Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
File: VChf_ulzEsUcOoBf-TQOvsM1JyA.mft (raw, json)
Hash identifier: aIBogp4Ty2tndXVjtLZ7NOuhI3L7iZZSWl/aSSEpVAI=
Subject key identifier: 2A:F0:62:47:8C:96:85:BC:E2:3F:B9:D7:63:2A:0A:E5:1E:DC:C5:8E
Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
Certificate issuer: /CN=54285ffee97312c51c3a805ff9340ebec3352720
Certificate serial: 019A2DB1AAF2FED395354EE6706DC6A975CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
Manifest number: 16FC
Signing time: Wed 29 Oct 2025 02:00:09 +0000
Manifest this update: Wed 29 Oct 2025 02:00:09 +0000
Manifest next update: Thu 30 Oct 2025 02:00:09 +0000
Files and hashes: 1: Ca-8iz_zQCrKysmx5A1KTglY5iE.roa (hash: QQcsgeeci4CpJE1THj53EE0/b4qFL4RDwyCbpu7M9gI=)
2: VChf_ulzEsUcOoBf-TQOvsM1JyA.crl (hash: 1z3UmJ4YGSqgTQYSr0U5mkE89CG8KtO260+kvti0Vvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:b1:aa:f2:fe:d3:95:35:4e:e6:70:6d:c6:a9:75:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720
Validity
Not Before: Oct 29 02:00:09 2025 GMT
Not After : Oct 30 02:00:09 2025 GMT
Subject: CN=2af062478c9685bce23fb9d7632a0ae51edcc58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:16:2c:29:a5:48:32:67:84:7c:7b:ca:55:bf:
46:da:15:86:01:e3:d5:1b:4f:c3:50:29:5f:2f:ea:
a4:85:83:0d:d4:8f:d5:6c:8f:e6:c3:18:bb:e6:81:
b0:16:d6:60:aa:12:49:e5:6b:e5:10:d6:8b:48:98:
1e:64:bb:3d:d7:4f:40:ff:c5:00:b3:90:a6:b8:74:
03:55:63:59:98:91:5c:45:09:b6:0b:5b:eb:65:1a:
bc:b2:61:f5:d9:cd:88:66:d1:4e:c0:04:12:9c:51:
13:0f:0d:00:f2:2b:39:37:45:ae:a5:91:eb:1a:ef:
ee:65:98:73:25:4f:d8:3f:50:79:f9:2d:cb:c7:26:
76:31:2a:0f:29:03:a8:2e:2c:3c:92:24:e3:52:32:
6a:ae:6f:48:12:45:41:86:6b:57:51:1c:b0:61:4b:
4a:d7:5e:a6:4d:c9:d7:54:63:9c:16:17:c9:73:5d:
98:a6:9b:02:e1:50:db:2b:cb:91:24:bb:23:e4:3a:
64:0c:a4:74:52:10:eb:ad:ea:8a:e0:a3:f3:59:a8:
5e:48:a1:60:43:1e:3f:12:6a:18:f6:02:a4:73:9a:
91:5b:06:23:0b:11:1f:c1:f4:b5:42:cc:9b:3a:3a:
d3:97:fe:31:cd:70:0c:8d:82:d0:48:8d:fd:64:32:
34:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F0:62:47:8C:96:85:BC:E2:3F:B9:D7:63:2A:0A:E5:1E:DC:C5:8E
X509v3 Authority Key Identifier:
keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:40:b6:cb:38:2b:5f:4c:ab:a3:ed:fa:d2:64:6d:6b:42:67:
a4:53:3e:86:3e:36:83:48:18:d1:cb:84:70:84:44:76:d3:eb:
e3:5b:7b:6f:16:d6:9f:c4:65:24:d3:be:2f:09:ba:3a:7e:7d:
37:6c:c3:36:87:5c:f1:b8:17:85:f8:ad:b1:98:16:32:c2:a8:
fe:55:33:e5:60:ce:c1:6d:9e:3a:8f:3a:fd:17:7d:a9:be:df:
38:c3:8c:b7:f0:58:34:88:6b:3e:96:3d:08:ba:f3:13:e6:81:
12:4c:97:65:a6:b1:a9:03:f6:94:2e:6f:9a:1f:e4:be:05:58:
76:d0:d0:2e:bd:05:33:f2:63:bf:e6:32:17:26:b9:2a:d4:0f:
53:76:dd:70:5f:9b:a3:c8:7d:90:27:8e:29:54:b5:07:a3:97:
78:cf:d4:1e:3e:0e:ce:cc:9a:ea:66:e5:7d:47:ce:f1:7c:7b:
50:b0:a2:97:68:e6:25:cd:c8:52:1d:63:61:89:88:43:4a:7e:
cb:d2:6e:2d:7d:c8:b8:12:79:c0:2c:ae:8c:87:56:b5:5a:20:
22:6c:9a:b4:7c:41:9a:99:49:6c:a5:ac:50:62:45:b6:01:d3:
6a:30:2d:2a:ef:c2:57:7a:4c:45:77:49:69:53:8e:47:5f:cf:
90:a7:cb:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZotsary/tOVNU7mcG3GqXXMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Mjg1ZmZlZTk3MzEyYzUxYzNhODA1ZmY5MzQwZWJlYzMz
NTI3MjAwHhcNMjUxMDI5MDIwMDA5WhcNMjUxMDMwMDIwMDA5WjAzMTEwLwYDVQQD
EygyYWYwNjI0NzhjOTY4NWJjZTIzZmI5ZDc2MzJhMGFlNTFlZGNjNThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRYsKaVIMmeEfHvKVb9G2hWGAePV
G0/DUClfL+qkhYMN1I/VbI/mwxi75oGwFtZgqhJJ5WvlENaLSJgeZLs9109A/8UA
s5CmuHQDVWNZmJFcRQm2C1vrZRq8smH12c2IZtFOwAQSnFETDw0A8is5N0WupZHr
Gu/uZZhzJU/YP1B5+S3LxyZ2MSoPKQOoLiw8kiTjUjJqrm9IEkVBhmtXURywYUtK
116mTcnXVGOcFhfJc12YppsC4VDbK8uRJLsj5DpkDKR0UhDrreqK4KPzWaheSKFg
Qx4/EmoY9gKkc5qRWwYjCxEfwfS1QsybOjrTl/4xzXAMjYLQSI39ZDI0OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrwYkeMloW84j+512MqCuUe3MWOMB8GA1UdIwQY
MBaAFFQoX/7pcxLFHDqAX/k0Dr7DNScgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkNoZl91bHpFc1VjT29CZi1UUU92c00xSnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zMWJjYmQtZWU2NS00Zjk3LTlhMjIt
OGE3ZTYzZThjZDc1LzEvVkNoZl91bHpFc1VjT29CZi1UUU92c00xSnlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zMWJjYmQtZWU2NS00Zjk3LTlhMjItOGE3ZTYzZThjZDc1
LzEvVkNoZl91bHpFc1VjT29CZi1UUU92c00xSnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0C2yzgr
X0yro+360mRta0JnpFM+hj42g0gY0cuEcIREdtPr41t7bxbWn8RlJNO+Lwm6On59
N2zDNodc8bgXhfitsZgWMsKo/lUz5WDOwW2eOo86/Rd9qb7fOMOMt/BYNIhrPpY9
CLrzE+aBEkyXZaaxqQP2lC5vmh/kvgVYdtDQLr0FM/Jjv+YyFya5KtQPU3bdcF+b
o8h9kCeOKVS1B6OXeM/UHj4Ozsya6mblfUfO8Xx7ULCil2jmJc3IUh1jYYmIQ0p+
y9JuLX3IuBJ5wCyujIdWtVogImyatHxBmplJbKWsUGJFtgHTajAtKu/CV3pMRXdJ
aVOOR1/PkKfLoA==
-----END CERTIFICATE-----
Generated at Wed Oct 29 05:01:49 2025 by rpki-client