Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
File: VTynsubB4X9fPtvjdeGezjlTORA.mft (raw, json)
Hash identifier: p10+ePq1apxxNdYgnKhngxWjXU/WIFzXUsYUHhQTOB0=
Subject key identifier: DA:FD:91:B0:74:46:91:24:36:BD:71:B5:3A:4C:9C:F6:1E:67:55:78
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial: 019A71B91510D7CF100EC988C6F745619B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
Manifest number: 11F2
Signing time: Tue 11 Nov 2025 07:02:26 +0000
Manifest this update: Tue 11 Nov 2025 07:02:26 +0000
Manifest next update: Wed 12 Nov 2025 07:02:26 +0000
Files and hashes: 1: 6k2hBM4XUhd6DA-vs8SUHNOo6k4.roa (hash: j24u1fw+wKi+GN73WExbNJpjYxAE0mjUB2p9siHDzsY=)
2: VTynsubB4X9fPtvjdeGezjlTORA.crl (hash: fzb4ZrXfCdA1iWnL56XyNUZatCx+jt0VEsqNQevhKsg=)
3: sxJKQqy--ePZJKy-z6ZXKspnoCU.roa (hash: viGZT8F9x3/CHDhQJKfJwFzfO7LR9KesSjHrb2YKNNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:15:10:d7:cf:10:0e:c9:88:c6:f7:45:61:9b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Validity
Not Before: Nov 11 07:02:26 2025 GMT
Not After : Nov 12 07:02:26 2025 GMT
Subject: CN=dafd91b07446912436bd71b53a4c9cf61e675578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ce:01:fa:8d:89:b4:9f:19:fc:a5:00:f6:04:
9e:78:0a:52:c5:6b:66:1c:e7:84:98:bb:df:b3:2c:
38:28:40:c4:62:74:79:d1:75:da:72:59:52:03:e1:
c4:6c:81:33:e8:8d:2e:4a:c2:f2:0a:5c:b1:e0:ad:
a6:5f:8c:3e:da:f2:45:03:b1:b0:0f:8f:3d:7f:10:
58:91:23:12:5e:96:4b:f9:8c:c5:7d:ff:86:e3:13:
e7:60:bc:64:f7:3e:3a:f0:7a:5d:6b:85:cb:9d:61:
e4:f2:08:ad:ae:fd:70:20:93:79:72:7f:d5:db:13:
43:0f:b9:f7:de:73:db:08:b7:54:d4:aa:e6:51:b7:
a0:30:a0:02:8c:7c:34:1e:fa:7e:73:41:ba:06:2c:
ef:ef:eb:65:9a:24:90:36:5b:1a:c7:18:de:a8:53:
f3:c6:88:28:44:6b:0e:b2:c1:7d:de:9f:b7:a5:30:
84:31:83:8d:4e:f5:ae:66:0b:aa:98:fb:88:5f:7d:
77:dd:22:67:12:3e:4f:5e:22:53:da:79:3a:2c:3f:
e2:65:41:0a:bc:3a:b2:9d:09:ce:ba:bc:0b:ac:e5:
a3:c7:9e:47:0d:ff:1a:00:8b:c1:0f:2f:e8:f9:f4:
c4:a7:96:73:5f:4d:6f:96:73:93:e6:87:83:93:14:
fb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FD:91:B0:74:46:91:24:36:BD:71:B5:3A:4C:9C:F6:1E:67:55:78
X509v3 Authority Key Identifier:
keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:30:7f:f2:34:fc:06:70:89:64:7b:02:c5:8b:98:40:c8:cb:
14:5b:83:52:de:9c:c0:40:1a:42:b9:32:d9:91:01:7a:ba:64:
ec:03:cb:b5:21:60:e4:cf:15:fe:80:b3:67:5f:66:79:07:95:
09:af:74:b6:93:46:dc:13:59:1d:e5:f5:31:30:d5:b9:9f:e5:
35:44:ae:14:6d:33:76:5b:45:84:23:36:ff:3d:6f:7c:75:0a:
6d:38:ff:43:69:ef:d5:ba:4f:50:30:86:e8:0b:2b:cf:46:50:
c0:d0:de:12:7c:03:b7:7e:a3:2c:e5:5c:67:f0:1d:54:e5:a6:
5d:f6:31:cc:7d:c8:32:ca:b3:15:a5:6a:78:33:90:ff:d3:3b:
94:fb:06:a6:f6:9a:b4:11:f1:3b:03:9d:1e:58:01:58:f6:f3:
0d:fc:e6:fb:7f:78:af:04:e6:db:31:88:06:5d:6c:7c:f1:b4:
fc:aa:04:40:ef:46:c3:4f:35:1c:01:6d:98:b6:6d:e0:a0:3b:
3d:cf:da:e2:c8:c1:a9:24:15:72:bb:c7:bf:d3:00:7f:92:dd:
df:f0:61:b7:d1:2f:32:c6:57:4a:19:b3:56:c7:8a:e2:7e:a7:
3a:7a:09:98:6f:d0:96:de:96:3e:f5:fb:76:83:a0:00:f0:07:
38:25:b9:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuRUQ188QDsmIxvdFYZt+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1M2NhN2IyZTZjMWUxN2Y1ZjNlZGJlMzc1ZTE5ZWNlMzk1
MzM5MTAwHhcNMjUxMTExMDcwMjI2WhcNMjUxMTEyMDcwMjI2WjAzMTEwLwYDVQQD
EyhkYWZkOTFiMDc0NDY5MTI0MzZiZDcxYjUzYTRjOWNmNjFlNjc1NTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz84B+o2JtJ8Z/KUA9gSeeApSxWtm
HOeEmLvfsyw4KEDEYnR50XXacllSA+HEbIEz6I0uSsLyClyx4K2mX4w+2vJFA7Gw
D489fxBYkSMSXpZL+YzFff+G4xPnYLxk9z468Hpda4XLnWHk8gitrv1wIJN5cn/V
2xNDD7n33nPbCLdU1KrmUbegMKACjHw0Hvp+c0G6Bizv7+tlmiSQNlsaxxjeqFPz
xogoRGsOssF93p+3pTCEMYONTvWuZguqmPuIX3133SJnEj5PXiJT2nk6LD/iZUEK
vDqynQnOurwLrOWjx55HDf8aAIvBDy/o+fTEp5ZzX01vlnOT5oeDkxT77QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr9kbB0RpEkNr1xtTpMnPYeZ1V4MB8GA1UdIwQY
MBaAFFU8p7LmweF/Xz7b43Xhns45UzkQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlR5bnN1YkI0WDlmUHR2amRlR2V6amxUT1JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kNTcyYzMtMzUwZi00NzliLWE3YjMt
MTUzZTkxODJhZjQxLzEvVlR5bnN1YkI0WDlmUHR2amRlR2V6amxUT1JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kNTcyYzMtMzUwZi00NzliLWE3YjMtMTUzZTkxODJhZjQx
LzEvVlR5bnN1YkI0WDlmUHR2amRlR2V6amxUT1JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjB/8jT8
BnCJZHsCxYuYQMjLFFuDUt6cwEAaQrky2ZEBerpk7APLtSFg5M8V/oCzZ19meQeV
Ca90tpNG3BNZHeX1MTDVuZ/lNUSuFG0zdltFhCM2/z1vfHUKbTj/Q2nv1bpPUDCG
6Asrz0ZQwNDeEnwDt36jLOVcZ/AdVOWmXfYxzH3IMsqzFaVqeDOQ/9M7lPsGpvaa
tBHxOwOdHlgBWPbzDfzm+394rwTm2zGIBl1sfPG0/KoEQO9Gw081HAFtmLZt4KA7
Pc/a4sjBqSQVcrvHv9MAf5Ld3/Bht9EvMsZXShmzVseK4n6nOnoJmG/Qlt6WPvX7
doOgAPAHOCW5mw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:58 2025 by rpki-client