Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
File: vpxSiWGxCzIPR-i3BlTurtLyRNM.mft (raw, json)
Hash identifier: 3Zm/p+TDukcEU5OL6y3bH5sQ1FkE0PTGN4mE18BbWKI=
Subject key identifier: E3:93:60:97:EB:3B:51:24:E7:80:5D:2D:3E:D1:EA:1D:63:9E:C5:8D
Authority key identifier: BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
Certificate issuer: /CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Certificate serial: 019A725C7E52D98181D453A3F528918FED0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
Manifest number: 0D10
Signing time: Tue 11 Nov 2025 10:00:55 +0000
Manifest this update: Tue 11 Nov 2025 10:00:55 +0000
Manifest next update: Wed 12 Nov 2025 10:00:55 +0000
Files and hashes: 1: vpxSiWGxCzIPR-i3BlTurtLyRNM.crl (hash: imj00fdWXU8i3TuSyJ37QG9vS7UMVv38QD6PsOU47Do=)
2: wtrOxy-Cqrf4yPJ92NbD-E33BP8.roa (hash: HZVqoFJ1fSxzdnoOFKLqW1LRpp7/mkZ4xgc+aQGadyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:7e:52:d9:81:81:d4:53:a3:f5:28:91:8f:ed:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Validity
Not Before: Nov 11 10:00:55 2025 GMT
Not After : Nov 12 10:00:55 2025 GMT
Subject: CN=e3936097eb3b5124e7805d2d3ed1ea1d639ec58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:07:a1:e4:ff:7e:69:c6:56:36:5a:5f:6a:
fc:11:bc:6e:99:13:99:05:04:f9:44:3d:ca:03:e5:
d3:6c:8a:1e:a4:75:f3:f5:0a:6b:5f:e7:11:7b:0f:
0d:e8:a9:1a:30:dd:7d:f7:dc:cb:95:33:db:8c:0c:
00:8e:9d:f1:0e:45:db:98:4b:f7:b8:76:be:03:a6:
dd:c5:a5:6b:dd:94:62:2e:43:bd:4e:38:2c:51:03:
9f:15:32:1d:19:fe:cf:f2:f9:2a:dd:12:63:27:23:
c4:9a:e5:ab:d0:0b:96:75:87:c7:60:df:9c:ca:ea:
0f:f1:a3:0f:e7:fe:4f:37:46:5d:e5:57:76:7a:15:
29:9c:04:55:03:e4:7c:f1:9d:d0:94:3c:4b:7f:98:
68:14:3c:5e:2d:c5:b9:df:42:fb:ff:9c:bd:5f:4a:
c3:19:7e:73:75:5f:c0:8a:f9:e7:33:05:31:68:b6:
86:9a:c1:d9:6a:00:6a:75:8c:69:cc:82:5a:62:cb:
42:2f:86:4d:08:16:15:f5:16:9c:93:09:dc:3a:c1:
ba:a8:0b:6d:36:f3:c9:c4:8f:e6:5e:2c:c4:41:49:
17:db:ac:d1:97:1d:73:e2:39:94:a1:36:de:7f:9d:
97:da:03:8a:36:36:50:b3:0f:9b:b8:17:10:a5:62:
7c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:93:60:97:EB:3B:51:24:E7:80:5D:2D:3E:D1:EA:1D:63:9E:C5:8D
X509v3 Authority Key Identifier:
keyid:BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:b9:0f:ab:e6:ca:c5:eb:12:94:ec:0f:e1:e1:10:8a:5e:19:
12:17:e2:68:00:71:f5:1a:83:44:47:6f:5c:ac:b8:47:53:73:
39:ba:d2:60:ad:24:b8:39:bc:53:d7:3c:06:17:04:33:38:72:
09:c5:fb:68:ba:93:2e:b0:f0:df:16:1d:a6:4f:8f:ed:c8:a6:
e8:57:39:0e:52:f6:bc:21:6b:27:6e:17:df:ca:fd:58:cd:f1:
29:4b:be:eb:c1:50:98:0e:7f:dc:33:15:75:2c:26:b1:c3:e1:
34:7c:b3:b2:ee:2b:5d:b3:f8:7a:22:73:e9:00:d6:17:10:50:
e8:e0:06:94:cf:04:63:9e:91:6f:b2:24:06:50:a5:77:30:52:
70:83:4e:e9:92:74:d3:21:64:1a:e2:4e:89:57:c4:84:3a:22:
dc:40:7f:99:ed:42:38:1f:2b:de:7a:bc:7e:e5:d4:f4:76:5a:
c8:30:4c:a1:51:71:57:f8:dd:a9:26:42:9e:0d:45:9f:a4:60:
f8:f4:12:4e:2a:24:b4:06:5e:cf:dc:8b:93:3f:a6:26:28:82:
89:9d:20:00:9e:f5:9b:2e:3e:e1:fb:2c:73:43:c9:62:32:da:
5c:16:22:2e:1d:b1:36:0c:33:bb:db:ba:11:5b:e1:21:e9:8b:
6d:9f:37:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXH5S2YGB1FOj9SiRj+0KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlOWM1Mjg5NjFiMTBiMzIwZjQ3ZThiNzA2NTRlZWFlZDJm
MjQ0ZDMwHhcNMjUxMTExMTAwMDU1WhcNMjUxMTEyMTAwMDU1WjAzMTEwLwYDVQQD
EyhlMzkzNjA5N2ViM2I1MTI0ZTc4MDVkMmQzZWQxZWExZDYzOWVjNThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq98HoeT/fmnGVjZaX2r8EbxumROZ
BQT5RD3KA+XTbIoepHXz9QprX+cRew8N6KkaMN1999zLlTPbjAwAjp3xDkXbmEv3
uHa+A6bdxaVr3ZRiLkO9TjgsUQOfFTIdGf7P8vkq3RJjJyPEmuWr0AuWdYfHYN+c
yuoP8aMP5/5PN0Zd5Vd2ehUpnARVA+R88Z3QlDxLf5hoFDxeLcW530L7/5y9X0rD
GX5zdV/AivnnMwUxaLaGmsHZagBqdYxpzIJaYstCL4ZNCBYV9RackwncOsG6qAtt
NvPJxI/mXizEQUkX26zRlx1z4jmUoTbef52X2gOKNjZQsw+buBcQpWJ85QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOTYJfrO1Ek54BdLT7R6h1jnsWNMB8GA1UdIwQY
MBaAFL6cUolhsQsyD0fotwZU7q7S8kTTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnB4U2lXR3hDeklQUi1pM0JsVHVydEx5Uk5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS85ODU3MWQtMzk4Zi00MWRiLTg1YjAt
OGMzYjNmMzBkMjE1LzEvdnB4U2lXR3hDeklQUi1pM0JsVHVydEx5Uk5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS85ODU3MWQtMzk4Zi00MWRiLTg1YjAtOGMzYjNmMzBkMjE1
LzEvdnB4U2lXR3hDeklQUi1pM0JsVHVydEx5Uk5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtrkPq+bK
xesSlOwP4eEQil4ZEhfiaABx9RqDREdvXKy4R1NzObrSYK0kuDm8U9c8BhcEMzhy
CcX7aLqTLrDw3xYdpk+P7cim6Fc5DlL2vCFrJ24X38r9WM3xKUu+68FQmA5/3DMV
dSwmscPhNHyzsu4rXbP4eiJz6QDWFxBQ6OAGlM8EY56Rb7IkBlCldzBScINO6ZJ0
0yFkGuJOiVfEhDoi3EB/me1COB8r3nq8fuXU9HZayDBMoVFxV/jdqSZCng1Fn6Rg
+PQSTioktAZez9yLkz+mJiiCiZ0gAJ71my4+4fssc0PJYjLaXBYiLh2xNgwzu9u6
EVvhIemLbZ83RA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:49 2025 by rpki-client