Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
File: VICpFlHjeO69hx0K3WleZ3v1DS4.mft (raw, json)
Hash identifier: wPOxPTw0QhECsxWFvymt1XqU0H3Gj+cfDjMZ4P+wlOw=
Subject key identifier: 3A:47:7D:CF:90:6C:CE:F1:C3:05:7B:D2:AE:A6:99:29:F9:BC:86:5A
Authority key identifier: 54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E
Certificate issuer: /CN=5480a91651e378eebd871d0add695e677bf50d2e
Certificate serial: 019A71B888781D817AED584065CACF61DF27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
Manifest number: 0A51
Signing time: Tue 11 Nov 2025 07:01:50 +0000
Manifest this update: Tue 11 Nov 2025 07:01:50 +0000
Manifest next update: Wed 12 Nov 2025 07:01:50 +0000
Files and hashes: 1: VICpFlHjeO69hx0K3WleZ3v1DS4.crl (hash: X/FV7mrH7BZowHkv2wT7s9BCt4odzeAndtXIIavJzhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:88:78:1d:81:7a:ed:58:40:65:ca:cf:61:df:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5480a91651e378eebd871d0add695e677bf50d2e
Validity
Not Before: Nov 11 07:01:50 2025 GMT
Not After : Nov 12 07:01:50 2025 GMT
Subject: CN=3a477dcf906ccef1c3057bd2aea69929f9bc865a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:16:34:47:ea:25:ed:59:65:81:d4:c2:85:ba:
a7:a8:c2:bd:5a:a3:fb:20:03:81:ad:00:35:d3:1b:
39:fa:bf:04:c3:f2:ed:7f:42:a6:5c:ba:e4:2f:f8:
17:f5:cd:48:56:44:b8:b4:bf:03:8e:3f:53:f1:ad:
6f:f8:ad:2b:2f:b3:25:08:6c:92:c2:5d:ca:ac:83:
64:07:fe:90:c2:dd:f2:f0:13:ba:77:23:4a:68:68:
1c:9c:fd:69:78:94:08:3f:16:c4:78:d7:8a:8a:33:
1d:9d:1c:37:4c:55:25:7f:3e:79:fd:f8:73:e2:14:
c2:32:a8:f4:e3:d7:e7:23:29:8e:b7:1f:f1:83:be:
50:7c:53:0e:cb:88:3b:69:44:9f:c3:60:bf:78:fb:
18:49:1f:20:9b:ee:42:54:b8:80:da:27:cd:1d:87:
50:fe:44:ec:b7:3c:c6:dd:76:bc:e6:e8:80:7a:3c:
58:90:e1:44:59:5b:13:b2:50:cc:ae:aa:70:82:be:
d4:f3:34:91:c6:a5:62:18:b2:22:3b:52:e2:cd:24:
7b:a1:92:88:18:5c:42:7d:89:41:e7:b2:45:b7:5f:
40:0c:a8:89:4e:3a:7b:19:62:1e:a3:fe:7c:4e:ae:
b5:2b:e7:6a:81:00:a6:05:63:26:53:c3:2d:08:72:
d2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:47:7D:CF:90:6C:CE:F1:C3:05:7B:D2:AE:A6:99:29:F9:BC:86:5A
X509v3 Authority Key Identifier:
keyid:54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:71:a0:f0:3c:9c:84:e1:75:88:ce:a0:d2:7b:b6:b5:83:bf:
37:8c:84:4b:d8:17:ac:c5:dd:b6:c5:1e:37:83:d3:97:11:1e:
99:14:54:f9:b5:6e:85:61:c7:e3:f4:73:9a:77:f0:1d:9e:ff:
bb:b4:f1:04:ac:3c:70:b0:a1:53:1a:d8:07:bc:3c:06:f7:59:
ab:bd:5b:ee:e1:64:1a:36:0b:bf:a2:7f:5b:e0:46:59:ea:67:
c2:c9:3d:cf:b0:0f:2e:75:01:d6:c7:74:05:28:f1:b6:1f:df:
f0:48:e5:b5:a4:bc:6b:e7:83:08:44:1d:0f:a2:b7:9b:ad:f7:
8b:ba:f7:e0:d4:8f:26:bb:4f:4d:48:31:ae:7a:ac:a4:26:69:
51:94:58:4c:32:8b:de:13:e3:ad:a0:a5:64:63:8f:10:4d:55:
b6:15:2e:63:84:bf:3c:85:f8:df:dd:fe:6b:91:63:ec:e1:20:
8a:91:46:39:49:33:f0:03:f0:48:2b:85:db:d3:52:83:5f:3c:
69:ff:ad:d2:c0:c9:ca:4a:41:ae:8b:84:c6:cb:32:8e:fc:ac:
4c:7b:9a:52:f6:1e:8a:3f:0b:5b:21:5c:2e:ec:81:34:d5:51:
8a:23:33:8f:ef:31:e1:ec:f6:01:08:4f:55:24:04:0a:1b:1b:
cb:0e:df:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuIh4HYF67VhAZcrPYd8nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ODBhOTE2NTFlMzc4ZWViZDg3MWQwYWRkNjk1ZTY3N2Jm
NTBkMmUwHhcNMjUxMTExMDcwMTUwWhcNMjUxMTEyMDcwMTUwWjAzMTEwLwYDVQQD
EygzYTQ3N2RjZjkwNmNjZWYxYzMwNTdiZDJhZWE2OTkyOWY5YmM4NjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xY0R+ol7VllgdTChbqnqMK9WqP7
IAOBrQA10xs5+r8Ew/Ltf0KmXLrkL/gX9c1IVkS4tL8Djj9T8a1v+K0rL7MlCGyS
wl3KrINkB/6Qwt3y8BO6dyNKaGgcnP1peJQIPxbEeNeKijMdnRw3TFUlfz55/fhz
4hTCMqj049fnIymOtx/xg75QfFMOy4g7aUSfw2C/ePsYSR8gm+5CVLiA2ifNHYdQ
/kTstzzG3Xa85uiAejxYkOFEWVsTslDMrqpwgr7U8zSRxqViGLIiO1LizSR7oZKI
GFxCfYlB57JFt19ADKiJTjp7GWIeo/58Tq61K+dqgQCmBWMmU8MtCHLSmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpHfc+QbM7xwwV70q6mmSn5vIZaMB8GA1UdIwQY
MBaAFFSAqRZR43juvYcdCt1pXmd79Q0uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVklDcEZsSGplTzY5aHgwSzNXbGVaM3YxRFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9jMTJiMWYtYjQxOS00ZjdlLTk0ZDQt
YzlhNWNkOWMxNDRkLzEvVklDcEZsSGplTzY5aHgwSzNXbGVaM3YxRFM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9jMTJiMWYtYjQxOS00ZjdlLTk0ZDQtYzlhNWNkOWMxNDRk
LzEvVklDcEZsSGplTzY5aHgwSzNXbGVaM3YxRFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXGg8Dyc
hOF1iM6g0nu2tYO/N4yES9gXrMXdtsUeN4PTlxEemRRU+bVuhWHH4/RzmnfwHZ7/
u7TxBKw8cLChUxrYB7w8BvdZq71b7uFkGjYLv6J/W+BGWepnwsk9z7APLnUB1sd0
BSjxth/f8EjltaS8a+eDCEQdD6K3m633i7r34NSPJrtPTUgxrnqspCZpUZRYTDKL
3hPjraClZGOPEE1VthUuY4S/PIX4393+a5Fj7OEgipFGOUkz8APwSCuF29NSg188
af+t0sDJykpBrouExssyjvysTHuaUvYeij8LWyFcLuyBNNVRiiMzj+8x4ez2AQhP
VSQEChsbyw7fUQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:15 2025 by rpki-client