Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
File: vCYx1KOVOSlNH55XbmmWIK2Yo40.mft (raw, json)
Hash identifier: IyRbE+Ye0Bo7JMpglMBhfeH6w0HI4G2VeAM8OD+LxoM=
Subject key identifier: 90:DE:47:0C:5E:F7:AA:17:8A:48:AD:94:FA:5F:9E:5B:BC:A7:CC:60
Authority key identifier: BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D
Certificate issuer: /CN=bc2631d4a39539294d1f9e576e699620ad98a38d
Certificate serial: 019A71B8D1BCF0F6A102A585DE275635DA8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
Manifest number: 069E
Signing time: Tue 11 Nov 2025 07:02:09 +0000
Manifest this update: Tue 11 Nov 2025 07:02:09 +0000
Manifest next update: Wed 12 Nov 2025 07:02:09 +0000
Files and hashes: 1: vCYx1KOVOSlNH55XbmmWIK2Yo40.crl (hash: Em0ikwXGCeJGNs50GbBlOt3QlDMV6qKPEW1hiM7hQ3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d1:bc:f0:f6:a1:02:a5:85:de:27:56:35:da:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2631d4a39539294d1f9e576e699620ad98a38d
Validity
Not Before: Nov 11 07:02:09 2025 GMT
Not After : Nov 12 07:02:09 2025 GMT
Subject: CN=90de470c5ef7aa178a48ad94fa5f9e5bbca7cc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7c:ec:bf:52:34:ef:e2:1c:82:82:fe:05:6c:
13:f8:03:91:c2:71:2d:47:1b:df:91:27:73:cb:7c:
48:57:7c:04:e4:b1:bf:6b:61:5d:8f:aa:7c:8e:6f:
1a:99:0a:a9:13:5a:a4:e7:ae:e8:fc:3c:40:7c:14:
c2:26:f6:08:b1:d1:59:64:3e:eb:3e:2a:98:31:d1:
fa:93:e6:8e:cc:7a:a3:2b:5d:89:8e:fa:08:bf:33:
47:11:51:e9:d7:48:27:eb:59:14:5d:36:52:f9:20:
f4:5e:2f:1e:5c:d7:a0:a7:27:38:d1:58:f1:44:f3:
4a:0e:38:ba:60:b9:3c:04:27:79:c5:da:a1:98:53:
cf:1e:cf:79:e9:91:06:58:35:83:6e:ad:88:0f:d1:
4b:61:10:01:fa:81:b5:44:4c:af:aa:3d:fd:f0:0b:
4c:a8:2d:b9:e9:e0:f5:d4:0e:72:ad:92:80:33:26:
5e:0a:2c:d4:8b:9b:be:96:9b:c5:8c:e5:79:9c:f9:
0d:04:7d:26:af:f0:2a:d2:01:08:85:d7:39:12:55:
cd:bf:d9:f5:a5:e8:ba:f8:d7:43:33:b9:85:de:78:
d6:ee:c8:99:6e:f9:d9:a2:17:82:b5:ae:a5:26:6f:
d6:14:ec:50:94:75:c5:1f:86:cb:58:c6:44:ff:04:
85:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DE:47:0C:5E:F7:AA:17:8A:48:AD:94:FA:5F:9E:5B:BC:A7:CC:60
X509v3 Authority Key Identifier:
keyid:BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ee:e3:5e:b3:9e:92:c1:2b:fe:ec:9b:50:39:25:e8:ec:08:
36:12:40:4b:40:da:7f:82:a6:db:02:da:cf:e6:69:92:8f:12:
f4:49:87:2b:1c:4f:18:59:4b:54:8f:5a:18:16:72:8f:a7:0e:
c6:1e:37:b9:ee:17:82:61:3f:55:56:1f:fd:73:bd:46:20:e5:
52:90:13:1a:45:3f:67:70:72:55:67:cf:19:39:fb:0e:df:3b:
a5:bc:90:cc:0c:20:67:6e:b9:3b:f4:94:60:f6:aa:12:01:1c:
70:21:dc:e3:db:40:7c:7d:38:e8:e3:9a:37:66:69:ff:f4:bd:
63:13:9c:12:06:8b:2b:76:9a:73:aa:57:1f:25:34:78:69:28:
e4:44:64:45:f4:bd:6b:3c:d5:4e:20:3a:48:f0:64:6c:d4:74:
40:95:46:c5:4f:e1:6c:ec:a4:37:ed:71:30:7d:9f:92:c5:4c:
78:6e:73:b0:9d:fc:d1:ec:52:c6:0d:e4:19:d4:1f:b8:ba:44:
91:06:46:bc:a9:79:a0:32:d3:6a:01:f0:d3:ca:30:61:1b:6a:
dd:c2:11:70:e2:98:6f:d5:1f:94:7c:51:d0:62:d6:c8:b3:68:
f5:03:aa:05:cd:59:84:df:b9:df:7e:70:55:1a:37:f3:96:32:
03:dc:6d:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuNG88PahAqWF3idWNdqKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMjYzMWQ0YTM5NTM5Mjk0ZDFmOWU1NzZlNjk5NjIwYWQ5
OGEzOGQwHhcNMjUxMTExMDcwMjA5WhcNMjUxMTEyMDcwMjA5WjAzMTEwLwYDVQQD
Eyg5MGRlNDcwYzVlZjdhYTE3OGE0OGFkOTRmYTVmOWU1YmJjYTdjYzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3zsv1I07+IcgoL+BWwT+AORwnEt
RxvfkSdzy3xIV3wE5LG/a2Fdj6p8jm8amQqpE1qk567o/DxAfBTCJvYIsdFZZD7r
PiqYMdH6k+aOzHqjK12JjvoIvzNHEVHp10gn61kUXTZS+SD0Xi8eXNegpyc40Vjx
RPNKDji6YLk8BCd5xdqhmFPPHs956ZEGWDWDbq2ID9FLYRAB+oG1REyvqj398AtM
qC256eD11A5yrZKAMyZeCizUi5u+lpvFjOV5nPkNBH0mr/Aq0gEIhdc5ElXNv9n1
pei6+NdDM7mF3njW7siZbvnZoheCta6lJm/WFOxQlHXFH4bLWMZE/wSFOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDeRwxe96oXikitlPpfnlu8p8xgMB8GA1UdIwQY
MBaAFLwmMdSjlTkpTR+eV25pliCtmKONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYTRjNWMtZTRkNS00Yzc4LWE4NDAt
MmY2ZDQ2ZDcyOTk2LzEvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9jYTRjNWMtZTRkNS00Yzc4LWE4NDAtMmY2ZDQ2ZDcyOTk2
LzEvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm+7jXrOe
ksEr/uybUDkl6OwINhJAS0Daf4Km2wLaz+Zpko8S9EmHKxxPGFlLVI9aGBZyj6cO
xh43ue4XgmE/VVYf/XO9RiDlUpATGkU/Z3ByVWfPGTn7Dt87pbyQzAwgZ265O/SU
YPaqEgEccCHc49tAfH046OOaN2Zp//S9YxOcEgaLK3aac6pXHyU0eGko5ERkRfS9
azzVTiA6SPBkbNR0QJVGxU/hbOykN+1xMH2fksVMeG5zsJ380exSxg3kGdQfuLpE
kQZGvKl5oDLTagHw08owYRtq3cIRcOKYb9UflHxR0GLWyLNo9QOqBc1ZhN+5335w
VRo385YyA9xtLQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:43 2025 by rpki-client