Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
File: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft (raw, json)
Hash identifier: WQLEjXnEnWgnR5BLtgehieQRHVe1bsaYDRVgSZ/4F3U=
Subject key identifier: 2B:0F:C9:FD:9B:5F:FF:C1:10:EF:56:E3:34:84:01:D7:30:8B:D2:03
Authority key identifier: BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
Certificate issuer: /CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Certificate serial: 019A7225CE74E5A1386CF3DBBDC6659FE26A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
Manifest number: 0E04
Signing time: Tue 11 Nov 2025 09:01:11 +0000
Manifest this update: Tue 11 Nov 2025 09:01:11 +0000
Manifest next update: Wed 12 Nov 2025 09:01:11 +0000
Files and hashes: 1: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl (hash: 8xHiK7aW05Hj/IsKsdsTI1YHQRYqoXJYSgfYQmIjtI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ce:74:e5:a1:38:6c:f3:db:bd:c6:65:9f:e2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Validity
Not Before: Nov 11 09:01:11 2025 GMT
Not After : Nov 12 09:01:11 2025 GMT
Subject: CN=2b0fc9fd9b5fffc110ef56e3348401d7308bd203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:d3:2d:ae:81:b3:2e:97:eb:2d:5e:06:9c:
c3:bf:67:8a:d3:19:07:de:35:2c:81:da:0b:d9:5a:
90:2d:75:88:ea:f1:7f:0c:37:15:b5:81:ee:12:73:
42:50:4b:84:a1:df:9b:f2:52:ad:5f:9c:87:35:e5:
14:a2:4d:e8:f0:91:31:41:87:e1:75:62:a8:99:13:
e7:f3:64:bf:5a:b8:73:eb:39:d3:c5:46:86:0c:46:
75:f3:b1:2e:ec:68:48:e0:43:80:05:ba:b1:5f:7a:
c3:1f:49:db:6e:a0:43:d8:06:7f:b9:bc:bf:02:df:
ca:26:54:33:7f:cd:72:10:60:72:a9:8e:65:71:b7:
00:6d:81:0c:6f:51:be:2b:94:f1:dc:9d:21:0b:23:
5a:7f:21:38:ce:0f:e3:d2:87:bd:07:fa:49:47:58:
de:26:63:15:87:b5:99:01:08:0e:27:d4:ed:18:d7:
d3:21:f4:b5:15:3a:af:5c:1a:68:10:1e:f8:4c:c7:
c3:bd:03:d3:da:ab:d2:b1:27:86:b9:1d:49:b9:83:
88:9e:93:9b:e5:87:db:54:2a:50:17:d0:af:e7:57:
81:21:9b:0e:8f:ef:68:96:c7:fd:bb:b1:70:74:c8:
0f:32:9a:71:39:65:0c:8b:86:4e:62:3a:fc:24:1f:
d5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0F:C9:FD:9B:5F:FF:C1:10:EF:56:E3:34:84:01:D7:30:8B:D2:03
X509v3 Authority Key Identifier:
keyid:BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1e:d2:1f:b3:83:ca:54:be:4c:a4:b9:e9:e5:16:b5:1f:1b:
bf:07:74:56:53:00:99:51:d7:64:0c:c3:78:51:a9:07:96:7e:
47:e9:b9:93:0e:fa:97:1c:4a:65:a7:25:92:c6:6b:16:43:12:
5b:6a:4b:90:08:d3:d5:63:27:02:24:40:ad:23:f8:15:75:be:
d8:64:13:27:fd:51:ef:8c:39:dc:e8:bb:90:7a:26:c1:e1:24:
49:2f:72:0c:4b:0f:3c:69:7e:08:c7:92:60:6b:8a:c2:59:35:
6c:21:c8:7b:3c:84:83:fe:44:1d:2d:50:7e:a9:8c:2d:75:c6:
7e:ad:8d:dd:b0:80:62:39:40:7d:7a:ab:fd:33:eb:0c:62:f0:
6b:cb:3f:83:66:30:1c:ce:d2:fb:14:f3:18:84:1b:92:91:be:
8a:77:a4:5b:a2:cc:e5:49:69:dc:32:9b:4b:e1:2a:0a:5c:0f:
4a:3d:1e:34:81:82:fd:ec:af:a2:15:72:c1:c3:67:68:01:a4:
38:f4:88:50:fb:1f:9d:65:b4:eb:c1:a0:92:ce:ce:22:b8:62:
95:f7:1f:50:e3:d0:b7:e1:47:40:1e:49:9a:9f:f4:0e:0e:b3:
22:34:52:08:95:1e:84:5b:95:8b:a2:fb:81:d5:d5:d7:ca:84:
36:00:23:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJc505aE4bPPbvcZln+JqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZDg4NGUxNTRjMjFjOWY0NTlmNDJhODM2YWJjYmM4YWMw
ZjQxNWEwHhcNMjUxMTExMDkwMTExWhcNMjUxMTEyMDkwMTExWjAzMTEwLwYDVQQD
EygyYjBmYzlmZDliNWZmZmMxMTBlZjU2ZTMzNDg0MDFkNzMwOGJkMjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNjTLa6Bsy6X6y1eBpzDv2eK0xkH
3jUsgdoL2VqQLXWI6vF/DDcVtYHuEnNCUEuEod+b8lKtX5yHNeUUok3o8JExQYfh
dWKomRPn82S/Wrhz6znTxUaGDEZ187Eu7GhI4EOABbqxX3rDH0nbbqBD2AZ/uby/
At/KJlQzf81yEGByqY5lcbcAbYEMb1G+K5Tx3J0hCyNafyE4zg/j0oe9B/pJR1je
JmMVh7WZAQgOJ9TtGNfTIfS1FTqvXBpoEB74TMfDvQPT2qvSsSeGuR1JuYOInpOb
5YfbVCpQF9Cv51eBIZsOj+9olsf9u7FwdMgPMppxOWUMi4ZOYjr8JB/VRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsPyf2bX//BEO9W4zSEAdcwi9IDMB8GA1UdIwQY
MBaAFLzYhOFUwhyfRZ9CqDary8isD0FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk5pRTRWVENISjlGbjBLb05xdkx5S3dQUVZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YzI3NWUtOTBjNy00Yzk3LWE0OTIt
NWQzMThhMjJjYTk2LzEvdk5pRTRWVENISjlGbjBLb05xdkx5S3dQUVZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS84YzI3NWUtOTBjNy00Yzk3LWE0OTItNWQzMThhMjJjYTk2
LzEvdk5pRTRWVENISjlGbjBLb05xdkx5S3dQUVZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYB7SH7OD
ylS+TKS56eUWtR8bvwd0VlMAmVHXZAzDeFGpB5Z+R+m5kw76lxxKZaclksZrFkMS
W2pLkAjT1WMnAiRArSP4FXW+2GQTJ/1R74w53Oi7kHomweEkSS9yDEsPPGl+CMeS
YGuKwlk1bCHIezyEg/5EHS1QfqmMLXXGfq2N3bCAYjlAfXqr/TPrDGLwa8s/g2Yw
HM7S+xTzGIQbkpG+inekW6LM5Ulp3DKbS+EqClwPSj0eNIGC/eyvohVywcNnaAGk
OPSIUPsfnWW068Ggks7OIrhilfcfUOPQt+FHQB5Jmp/0Dg6zIjRSCJUehFuVi6L7
gdXV18qENgAjuw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:00:52 2025 by rpki-client