Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
File: VRIeW5L95kiJ9qqyzFzob8DloH4.mft (raw, json)
Hash identifier: 1lffJ/zpKn3J9ZZ7vbp6TH4jGyZltRaUg6aF9TKWB9U=
Subject key identifier: 27:D0:2E:ED:7C:11:D1:86:A7:D5:65:3B:47:86:DB:0E:9C:AC:D6:2D
Authority key identifier: 55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E
Certificate issuer: /CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
Certificate serial: 019A4B181591277C62F292BB5B0D409F8986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
Manifest number: 054C
Signing time: Mon 03 Nov 2025 19:01:00 +0000
Manifest this update: Mon 03 Nov 2025 19:01:00 +0000
Manifest next update: Tue 04 Nov 2025 19:01:00 +0000
Files and hashes: 1: 3kr8jiGy7HT0Z986eqHHTqrUADA.roa (hash: MLirpl2z9NyzltBKgB+dkcH7YYTRCJswwoZsSxn21Jw=)
2: VRIeW5L95kiJ9qqyzFzob8DloH4.crl (hash: y4GQ+q/FXH6Yn+KZS0AgSj66rNNkKRJ2ehyED/gQwkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:18:15:91:27:7c:62:f2:92:bb:5b:0d:40:9f:89:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
Validity
Not Before: Nov 3 19:01:00 2025 GMT
Not After : Nov 4 19:01:00 2025 GMT
Subject: CN=27d02eed7c11d186a7d5653b4786db0e9cacd62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c0:74:55:8d:b4:68:86:79:d8:0c:5d:d7:60:
52:a9:13:53:2f:af:5b:bc:e3:92:18:74:18:06:56:
43:f9:09:62:67:61:67:70:f8:e2:a8:42:0b:6b:84:
5f:0b:e4:9c:58:1b:50:b5:95:a0:57:a2:36:c2:76:
9f:21:f0:3a:73:be:a0:b6:76:1e:6d:79:d7:4a:30:
25:d4:42:21:84:49:5b:30:93:45:fa:ae:d1:85:04:
8a:d7:d5:3d:13:04:90:ba:f0:8e:7a:10:f0:18:67:
60:49:2c:12:b2:7a:50:9b:f5:c7:f3:ca:01:97:92:
76:ac:31:ed:29:79:d8:12:32:5d:a6:e3:f6:d7:4b:
71:7f:49:be:7c:10:c3:9e:c6:30:e7:c9:c7:87:0e:
97:84:f9:84:d3:c1:3e:bb:0e:d2:07:8d:7d:fa:60:
cc:3d:5f:04:6c:26:56:20:98:9d:7f:48:a6:79:41:
74:50:63:f2:df:d4:00:c1:02:f9:7b:5d:e1:03:a4:
19:c4:59:c2:b3:11:49:15:3d:6b:3c:ec:80:82:9f:
5a:2d:8d:76:d9:5b:ee:8e:ef:43:22:98:24:a2:fe:
34:20:20:39:f8:d7:64:f7:e8:67:78:c7:ed:c4:c3:
66:78:5c:d3:0d:a9:dd:a8:47:c6:63:d3:1c:94:f8:
52:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D0:2E:ED:7C:11:D1:86:A7:D5:65:3B:47:86:DB:0E:9C:AC:D6:2D
X509v3 Authority Key Identifier:
keyid:55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:1a:90:88:25:d4:c5:f3:d8:c4:f8:34:bc:ca:c1:3b:8f:bb:
a5:d5:87:15:3e:fe:75:80:18:d4:8d:80:46:9d:6d:4a:63:f5:
33:e8:75:21:68:df:4b:8d:22:f9:d3:75:d1:c8:62:02:af:03:
9a:66:df:5c:1d:6e:ef:37:77:2d:e3:22:f8:58:57:b5:8f:4d:
71:fa:b2:53:89:33:d2:c0:fe:fb:3c:8e:ab:e4:71:46:9d:ee:
14:53:a6:0e:71:cb:14:ca:92:6a:4c:d5:27:36:e1:be:71:3b:
0c:3e:36:ce:a2:ef:b5:aa:81:2b:b5:75:48:09:02:54:94:93:
29:d5:59:52:af:95:62:71:3a:7d:c4:0d:48:82:f3:5f:5a:e7:
02:cf:12:58:d9:23:d0:9e:86:a6:11:10:1b:ce:85:23:57:93:
0c:9f:fa:9f:60:17:16:0c:2d:41:10:62:e2:82:6b:ad:95:d1:
90:73:1f:2c:7d:32:39:61:6f:0b:f4:50:bf:94:db:49:ab:13:
58:84:a8:20:cd:20:cb:b8:ec:a0:21:ad:4b:eb:f9:a7:a3:d3:
32:da:90:5d:70:54:7f:74:cd:5d:71:09:40:54:51:03:44:28:
65:cd:15:4c:ca:d0:9a:c8:15:6f:2b:05:bd:05:9d:80:7f:1a:
4e:e0:34:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpLGBWRJ3xi8pK7Ww1An4mGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MTIxZTViOTJmZGU2NDg4OWY2YWFiMmNjNWNlODZmYzBl
NWEwN2UwHhcNMjUxMTAzMTkwMTAwWhcNMjUxMTA0MTkwMTAwWjAzMTEwLwYDVQQD
EygyN2QwMmVlZDdjMTFkMTg2YTdkNTY1M2I0Nzg2ZGIwZTljYWNkNjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sB0VY20aIZ52Axd12BSqRNTL69b
vOOSGHQYBlZD+QliZ2FncPjiqEILa4RfC+ScWBtQtZWgV6I2wnafIfA6c76gtnYe
bXnXSjAl1EIhhElbMJNF+q7RhQSK19U9EwSQuvCOehDwGGdgSSwSsnpQm/XH88oB
l5J2rDHtKXnYEjJdpuP210txf0m+fBDDnsYw58nHhw6XhPmE08E+uw7SB419+mDM
PV8EbCZWIJidf0imeUF0UGPy39QAwQL5e13hA6QZxFnCsxFJFT1rPOyAgp9aLY12
2Vvuju9DIpgkov40ICA5+Ndk9+hneMftxMNmeFzTDandqEfGY9MclPhSywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfQLu18EdGGp9VlO0eG2w6crNYtMB8GA1UdIwQY
MBaAFFUSHluS/eZIifaqssxc6G/A5aB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlJJZVc1TDk1a2lKOXFxeXpGem9iOERsb0g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84NGRlOGEtN2UwNS00MDY5LWE1MjMt
YzNiNjM0NWEwZDA1LzEvVlJJZVc1TDk1a2lKOXFxeXpGem9iOERsb0g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84NGRlOGEtN2UwNS00MDY5LWE1MjMtYzNiNjM0NWEwZDA1
LzEvVlJJZVc1TDk1a2lKOXFxeXpGem9iOERsb0g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAshqQiCXU
xfPYxPg0vMrBO4+7pdWHFT7+dYAY1I2ARp1tSmP1M+h1IWjfS40i+dN10chiAq8D
mmbfXB1u7zd3LeMi+FhXtY9NcfqyU4kz0sD++zyOq+RxRp3uFFOmDnHLFMqSakzV
JzbhvnE7DD42zqLvtaqBK7V1SAkCVJSTKdVZUq+VYnE6fcQNSILzX1rnAs8SWNkj
0J6GphEQG86FI1eTDJ/6n2AXFgwtQRBi4oJrrZXRkHMfLH0yOWFvC/RQv5TbSasT
WISoIM0gy7jsoCGtS+v5p6PTMtqQXXBUf3TNXXEJQFRRA0QoZc0VTMrQmsgVbysF
vQWdgH8aTuA0pw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 04:01:57 2025 by rpki-client