Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
File: VmHZZN9KhtuP-5mqiVgtpoowkIw.mft (raw, json)
Hash identifier: mol+tOwKrDW3HPxPDM6BhaIvP0lgOjrmTL6LSpIbe0c=
Subject key identifier: ED:B6:E3:B7:69:BB:AB:29:10:D3:06:04:51:0E:D8:14:8B:35:41:38
Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
Certificate issuer: /CN=5661d964df4a86db8ffb99aa89582da68a30908c
Certificate serial: 019A21ADEF408D3F0AF100D685F6575A54FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
Manifest number: 028B
Signing time: Sun 26 Oct 2025 18:00:38 +0000
Manifest this update: Sun 26 Oct 2025 18:00:38 +0000
Manifest next update: Mon 27 Oct 2025 18:00:38 +0000
Files and hashes: 1: VmHZZN9KhtuP-5mqiVgtpoowkIw.crl (hash: 9fCHPQ1L4Oc8GQpKd27LRKRfRKBakQzWumJX9sFHOS4=)
2: xMdRmutHFokxkkQckhp-estBVrY.roa (hash: B+GeVyXFQ8LdKQlX7fXVWpcWBfpc+XAscpHvCnfEhnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:ef:40:8d:3f:0a:f1:00:d6:85:f6:57:5a:54:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c
Validity
Not Before: Oct 26 18:00:38 2025 GMT
Not After : Oct 27 18:00:38 2025 GMT
Subject: CN=edb6e3b769bbab2910d30604510ed8148b354138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:52:56:49:91:a3:ce:40:2b:3c:03:ea:33:
9d:c3:4d:a2:67:29:bb:2b:08:50:47:5c:32:ff:b1:
aa:a8:22:4c:8d:23:50:f9:6c:47:da:5c:14:4b:f8:
6b:2f:5f:37:1d:be:0c:ed:5b:25:df:8e:a0:9f:f5:
3f:ec:ec:fa:16:27:7b:05:fc:4c:04:5e:2b:05:2d:
64:bc:e1:51:7c:2a:51:bf:e1:3a:a5:1e:be:aa:42:
ea:11:63:6f:01:66:74:6a:ef:44:68:0d:c7:f6:06:
26:9c:a7:3e:38:79:71:68:10:e4:92:6d:3c:e5:fb:
17:d9:48:d4:d0:d1:5e:7e:1c:3d:e2:55:21:bc:95:
e5:e5:9b:c3:92:a5:01:5d:0a:e0:a3:98:38:9c:47:
35:e5:8a:bf:90:10:40:7c:e0:69:49:37:99:08:2a:
a0:18:b2:a0:40:c3:ef:34:61:41:cf:be:2d:80:59:
57:2b:93:30:59:06:fc:16:f9:42:3e:43:b1:a7:74:
66:2a:94:4a:da:1b:0e:18:a6:ee:3a:2e:1d:a5:10:
eb:a2:23:7e:a2:49:b0:8f:cc:2d:67:5c:91:46:7e:
cc:f4:60:f4:e4:cb:de:a5:30:c2:0b:ae:65:fd:82:
6b:6a:c1:e9:60:6f:94:8d:13:ac:c5:82:22:e0:5e:
18:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B6:E3:B7:69:BB:AB:29:10:D3:06:04:51:0E:D8:14:8B:35:41:38
X509v3 Authority Key Identifier:
keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b6:61:d5:10:0f:96:60:1f:0a:ed:4b:77:f9:6d:ec:84:cc:
09:04:1e:be:dd:5e:6b:0c:45:6b:b2:05:26:15:8e:9a:a2:db:
30:12:b2:d2:b6:ba:cc:04:a8:29:c9:04:a5:83:93:92:4b:a5:
cc:95:c3:c6:67:f2:ff:03:df:c7:54:69:d9:99:93:00:50:39:
f3:8a:3f:74:55:52:02:29:60:6e:34:e5:87:27:66:c7:f1:ba:
87:a0:32:73:aa:e6:fd:8e:7a:1b:4f:51:b7:b9:68:c4:98:9c:
b6:e0:6f:da:47:91:d7:f6:9c:e3:ef:d9:0f:58:75:bf:72:48:
c1:da:77:13:04:23:96:1f:8e:2d:5f:23:de:41:29:f7:1b:0c:
63:c6:2d:c7:cd:a6:72:8c:4b:9a:7d:fa:7c:d6:59:b3:ff:7f:
28:be:c6:a9:d8:84:4d:e6:48:87:3e:9c:da:c9:15:e3:f5:19:
39:96:95:a8:1f:bd:e7:42:a4:1f:3d:a9:df:07:11:6d:84:96:
1a:e3:b0:50:b1:99:26:6e:02:10:c8:93:fe:38:58:01:78:62:
94:5d:44:78:ba:2a:12:10:20:2d:b8:08:79:a0:de:00:49:c0:
ed:85:2a:61:dd:03:8c:75:0d:1a:54:94:86:49:8f:b8:1c:15:
83:9e:3f:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohre9AjT8K8QDWhfZXWlT7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NjFkOTY0ZGY0YTg2ZGI4ZmZiOTlhYTg5NTgyZGE2OGEz
MDkwOGMwHhcNMjUxMDI2MTgwMDM4WhcNMjUxMDI3MTgwMDM4WjAzMTEwLwYDVQQD
EyhlZGI2ZTNiNzY5YmJhYjI5MTBkMzA2MDQ1MTBlZDgxNDhiMzU0MTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc1SVkmRo85AKzwD6jOdw02iZym7
KwhQR1wy/7GqqCJMjSNQ+WxH2lwUS/hrL183Hb4M7Vsl346gn/U/7Oz6Fid7BfxM
BF4rBS1kvOFRfCpRv+E6pR6+qkLqEWNvAWZ0au9EaA3H9gYmnKc+OHlxaBDkkm08
5fsX2UjU0NFefhw94lUhvJXl5ZvDkqUBXQrgo5g4nEc15Yq/kBBAfOBpSTeZCCqg
GLKgQMPvNGFBz74tgFlXK5MwWQb8FvlCPkOxp3RmKpRK2hsOGKbuOi4dpRDroiN+
okmwj8wtZ1yRRn7M9GD05MvepTDCC65l/YJrasHpYG+UjROsxYIi4F4YfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2247dpu6spENMGBFEO2BSLNUE4MB8GA1UdIwQY
MBaAFFZh2WTfSobbj/uZqolYLaaKMJCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iMDNhMzYtMDgwNy00MWVmLWFmODYt
M2Q0MzliN2NkZTcyLzEvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iMDNhMzYtMDgwNy00MWVmLWFmODYtM2Q0MzliN2NkZTcy
LzEvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrZh1RAP
lmAfCu1Ld/lt7ITMCQQevt1eawxFa7IFJhWOmqLbMBKy0ra6zASoKckEpYOTkkul
zJXDxmfy/wPfx1Rp2ZmTAFA584o/dFVSAilgbjTlhydmx/G6h6Ayc6rm/Y56G09R
t7loxJictuBv2keR1/ac4+/ZD1h1v3JIwdp3EwQjlh+OLV8j3kEp9xsMY8Ytx82m
coxLmn36fNZZs/9/KL7GqdiETeZIhz6c2skV4/UZOZaVqB+950KkHz2p3wcRbYSW
GuOwULGZJm4CEMiT/jhYAXhilF1EeLoqEhAgLbgIeaDeAEnA7YUqYd0DjHUNGlSU
hkmPuBwVg54/KA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 22:57:15 2025 by rpki-client