Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
File: vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft (raw, json)
Hash identifier: AapiLQgNM1CI+583rHSfGUWlOxVecI1Be1DGPoZGDqM=
Subject key identifier: AD:16:1D:78:BD:52:53:12:B6:40:0F:93:8D:49:AF:E1:43:C9:C2:AE
Authority key identifier: BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9
Certificate issuer: /CN=bd82e60d072e5185435a900e323f463806d433c9
Certificate serial: 019A7225AA7484D35A7CF174D8DDBD3DE330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:02 +0000
Manifest this update: Tue 11 Nov 2025 09:01:02 +0000
Manifest next update: Wed 12 Nov 2025 09:01:02 +0000
Files and hashes: 1: vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl (hash: x72FNNYEr2lYxiNRWkIEoyw1cNTqiAti9JpsoFSXLKA=)
2: zHFsSZojvy_X7uL-vPL2okM6zhI.roa (hash: n8rylT6z4CcEms6K9HKeeDe6KPQo1phvGPnzqc1vlUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:aa:74:84:d3:5a:7c:f1:74:d8:dd:bd:3d:e3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd82e60d072e5185435a900e323f463806d433c9
Validity
Not Before: Nov 11 09:01:02 2025 GMT
Not After : Nov 12 09:01:02 2025 GMT
Subject: CN=ad161d78bd525312b6400f938d49afe143c9c2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:50:e6:95:ce:7a:31:f2:45:39:36:20:37:dc:
9d:c3:83:08:16:3a:89:ca:90:aa:87:5e:27:6f:7d:
a6:bd:9d:77:8d:3c:c7:cc:5f:9e:4d:9c:f1:68:26:
63:48:e6:94:c0:26:b5:6b:99:62:30:1a:43:68:f5:
cb:30:68:d4:c5:23:62:d9:50:7f:07:3c:c4:d4:85:
3d:ec:a3:29:af:3d:d3:f0:20:8b:be:12:2a:37:ea:
5e:2e:2f:5c:91:82:51:f5:e8:b3:43:bf:7b:aa:43:
52:7e:8e:a9:67:48:33:eb:b9:80:8e:4d:de:0a:e9:
7f:74:87:a0:e2:65:c3:65:b2:04:72:65:4a:43:d1:
80:b0:cf:8c:8a:68:6e:17:ce:1b:f9:f8:e3:9f:d4:
10:c9:01:ce:b5:61:85:33:3f:c7:ca:b6:73:aa:de:
ba:bb:4c:5e:63:02:16:b8:6d:ac:a7:d6:82:7a:b9:
45:28:1b:31:a0:7b:08:dc:15:fc:07:f6:00:b8:2c:
67:96:e8:52:b6:54:b1:8f:6b:71:af:1d:0a:9a:ad:
15:49:0c:47:32:60:34:c3:06:f7:92:e4:dd:a2:08:
cd:87:cc:13:8a:11:d7:8c:c4:b0:cd:16:90:a2:a4:
f6:43:d3:e8:d6:2c:97:9c:c4:fc:54:0f:69:13:34:
2a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:16:1D:78:BD:52:53:12:B6:40:0F:93:8D:49:AF:E1:43:C9:C2:AE
X509v3 Authority Key Identifier:
keyid:BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ae:96:2e:41:2e:00:ac:88:4b:43:7a:ec:31:c2:09:2a:f0:
e8:48:66:89:41:a8:10:17:2b:6c:c4:8f:05:c1:78:6f:93:28:
e2:a4:c1:6c:4a:e5:f1:b4:a1:27:fe:7c:d7:23:97:b6:fa:b5:
f2:f2:84:ee:7d:8f:21:e2:25:9f:d8:c9:03:81:70:72:93:b2:
5c:15:d5:46:d3:e4:19:1f:91:08:c9:e8:b9:01:82:d0:b3:5c:
0d:e9:4e:42:dd:ef:1f:b9:ed:ff:8c:77:5d:e0:fd:47:95:17:
2b:0b:1b:07:c6:07:15:8d:45:02:c0:d7:9b:b7:b3:55:62:ff:
29:16:e7:a4:dd:30:65:a4:b1:bd:1e:c2:45:06:b7:de:81:cb:
43:2f:c0:d5:08:8b:38:0a:d8:6d:12:c6:9a:7f:03:ae:f3:c4:
a6:32:85:b4:c9:ee:64:77:8c:06:c2:ee:e2:f3:ba:ca:94:9d:
8c:f9:f8:0a:e7:68:1c:01:2c:fb:78:c2:e5:a1:c0:90:db:26:
92:4c:15:72:04:3b:53:29:a2:cc:4d:8d:58:5b:0b:49:fc:fb:
c3:82:dd:b9:c2:77:ab:85:48:88:8a:2a:c9:10:9d:e5:d6:29:
2c:bc:f6:59:6f:27:ed:f2:32:24:bb:3a:77:6d:18:18:a9:13:
23:7e:e5:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJap0hNNafPF02N29PeMwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkODJlNjBkMDcyZTUxODU0MzVhOTAwZTMyM2Y0NjM4MDZk
NDMzYzkwHhcNMjUxMTExMDkwMTAyWhcNMjUxMTEyMDkwMTAyWjAzMTEwLwYDVQQD
EyhhZDE2MWQ3OGJkNTI1MzEyYjY0MDBmOTM4ZDQ5YWZlMTQzYzljMmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1Dmlc56MfJFOTYgN9ydw4MIFjqJ
ypCqh14nb32mvZ13jTzHzF+eTZzxaCZjSOaUwCa1a5liMBpDaPXLMGjUxSNi2VB/
BzzE1IU97KMprz3T8CCLvhIqN+peLi9ckYJR9eizQ797qkNSfo6pZ0gz67mAjk3e
Cul/dIeg4mXDZbIEcmVKQ9GAsM+MimhuF84b+fjjn9QQyQHOtWGFMz/HyrZzqt66
u0xeYwIWuG2sp9aCerlFKBsxoHsI3BX8B/YAuCxnluhStlSxj2txrx0Kmq0VSQxH
MmA0wwb3kuTdogjNh8wTihHXjMSwzRaQoqT2Q9Po1iyXnMT8VA9pEzQqqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0WHXi9UlMStkAPk41Jr+FDycKuMB8GA1UdIwQY
MBaAFL2C5g0HLlGFQ1qQDjI/RjgG1DPJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdllMbURRY3VVWVZEV3BBT01qOUdPQWJVTThrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lM2JiYzktNzhjMy00M2EyLWI5YjAt
NDhhY2VmNjcyZTRhLzEvdllMbURRY3VVWVZEV3BBT01qOUdPQWJVTThrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lM2JiYzktNzhjMy00M2EyLWI5YjAtNDhhY2VmNjcyZTRh
LzEvdllMbURRY3VVWVZEV3BBT01qOUdPQWJVTThrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbq6WLkEu
AKyIS0N67DHCCSrw6EhmiUGoEBcrbMSPBcF4b5Mo4qTBbErl8bShJ/581yOXtvq1
8vKE7n2PIeIln9jJA4FwcpOyXBXVRtPkGR+RCMnouQGC0LNcDelOQt3vH7nt/4x3
XeD9R5UXKwsbB8YHFY1FAsDXm7ezVWL/KRbnpN0wZaSxvR7CRQa33oHLQy/A1QiL
OArYbRLGmn8DrvPEpjKFtMnuZHeMBsLu4vO6ypSdjPn4CudoHAEs+3jC5aHAkNsm
kkwVcgQ7UymizE2NWFsLSfz7w4LducJ3q4VIiIoqyRCd5dYpLLz2WW8n7fIyJLs6
d20YGKkTI37lMA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:26 2025 by rpki-client