Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
File: vyYxqJlAx3n72dojGh0umEDJx8Y.mft (raw, json)
Hash identifier: 6dhpPJQ0zaejr03XSnYju0wyorpR/NNHwDVFEPX6k8g=
Subject key identifier: 46:29:F4:D6:09:1A:3C:70:18:2B:4C:2F:33:2E:88:53:F8:6B:A5:A6
Authority key identifier: BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6
Certificate issuer: /CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
Certificate serial: 019A72CA9494D9FA206949D8ADC979B91DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 12:01:10 +0000
Manifest this update: Tue 11 Nov 2025 12:01:10 +0000
Manifest next update: Wed 12 Nov 2025 12:01:10 +0000
Files and hashes: 1: DEn4JQPghs2T3ZxJbDlQm6KWdJI.roa (hash: L1xxxOCLHdiHBvdX2bAU1yEEGqFCGIfW3cUmFenxpnE=)
2: vyYxqJlAx3n72dojGh0umEDJx8Y.crl (hash: 3KzApmsqBp3WJbLY0lVeGdrUT/kcKSbSgyyashdloUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:94:94:d9:fa:20:69:49:d8:ad:c9:79:b9:1d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
Validity
Not Before: Nov 11 12:01:10 2025 GMT
Not After : Nov 12 12:01:10 2025 GMT
Subject: CN=4629f4d6091a3c70182b4c2f332e8853f86ba5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:d8:2a:df:66:04:2e:b9:ae:78:f0:d5:0c:
72:0e:a8:8d:47:ab:7d:12:ee:47:c4:2d:41:fe:a5:
9c:39:bc:46:bb:4d:80:40:d5:22:79:bd:42:ca:2d:
0d:33:86:9f:f3:16:17:32:de:ed:82:96:f3:c0:5f:
4f:5f:e4:58:95:d6:03:8b:c8:64:3d:8e:71:30:0b:
ea:07:eb:1b:b3:d3:32:7f:03:c1:5b:d2:1c:86:ca:
1b:1a:3b:56:4a:23:e8:81:02:69:52:e7:4a:bd:d1:
14:42:24:7a:23:af:f0:34:a7:fc:ca:d4:82:5e:2c:
63:80:a3:1c:22:28:ec:00:3e:6f:79:06:5c:a7:54:
f5:2a:ea:25:69:19:b0:21:d2:39:f9:97:68:da:30:
66:6d:d7:60:3d:2c:51:60:fa:79:8f:2c:d2:0e:48:
98:6c:3f:72:0a:7a:91:f7:c3:71:20:02:31:24:05:
2e:a2:7f:f0:34:43:a6:da:1d:db:c9:8e:22:c9:c6:
c5:3e:15:4f:69:c7:2c:be:4e:56:ef:45:9d:79:0b:
9c:d0:8f:23:3c:7b:92:bf:53:07:03:15:4a:7f:20:
a4:a5:19:5b:6f:4b:d3:96:20:0c:95:3a:1e:a8:01:
f4:10:b1:54:cc:1b:79:a5:c0:dc:c0:15:dc:d9:e3:
ed:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:29:F4:D6:09:1A:3C:70:18:2B:4C:2F:33:2E:88:53:F8:6B:A5:A6
X509v3 Authority Key Identifier:
keyid:BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f0:8b:a3:f4:b2:d0:4e:ff:d3:57:4b:15:6f:2f:5c:74:41:
a5:2d:bc:05:e5:fd:80:73:a5:4f:db:2c:19:82:db:b5:3a:8e:
37:cb:88:b2:b3:33:23:7d:0d:26:4d:2b:b0:54:77:8f:e4:1b:
7a:4d:a4:ba:50:3e:01:68:19:70:d1:2e:7a:22:33:8d:a1:c9:
eb:74:31:9a:6f:13:41:c4:53:68:ca:65:d1:74:8b:3c:9a:37:
4f:de:72:39:8f:26:89:df:7c:68:fc:7d:5f:ff:9c:b0:90:a8:
4b:d0:30:bc:b7:a1:35:c8:c3:cb:f6:ce:ec:9b:7f:af:fb:59:
87:d2:83:fb:6e:77:99:7e:58:0a:14:ec:59:f2:34:18:bc:4a:
4f:b0:94:cd:5d:13:31:85:49:2e:85:e2:32:3a:2b:93:91:ec:
4f:e2:dd:69:ff:f3:c5:a2:e6:c6:6f:f3:66:5e:0f:34:94:f4:
47:94:7f:a1:1c:75:68:b3:3e:d4:29:71:c2:fa:11:31:2e:68:
33:4e:d7:5d:b3:07:d3:5a:5a:47:bf:8c:4f:fb:91:b7:2e:d0:
d2:82:d0:57:64:47:b5:ee:e1:2a:e7:01:63:6b:93:22:dd:b9:
9d:21:87:2a:82:f2:fb:30:bb:e1:ba:b9:ed:ee:64:83:65:57:
dc:98:6b:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyypSU2fogaUnYrcl5uR25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMjYzMWE4OTk0MGM3NzlmYmQ5ZGEyMzFhMWQyZTk4NDBj
OWM3YzYwHhcNMjUxMTExMTIwMTEwWhcNMjUxMTEyMTIwMTEwWjAzMTEwLwYDVQQD
Eyg0NjI5ZjRkNjA5MWEzYzcwMTgyYjRjMmYzMzJlODg1M2Y4NmJhNWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntnYKt9mBC65rnjw1QxyDqiNR6t9
Eu5HxC1B/qWcObxGu02AQNUieb1Cyi0NM4af8xYXMt7tgpbzwF9PX+RYldYDi8hk
PY5xMAvqB+sbs9MyfwPBW9IchsobGjtWSiPogQJpUudKvdEUQiR6I6/wNKf8ytSC
XixjgKMcIijsAD5veQZcp1T1KuolaRmwIdI5+Zdo2jBmbddgPSxRYPp5jyzSDkiY
bD9yCnqR98NxIAIxJAUuon/wNEOm2h3byY4iycbFPhVPaccsvk5W70WdeQuc0I8j
PHuSv1MHAxVKfyCkpRlbb0vTliAMlToeqAH0ELFUzBt5pcDcwBXc2ePtrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYp9NYJGjxwGCtMLzMuiFP4a6WmMB8GA1UdIwQY
MBaAFL8mMaiZQMd5+9naIxodLphAycfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnlZeHFKbEF4M243MmRvakdoMHVtRURKeDhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9kNjA1NDgtODYwOC00MDFjLWEyYjUt
Y2Q3YjI4OGQ2ZWEwLzEvdnlZeHFKbEF4M243MmRvakdoMHVtRURKeDhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9kNjA1NDgtODYwOC00MDFjLWEyYjUtY2Q3YjI4OGQ2ZWEw
LzEvdnlZeHFKbEF4M243MmRvakdoMHVtRURKeDhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/CLo/Sy
0E7/01dLFW8vXHRBpS28BeX9gHOlT9ssGYLbtTqON8uIsrMzI30NJk0rsFR3j+Qb
ek2kulA+AWgZcNEueiIzjaHJ63Qxmm8TQcRTaMpl0XSLPJo3T95yOY8mid98aPx9
X/+csJCoS9AwvLehNcjDy/bO7Jt/r/tZh9KD+253mX5YChTsWfI0GLxKT7CUzV0T
MYVJLoXiMjork5HsT+Ldaf/zxaLmxm/zZl4PNJT0R5R/oRx1aLM+1ClxwvoRMS5o
M07XXbMH01paR7+MT/uRty7Q0oLQV2RHte7hKucBY2uTIt25nSGHKoLy+zC74bq5
7e5kg2VX3JhraA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:47 2025 by rpki-client