YEBmmvT04y4iiNslwg5ZNLoDxMqf+J5/XZmP
PZRtlXatkw+CD3/yukY9D4FUfbqFmYZGVQc79QTu4Wi/Xpm5BzuWKtMuBzA877ni
7//5xPua/sHwk8dCYA6sT6UbTs8qtK4iE5TtIiVy1kzVzzEutQRbfFIWRSszxBq7
ZsOOXCa6CkLEZ8foTc0AKDQMCmWJ91FoyG0aLbu3Vzv1I3lfPbwKEMLWRk+sIVPu
nH+BrdeXbmbX0iD3u43Srq1KKi1lqe2ApKKTjTPAf7hgIx9XgdqDqPJKCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMa4QiFaSIgrTITCwJRIlAMVmZp/MB8GA1UdIwQY
MBaAFP73/VcQrlpHPhWNw/1sjxfvo+VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3ZmOVZ4Q3VXa2MtRlkzRF9XeVBGLS1qNVZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hYzUxYjItYWQxNi00NTI5LThmODIt
NDUzZDM3YjQ5MjFjLzEvX3ZmOVZ4Q3VXa2MtRlkzRF9XeVBGLS1qNVZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9hYzUxYjItYWQxNi00NTI5LThmODItNDUzZDM3YjQ5MjFj
LzEvX3ZmOVZ4Q3VXa2MtRlkzRF9XeVBGLS1qNVZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANEHdkgwR
ALVN7NARaO1h0Ky5QbOW96cTnw5YLuhF0r/SsQjyQTbNRp79Vjq8lG2XxBGzgpaw
TQFHFWplBgGXUyQNCFyv7aMQq5ozPDZ7v5LkCtcr291wEVe43zg/ObIvrJtpRTmF
EwdrZfMQcXhfx6nIU/jCojyIu8KlPd3LY9FJABjb6RZDLK2kruoQqNckE0QOiCSG
DB9s0it/sH21+GJuAOIKcE8v0IZDgrvaVgchqRmpkJ+froNlaosBThcG1AnQcd+s
Ih0igbG7KcK7mt1BUhx02affLlE7rTelaXxIDDgX1vCbz+NBac37xmL7rpIi62Vr
ZBqtlNdKeek6gw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:24 2025 by rpki-client