Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
File: vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft (raw, json)
Hash identifier: Zq5zfYT91IPyjKh0KFAjHENdOOOaskL6JLB80yX1l2o=
Subject key identifier: 8F:2E:60:77:FF:BC:53:26:64:A9:1E:74:B6:57:45:D0:92:CC:11:B2
Authority key identifier: BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
Certificate issuer: /CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Certificate serial: 019A2D43DAF6D2B94E44FD37FEDE494A895A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
Manifest number: 16FD
Signing time: Wed 29 Oct 2025 00:00:12 +0000
Manifest this update: Wed 29 Oct 2025 00:00:12 +0000
Manifest next update: Thu 30 Oct 2025 00:00:12 +0000
Files and hashes: 1: SReOpAhCLmuOcAyk55_tk_b6gzU.roa (hash: HeVQ3nZoCRM6Iyc21jnOVqYiR72eDfZp5jwY3EJ/nAk=)
2: vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl (hash: 7LMyu2LP8SLD1K7d1Q5hrrYqxyutau8rNXXs9RIpToA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:43:da:f6:d2:b9:4e:44:fd:37:fe:de:49:4a:89:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Validity
Not Before: Oct 29 00:00:12 2025 GMT
Not After : Oct 30 00:00:12 2025 GMT
Subject: CN=8f2e6077ffbc532664a91e74b65745d092cc11b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dc:83:c8:7e:e6:60:56:5e:31:92:b9:c4:39:
db:27:d5:33:f4:d6:c1:8d:c9:cb:23:6f:3c:34:58:
3a:ab:32:37:75:b2:1e:e8:45:19:eb:84:a6:0a:b4:
c1:38:90:b6:fb:7e:2b:c8:24:50:32:4f:54:85:48:
90:1b:13:f0:56:d4:11:22:8a:84:f3:98:5c:48:7a:
c6:01:b9:81:25:e3:ed:a4:7a:dd:b3:53:86:8f:55:
15:39:67:c9:ce:c9:4a:95:da:c7:04:6b:a4:57:0a:
8b:08:b4:c9:07:57:ef:ef:c4:9d:36:ab:b3:a7:9a:
c6:44:4f:61:b6:47:99:28:e8:27:2f:bd:45:91:f1:
38:01:ab:b9:e2:cc:23:ba:2f:a9:b0:41:1a:dc:b4:
69:c6:00:3a:b7:d4:f5:d9:74:9d:bd:b6:0e:e4:91:
29:ad:06:e8:34:bf:4d:5a:be:c7:04:97:52:08:26:
6c:a3:c9:1f:36:e3:7d:11:23:57:80:40:0c:4c:e9:
0d:fd:26:24:a8:b6:0c:ce:53:c0:7d:53:57:a6:e0:
59:94:41:4d:c9:f6:d9:23:e8:5e:54:7f:5c:5e:27:
4d:3e:1b:91:25:89:11:7e:0a:c7:37:0a:71:24:d4:
b0:8c:b5:59:c3:31:f5:a2:22:89:fc:24:a4:55:f0:
b9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2E:60:77:FF:BC:53:26:64:A9:1E:74:B6:57:45:D0:92:CC:11:B2
X509v3 Authority Key Identifier:
keyid:BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1d:f3:3d:05:91:ae:3c:20:84:4e:b1:e2:ef:75:74:22:64:
f9:9d:35:3c:42:35:49:68:59:2b:aa:db:a6:1e:12:26:b4:25:
8d:ef:bb:f7:da:23:b7:2d:81:ca:13:e2:f4:d4:e4:f8:41:2f:
75:e3:40:ef:61:3f:12:2d:ba:f7:1e:43:4a:70:2f:51:ec:b7:
14:0c:00:ff:f2:d3:23:d0:45:fb:27:c8:f5:00:5d:1d:98:88:
34:74:cc:81:f5:59:8f:df:fb:b8:f9:27:81:d2:d8:6f:a4:59:
64:e4:30:46:e4:f8:84:e9:a4:10:83:f6:67:59:b7:fd:6f:47:
ba:e7:d8:d5:45:89:9c:e5:e8:f6:ae:94:63:ce:a6:66:86:a4:
8e:a0:ca:62:1d:e1:73:99:f9:a5:25:33:ad:95:11:3c:2c:fd:
69:6f:e7:72:49:b6:72:8a:5f:c7:b9:03:44:f1:69:bc:35:17:
da:e0:07:a8:ba:2a:a4:f9:2e:63:f6:f9:79:26:7f:86:82:27:
68:ff:1e:26:23:02:84:dc:e2:59:16:68:02:e1:e5:28:cf:6c:
27:cd:e2:61:25:21:8c:1c:e2:92:45:ff:bf:90:da:e1:e6:9c:
aa:4e:a7:68:d5:ab:e3:0e:ef:73:56:5b:98:71:58:09:49:ad:
fc:e8:06:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZotQ9r20rlORP03/t5JSolaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlOTY2ZGJlYjY0MTM4MmExNWY0NjdmNWEwM2U5YTk2ZmEx
ZGMxOTQwHhcNMjUxMDI5MDAwMDEyWhcNMjUxMDMwMDAwMDEyWjAzMTEwLwYDVQQD
Eyg4ZjJlNjA3N2ZmYmM1MzI2NjRhOTFlNzRiNjU3NDVkMDkyY2MxMWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtyDyH7mYFZeMZK5xDnbJ9Uz9NbB
jcnLI288NFg6qzI3dbIe6EUZ64SmCrTBOJC2+34ryCRQMk9UhUiQGxPwVtQRIoqE
85hcSHrGAbmBJePtpHrds1OGj1UVOWfJzslKldrHBGukVwqLCLTJB1fv78SdNquz
p5rGRE9htkeZKOgnL71FkfE4Aau54swjui+psEEa3LRpxgA6t9T12XSdvbYO5JEp
rQboNL9NWr7HBJdSCCZso8kfNuN9ESNXgEAMTOkN/SYkqLYMzlPAfVNXpuBZlEFN
yfbZI+heVH9cXidNPhuRJYkRfgrHNwpxJNSwjLVZwzH1oiKJ/CSkVfC5DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8uYHf/vFMmZKkedLZXRdCSzBGyMB8GA1UdIwQY
MBaAFL6Wbb62QTgqFfRn9aA+mpb6HcGUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnBadHZyWkJPQ29WOUdmMW9ENmFsdm9kd1pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lMjEyZDItZmI3Mi00OGNmLTg4MDYt
MTRiOGQzMGYxMzk3LzEvdnBadHZyWkJPQ29WOUdmMW9ENmFsdm9kd1pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9lMjEyZDItZmI3Mi00OGNmLTg4MDYtMTRiOGQzMGYxMzk3
LzEvdnBadHZyWkJPQ29WOUdmMW9ENmFsdm9kd1pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhR3zPQWR
rjwghE6x4u91dCJk+Z01PEI1SWhZK6rbph4SJrQlje+799ojty2ByhPi9NTk+EEv
deNA72E/Ei269x5DSnAvUey3FAwA//LTI9BF+yfI9QBdHZiINHTMgfVZj9/7uPkn
gdLYb6RZZOQwRuT4hOmkEIP2Z1m3/W9HuufY1UWJnOXo9q6UY86mZoakjqDKYh3h
c5n5pSUzrZURPCz9aW/nckm2copfx7kDRPFpvDUX2uAHqLoqpPkuY/b5eSZ/hoIn
aP8eJiMChNziWRZoAuHlKM9sJ83iYSUhjBzikkX/v5Da4eacqk6naNWr4w7vc1Zb
mHFYCUmt/OgGEQ==
-----END CERTIFICATE-----
Generated at Wed Oct 29 09:19:03 2025 by rpki-client