Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
File: vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft (raw, json)
Hash identifier: bQ4WcXNLCwKYN00EfUVZvSbVdioA6qx+cWLD4mLH4d4=
Subject key identifier: E8:B1:0B:A8:ED:87:8D:81:DF:CF:11:99:99:76:E6:F9:8C:48:14:EB
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 0199C3E9004C95042DF391BAB6783D91EC9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
Manifest number: 1720
Signing time: Wed 08 Oct 2025 13:00:51 +0000
Manifest this update: Wed 08 Oct 2025 13:00:51 +0000
Manifest next update: Thu 09 Oct 2025 13:00:51 +0000
Files and hashes: 1: aNeNti1OnoEazjIvuWe2cw4fSiE.roa (hash: eMyBgjTIu3x6QZFdYc0ThJiGgUZM0+emfvXfZvql+cQ=)
2: m4ru5TcymZwyZ3cxRDnq3gnEaOw.roa (hash: dTsqnxjibxvmK4QjJP+2GB4FrGtrYTrsCusxLqvYBKE=)
3: vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl (hash: EcqcTcQDK+Wv3fKIua+pdsm0uq9EpJD9c8YrJzpaWb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:e9:00:4c:95:04:2d:f3:91:ba:b6:78:3d:91:ec:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Oct 8 13:00:51 2025 GMT
Not After : Oct 9 13:00:51 2025 GMT
Subject: CN=e8b10ba8ed878d81dfcf11999976e6f98c4814eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e8:6a:28:64:b4:20:cd:4a:56:ea:f0:34:07:
74:ca:84:0a:76:8b:88:9f:2a:11:17:70:9a:3c:78:
77:c2:98:af:08:36:c8:56:10:b4:b3:74:9d:65:b7:
14:97:17:00:9e:6f:e9:07:30:45:ec:4f:c0:d4:16:
c8:f5:53:2a:9c:66:b3:78:ce:84:70:dd:0b:6c:12:
de:17:82:df:85:8a:64:c9:dc:e8:2f:e3:49:02:32:
5c:09:d9:7c:73:ea:06:57:b0:36:79:8f:63:7f:96:
50:6a:e4:fd:5e:8f:26:6b:56:c8:df:1a:f3:bb:d1:
a5:6f:9f:c1:26:e5:f4:5c:5b:07:2b:ae:cc:f0:8f:
e3:bb:7f:2b:2a:99:a1:47:fb:a9:7c:5e:5f:ba:c6:
3f:2d:42:d3:b3:0f:2c:51:46:db:2c:4b:5e:c9:2c:
54:f9:6b:01:c2:4c:54:12:49:4e:d5:23:15:27:d3:
40:66:e1:46:67:a0:8c:87:34:34:af:f0:f1:2c:0b:
81:c1:1e:bd:a3:82:cd:28:8f:32:54:26:66:18:5f:
f7:4e:3b:94:e9:7e:d8:df:d5:83:b3:b5:b7:0d:de:
d3:5b:00:6b:d9:96:c3:14:a5:ca:a4:d1:65:2b:b2:
c1:0e:d6:f4:45:de:02:9c:07:68:ba:ae:f2:66:06:
99:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B1:0B:A8:ED:87:8D:81:DF:CF:11:99:99:76:E6:F9:8C:48:14:EB
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9b:5c:8c:7d:16:4d:38:a6:f7:8d:ac:10:e0:87:de:2f:19:
2a:8d:a4:26:65:f9:a3:0d:76:25:13:f7:9a:65:87:37:01:1b:
c8:9f:b5:7c:0a:16:26:73:8e:25:67:b6:e0:8a:ee:75:2e:98:
ca:7d:fa:e7:e2:4e:3d:c2:d2:7a:31:86:ae:29:15:bf:cd:30:
f7:bb:f2:d1:82:85:34:e3:75:8f:e1:05:f8:ad:b3:a3:b3:0a:
81:0f:cf:02:7d:de:01:95:06:c1:86:22:9f:e7:d4:ea:ef:0f:
5d:cf:20:18:a6:2f:09:2d:d1:46:cf:78:dd:e5:d5:56:53:e7:
fa:1c:87:b6:7a:7c:13:b6:5f:87:9a:c9:8d:0e:30:01:54:88:
a6:1b:f2:de:0e:1d:ff:e0:58:3b:98:b1:99:9b:5c:28:89:8f:
09:8a:ee:e6:56:19:a8:50:c0:ea:b9:2b:ff:57:8f:2a:03:d8:
07:73:96:7f:c0:a6:df:6b:af:44:74:b4:39:25:a1:b3:db:23:
16:ee:da:a5:eb:54:56:51:83:70:f0:a6:0f:4a:51:73:e1:53:
fe:fa:e0:b8:30:21:ec:5c:33:a0:20:90:6b:06:7d:14:0f:7b:
21:02:90:d3:86:d6:39:98:12:84:c6:7e:a4:81:e6:c6:97:2c:
69:3e:07:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnD6QBMlQQt85G6tng9keycMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZDI0NDIxNGQ3NjQ2OGQzZmI3MmFiYWQxODkyZWYyM2Rl
ZGU5NzgwHhcNMjUxMDA4MTMwMDUxWhcNMjUxMDA5MTMwMDUxWjAzMTEwLwYDVQQD
EyhlOGIxMGJhOGVkODc4ZDgxZGZjZjExOTk5OTc2ZTZmOThjNDgxNGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOhqKGS0IM1KVurwNAd0yoQKdouI
nyoRF3CaPHh3wpivCDbIVhC0s3SdZbcUlxcAnm/pBzBF7E/A1BbI9VMqnGazeM6E
cN0LbBLeF4LfhYpkydzoL+NJAjJcCdl8c+oGV7A2eY9jf5ZQauT9Xo8ma1bI3xrz
u9Glb5/BJuX0XFsHK67M8I/ju38rKpmhR/upfF5fusY/LULTsw8sUUbbLEteySxU
+WsBwkxUEklO1SMVJ9NAZuFGZ6CMhzQ0r/DxLAuBwR69o4LNKI8yVCZmGF/3TjuU
6X7Y39WDs7W3Dd7TWwBr2ZbDFKXKpNFlK7LBDtb0Rd4CnAdouq7yZgaZpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOixC6jth42B388RmZl25vmMSBTrMB8GA1UdIwQY
MBaAFL3SRCFNdkaNP7cqutGJLvI97el4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83NTZlZWYtNjYyOS00NjNhLTk5ZmYt
NDZhNDNlZjAyMjFiLzEvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83NTZlZWYtNjYyOS00NjNhLTk5ZmYtNDZhNDNlZjAyMjFi
LzEvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZtcjH0W
TTim942sEOCH3i8ZKo2kJmX5ow12JRP3mmWHNwEbyJ+1fAoWJnOOJWe24IrudS6Y
yn365+JOPcLSejGGrikVv80w97vy0YKFNON1j+EF+K2zo7MKgQ/PAn3eAZUGwYYi
n+fU6u8PXc8gGKYvCS3RRs943eXVVlPn+hyHtnp8E7Zfh5rJjQ4wAVSIphvy3g4d
/+BYO5ixmZtcKImPCYru5lYZqFDA6rkr/1ePKgPYB3OWf8Cm32uvRHS0OSWhs9sj
Fu7apetUVlGDcPCmD0pRc+FT/vrguDAh7FwzoCCQawZ9FA97IQKQ04bWOZgShMZ+
pIHmxpcsaT4HXg==
-----END CERTIFICATE-----
Generated at Wed Oct 8 15:48:59 2025 by rpki-client