Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
File: VRGWi3l6ylfWEYAak6hcuGTkPnI.mft (raw, json)
Hash identifier: fV0qJf0ptco0xlwI/MbZGqSsjHFQEo9MCPuGylCv3Yk=
Subject key identifier: 3C:C8:89:F5:53:94:7B:59:49:EC:CB:D5:CD:DB:70:14:D5:5F:81:51
Authority key identifier: 55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
Certificate issuer: /CN=5511968b797aca57d611801a93a85cb864e43e72
Certificate serial: 0199C6B3B8FE511B25A2DC83E9D897DD1E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
Manifest number: 0F9D
Signing time: Thu 09 Oct 2025 02:01:30 +0000
Manifest this update: Thu 09 Oct 2025 02:01:30 +0000
Manifest next update: Fri 10 Oct 2025 02:01:30 +0000
Files and hashes: 1: FkEK24gMOi9MxsRr642Srdl8lHQ.roa (hash: DtYbP2drcIzf0g2tEEsCLYpdXSaGIQ0MZgdI48xnP+Q=)
2: VRGWi3l6ylfWEYAak6hcuGTkPnI.crl (hash: vH1ox3Ik3clQyCsg60OP/zIcNqiDTr2Yy1caLLNRfvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 02:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c6:b3:b8:fe:51:1b:25:a2:dc:83:e9:d8:97:dd:1e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511968b797aca57d611801a93a85cb864e43e72
Validity
Not Before: Oct 9 02:01:30 2025 GMT
Not After : Oct 10 02:01:30 2025 GMT
Subject: CN=3cc889f553947b5949eccbd5cddb7014d55f8151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e5:5a:e8:cb:08:52:49:fe:c3:71:41:88:cf:
17:42:44:55:b8:60:35:60:14:bc:49:44:c8:63:11:
14:52:92:ef:c7:a0:6d:59:36:2d:63:f4:92:be:29:
01:a6:ca:dd:22:f8:94:94:32:6d:76:ee:3e:a2:ab:
84:51:da:da:a6:e3:08:99:e5:bb:da:e4:8b:51:ea:
26:88:68:de:03:54:00:9c:15:d3:01:bf:a5:bd:b6:
86:37:a9:eb:c2:52:b1:22:02:37:de:3c:60:77:be:
03:5a:96:90:46:fa:ac:33:60:03:86:ae:50:8b:77:
bc:10:b1:aa:31:e2:c8:25:2e:6f:a4:20:1a:12:96:
47:e4:c2:e3:b4:e0:29:38:bf:8c:5a:61:82:f0:21:
2a:de:4f:7d:77:a5:67:f1:5e:f5:e9:6f:67:b3:a4:
bb:98:72:2e:fd:9f:5e:29:f6:94:03:76:53:78:31:
55:65:3e:0e:02:2c:54:81:71:94:44:c9:80:cf:74:
91:7a:cb:48:44:2d:d2:2e:dc:86:3e:a6:55:1c:2d:
97:28:bb:d9:c2:1d:da:75:1e:b3:89:a4:82:f8:e9:
cb:d5:69:d7:f3:10:e5:47:0e:42:dc:71:9c:f0:a3:
6c:37:46:e0:01:6f:2b:33:81:ef:7d:c5:bd:54:33:
69:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C8:89:F5:53:94:7B:59:49:EC:CB:D5:CD:DB:70:14:D5:5F:81:51
X509v3 Authority Key Identifier:
keyid:55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2d:e7:d1:dc:ad:34:55:32:08:ad:bc:7e:26:4a:d7:7c:eb:
34:40:a0:1f:36:b9:c0:37:3d:e0:2c:89:ce:89:36:20:ac:a2:
8d:05:30:7d:5e:07:3a:c0:28:0b:a9:aa:df:e6:54:ab:d7:13:
26:49:1d:1e:b8:52:e5:3f:b2:d8:3b:27:23:06:75:1a:0e:29:
4a:6e:eb:d7:af:44:b1:f1:3a:5a:02:8e:c7:c5:83:bb:44:e4:
c0:86:26:4b:54:1e:04:20:69:f5:e0:4c:24:fe:ea:5f:8e:25:
65:19:87:03:23:8f:03:59:ec:f9:9d:c9:56:8b:6e:05:97:13:
74:db:dc:d4:96:07:18:b5:1f:2a:3c:db:c2:1a:5c:a5:8e:75:
c0:f3:0c:f1:e9:4d:d7:ce:2f:4d:7c:3a:bc:4a:57:f3:e2:93:
92:f5:79:b0:ed:9b:4a:6d:32:e0:56:05:1f:39:8b:1f:3c:61:
32:14:16:cb:2c:d8:ff:ab:bc:72:8a:bb:98:17:dc:e1:dd:cd:
45:ab:8c:2c:2e:13:44:3c:54:d3:dd:1b:cf:0f:be:ea:95:ef:
a5:c8:44:d3:c7:e9:dd:3c:38:4f:36:05:6a:95:88:a9:4a:ca:
f4:60:71:f2:33:79:6d:e4:ec:c1:8c:ea:40:cc:45:33:55:fd:
5d:8a:35:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnGs7j+URslotyD6diX3R4lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MTE5NjhiNzk3YWNhNTdkNjExODAxYTkzYTg1Y2I4NjRl
NDNlNzIwHhcNMjUxMDA5MDIwMTMwWhcNMjUxMDEwMDIwMTMwWjAzMTEwLwYDVQQD
EygzY2M4ODlmNTUzOTQ3YjU5NDllY2NiZDVjZGRiNzAxNGQ1NWY4MTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uVa6MsIUkn+w3FBiM8XQkRVuGA1
YBS8SUTIYxEUUpLvx6BtWTYtY/SSvikBpsrdIviUlDJtdu4+oquEUdrapuMImeW7
2uSLUeomiGjeA1QAnBXTAb+lvbaGN6nrwlKxIgI33jxgd74DWpaQRvqsM2ADhq5Q
i3e8ELGqMeLIJS5vpCAaEpZH5MLjtOApOL+MWmGC8CEq3k99d6Vn8V716W9ns6S7
mHIu/Z9eKfaUA3ZTeDFVZT4OAixUgXGURMmAz3SRestIRC3SLtyGPqZVHC2XKLvZ
wh3adR6ziaSC+OnL1WnX8xDlRw5C3HGc8KNsN0bgAW8rM4HvfcW9VDNpkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzIifVTlHtZSezL1c3bcBTVX4FRMB8GA1UdIwQY
MBaAFFURlot5espX1hGAGpOoXLhk5D5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlJHV2kzbDZ5bGZXRVlBYWs2aGN1R1RrUG5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8xMTkxMzAtZGJmZC00MDI3LWExNmUt
YzM1ZDVkNTQwMWRhLzEvVlJHV2kzbDZ5bGZXRVlBYWs2aGN1R1RrUG5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8xMTkxMzAtZGJmZC00MDI3LWExNmUtYzM1ZDVkNTQwMWRh
LzEvVlJHV2kzbDZ5bGZXRVlBYWs2aGN1R1RrUG5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHy3n0dyt
NFUyCK28fiZK13zrNECgHza5wDc94CyJzok2IKyijQUwfV4HOsAoC6mq3+ZUq9cT
JkkdHrhS5T+y2DsnIwZ1Gg4pSm7r169EsfE6WgKOx8WDu0TkwIYmS1QeBCBp9eBM
JP7qX44lZRmHAyOPA1ns+Z3JVotuBZcTdNvc1JYHGLUfKjzbwhpcpY51wPMM8elN
184vTXw6vEpX8+KTkvV5sO2bSm0y4FYFHzmLHzxhMhQWyyzY/6u8coq7mBfc4d3N
RauMLC4TRDxU090bzw++6pXvpchE08fp3Tw4TzYFapWIqUrK9GBx8jN5beTswYzq
QMxFM1X9XYo10g==
-----END CERTIFICATE-----
Generated at Thu Oct 9 11:07:20 2025 by rpki-client