Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
File: vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft (raw, json)
Hash identifier: hQs+RpkY0LE/CBiN5XAlXVEuTY5BHqJ9YkrFsmlohQc=
Subject key identifier: 21:D0:8A:66:E6:1E:28:3D:A1:95:95:92:4F:1F:4B:BE:0D:77:4C:96
Authority key identifier: BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
Certificate issuer: /CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Certificate serial: 019A0B5DF375047DE04FFDF6910DF5CE5BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
Manifest number: 16EA
Signing time: Wed 22 Oct 2025 10:01:37 +0000
Manifest this update: Wed 22 Oct 2025 10:01:37 +0000
Manifest next update: Thu 23 Oct 2025 10:01:37 +0000
Files and hashes: 1: 04aeLB2DOt1K2QS3FV3HPiOFTOY.roa (hash: A0BDulMr2mADVn63DP1McJaXG3hUV8E5IfZVNPfU4eA=)
2: bO2ZdwM21enGaKwe_1iSEPBIIts.roa (hash: uBMm/tJP0uLUJeJM+1YEtRm4BQYL1PFKNrER1Hr5ksk=)
3: vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl (hash: KLWGLY367uLAaiNtmq8Sv0eufpfcHxst6gGO0s+08ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5d:f3:75:04:7d:e0:4f:fd:f6:91:0d:f5:ce:5b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Validity
Not Before: Oct 22 10:01:37 2025 GMT
Not After : Oct 23 10:01:37 2025 GMT
Subject: CN=21d08a66e61e283da19595924f1f4bbe0d774c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:5d:41:b8:0b:8a:fb:0b:e6:90:9f:00:46:
f9:1a:a2:34:23:a2:fb:42:6d:74:61:72:f6:79:49:
4f:9f:8a:73:e2:3c:3a:af:c1:cf:93:8b:7d:da:47:
bb:c2:5f:d4:3a:d4:87:40:8b:f5:ee:4b:bb:04:f5:
41:d7:fc:72:2f:0c:a3:2f:20:b6:01:36:a4:fa:21:
ea:da:da:41:5b:f1:28:71:8e:4f:aa:17:1e:10:49:
ac:2d:50:26:62:bb:e4:a0:ff:6a:82:68:08:7c:31:
37:52:0a:96:6e:23:6b:5c:d7:e0:dc:f9:99:7a:67:
c3:2f:3d:d3:82:41:42:67:0c:f6:2d:f1:35:e5:1e:
ee:f4:ee:dd:04:e4:45:c9:90:f2:a4:95:c0:3b:a2:
43:ad:fe:7e:83:fc:a0:c7:32:47:eb:2f:c6:51:4c:
9d:03:aa:be:56:c2:80:60:7b:eb:66:05:34:f9:43:
bd:91:07:52:80:23:85:1a:80:21:f6:ef:50:01:87:
42:28:e0:65:1f:34:45:e0:ac:f6:18:33:73:6b:8e:
e7:e4:db:88:ca:da:a9:70:50:fa:33:04:ce:c9:43:
74:40:f0:9f:92:8d:15:e0:8e:c0:61:8d:1c:63:b8:
5d:a9:ab:5a:c0:d7:9a:8b:e8:22:2b:54:4c:8f:3b:
cf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D0:8A:66:E6:1E:28:3D:A1:95:95:92:4F:1F:4B:BE:0D:77:4C:96
X509v3 Authority Key Identifier:
keyid:BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0f:05:5b:f3:f5:b9:db:de:62:8b:9c:8e:81:4a:79:cf:be:
b2:a1:24:57:ca:c2:9b:39:c8:7e:ff:00:c4:55:12:6c:27:77:
f4:e8:a8:c7:6a:86:a5:8b:cb:8b:b0:2d:56:13:0f:f0:3a:75:
ee:fd:90:06:65:38:b9:18:be:7a:f8:5a:dd:62:84:e8:48:78:
86:1f:1c:d0:24:c5:79:f0:fb:ee:e2:0a:a0:d0:75:94:cb:70:
93:9b:f1:11:db:dc:c2:7d:17:83:66:16:9d:ae:78:33:fa:f9:
c4:aa:2e:80:77:df:77:a9:3d:21:e1:38:c3:10:38:2b:7f:62:
30:53:e9:02:7a:88:98:3c:34:8e:78:f0:0a:e8:6a:50:37:00:
13:9c:f6:d2:41:d6:3e:1c:ce:24:1e:b3:34:91:fb:dc:a8:db:
94:e4:4a:c2:25:33:f2:b8:c9:05:2a:03:07:d5:ee:3b:2d:79:
e9:8e:92:e1:36:3b:63:9e:dc:04:57:76:1a:25:5e:b5:90:3d:
4b:8b:d3:a3:e4:6a:4c:1e:b2:3c:3c:4b:80:03:d5:a7:63:57:
9f:5c:06:63:e5:59:0e:38:5c:cb:40:5a:f4:93:e7:ef:3e:db:
85:e1:5e:d6:86:13:eb:b8:c1:06:1e:8b:42:54:ad:0f:5d:ed:
28:7c:53:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoLXfN1BH3gT/32kQ31zlvrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNmM0OTdmZjRkNGE4YmI1YTI0YmRkMjA1MTU3NWI0OWEw
ODNjNzUwHhcNMjUxMDIyMTAwMTM3WhcNMjUxMDIzMTAwMTM3WjAzMTEwLwYDVQQD
EygyMWQwOGE2NmU2MWUyODNkYTE5NTk1OTI0ZjFmNGJiZTBkNzc0Yzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoFdQbgLivsL5pCfAEb5GqI0I6L7
Qm10YXL2eUlPn4pz4jw6r8HPk4t92ke7wl/UOtSHQIv17ku7BPVB1/xyLwyjLyC2
ATak+iHq2tpBW/EocY5PqhceEEmsLVAmYrvkoP9qgmgIfDE3UgqWbiNrXNfg3PmZ
emfDLz3TgkFCZwz2LfE15R7u9O7dBORFyZDypJXAO6JDrf5+g/ygxzJH6y/GUUyd
A6q+VsKAYHvrZgU0+UO9kQdSgCOFGoAh9u9QAYdCKOBlHzRF4Kz2GDNza47n5NuI
ytqpcFD6MwTOyUN0QPCfko0V4I7AYY0cY7hdqatawNeai+giK1RMjzvPeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHQimbmHig9oZWVkk8fS74Nd0yWMB8GA1UdIwQY
MBaAFL5sSX/01Ki7WiS90gUVdbSaCDx1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm14SmZfVFVxTHRhSkwzU0JSVjF0Sm9JUEhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81ZGI4ZWItY2NjYy00OThhLTgxY2It
NjVhZTU4YTliZWU4LzEvdm14SmZfVFVxTHRhSkwzU0JSVjF0Sm9JUEhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi81ZGI4ZWItY2NjYy00OThhLTgxY2ItNjVhZTU4YTliZWU4
LzEvdm14SmZfVFVxTHRhSkwzU0JSVjF0Sm9JUEhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkA8FW/P1
udveYoucjoFKec++sqEkV8rCmznIfv8AxFUSbCd39Oiox2qGpYvLi7AtVhMP8Dp1
7v2QBmU4uRi+evha3WKE6Eh4hh8c0CTFefD77uIKoNB1lMtwk5vxEdvcwn0Xg2YW
na54M/r5xKougHffd6k9IeE4wxA4K39iMFPpAnqImDw0jnjwCuhqUDcAE5z20kHW
PhzOJB6zNJH73KjblORKwiUz8rjJBSoDB9XuOy156Y6S4TY7Y57cBFd2GiVetZA9
S4vTo+RqTB6yPDxLgAPVp2NXn1wGY+VZDjhcy0Ba9JPn7z7bheFe1oYT67jBBh6L
QlStD13tKHxTvA==
-----END CERTIFICATE-----
Generated at Wed Oct 22 15:16:57 2025 by rpki-client