Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
File: VCcv8xcpc8hppSISv3zoAeH454M.mft (raw, json)
Hash identifier: XjRV/gyXU576ubmpIqo3z5d8Ya0rCS4RA9AmRyYTPPw=
Subject key identifier: 28:78:9F:3E:15:9E:D2:E7:A8:1D:ED:AD:7D:BC:45:F0:E5:BD:4F:69
Authority key identifier: 54:27:2F:F3:17:29:73:C8:69:A5:22:12:BF:7C:E8:01:E1:F8:E7:83
Certificate issuer: /CN=54272ff3172973c869a52212bf7ce801e1f8e783
Certificate serial: 019A7301317AE8DABA281718201BFC785656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 13:00:49 +0000
Manifest this update: Tue 11 Nov 2025 13:00:49 +0000
Manifest next update: Wed 12 Nov 2025 13:00:49 +0000
Files and hashes: 1: VCcv8xcpc8hppSISv3zoAeH454M.crl (hash: +OrdXlzBTUt/u0CVXqY5ueTLfL6OribwYkS6ENh0xS4=)
2: oohgjiQIj_tIu1PGNdnlfQkGF6M.roa (hash: 6v4z144BDrgglq1LMAS7dreBWe+2oC3G15H9vrrNnFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:31:7a:e8:da:ba:28:17:18:20:1b:fc:78:56:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54272ff3172973c869a52212bf7ce801e1f8e783
Validity
Not Before: Nov 11 13:00:49 2025 GMT
Not After : Nov 12 13:00:49 2025 GMT
Subject: CN=28789f3e159ed2e7a81dedad7dbc45f0e5bd4f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:56:98:ae:8a:99:5d:e0:4a:c4:99:c4:87:
98:46:bc:a5:33:45:e7:b6:f6:10:ba:85:0c:91:84:
a0:b2:38:e8:b0:90:73:38:97:93:ce:b5:22:67:4a:
16:5f:1a:6b:fd:d0:ee:e9:5d:18:29:80:13:0e:a8:
88:2a:e5:63:7d:43:99:0c:9e:91:45:f9:52:21:5e:
b6:ca:a0:37:8b:1a:0e:88:e0:25:57:18:3e:be:d4:
60:dc:d1:96:24:81:76:95:26:34:c9:8a:fd:4c:f2:
bf:6b:a5:6e:e0:44:bf:60:78:17:b9:ca:60:4d:91:
74:3a:ca:bc:f0:33:9f:d1:af:93:b9:e6:c1:f1:c0:
34:c2:c2:7f:7b:e5:83:b9:e1:7a:fc:6f:fc:11:27:
56:c6:da:1e:1d:85:b1:c3:af:94:6f:2f:56:ad:10:
3c:88:b2:72:cd:0d:2d:97:c3:94:39:0d:6e:03:88:
97:4d:6e:8b:2d:f9:92:9d:94:ac:45:98:e7:9a:53:
be:da:3d:9a:e8:b3:ce:62:49:f1:82:9d:96:c0:30:
69:71:d6:89:6a:05:ae:ab:1c:5a:d4:d9:58:ba:ab:
8d:06:6f:e4:1c:90:0e:49:bb:3e:cd:c5:12:c8:0a:
0f:f4:be:85:c7:41:0f:0d:4a:7c:42:f7:e5:3b:37:
2b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:78:9F:3E:15:9E:D2:E7:A8:1D:ED:AD:7D:BC:45:F0:E5:BD:4F:69
X509v3 Authority Key Identifier:
keyid:54:27:2F:F3:17:29:73:C8:69:A5:22:12:BF:7C:E8:01:E1:F8:E7:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a5:ba:36:bd:4a:60:f0:93:14:b5:bf:3b:eb:f3:92:f9:4a:
81:d9:68:52:e9:04:69:a5:f8:98:a7:51:24:67:67:0a:ff:17:
9e:f4:bb:c8:36:c5:78:49:d0:e1:d2:b2:f1:34:74:d8:2e:4f:
69:f0:a7:19:ab:6d:b4:b4:ff:4d:5a:0a:79:58:bc:f4:7f:a8:
e4:cd:f2:e5:c9:b8:31:a6:d7:85:6e:4b:68:b1:fb:f8:24:41:
93:90:a0:ca:e0:d0:17:27:72:97:64:0f:be:86:52:96:a8:c2:
da:e1:c9:ea:95:a4:9b:a2:8a:27:dc:a4:a0:e1:51:55:de:12:
fa:42:df:bf:b0:61:55:1f:94:bb:bc:ce:d3:7e:21:50:58:c0:
1f:8e:74:c3:91:3f:d0:a3:67:7a:94:a9:cc:9e:00:f9:2c:17:
19:2c:99:7f:23:0d:c1:15:1b:bd:8d:b2:a6:0f:fb:da:b6:7b:
8a:7b:26:c9:46:5a:c0:ad:14:33:ac:6d:15:8b:5a:ff:1b:06:
a5:cb:66:a4:26:9b:fa:43:3f:9b:58:f1:1f:62:84:b3:0d:e3:
a7:3b:46:51:80:fc:96:f4:09:07:8d:7b:27:91:74:c6:30:e1:
f8:1b:67:ec:3a:8e:92:5f:1e:d4:e5:f7:bd:27:85:e8:6e:d1:
c6:4e:d3:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzATF66Nq6KBcYIBv8eFZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MjcyZmYzMTcyOTczYzg2OWE1MjIxMmJmN2NlODAxZTFm
OGU3ODMwHhcNMjUxMTExMTMwMDQ5WhcNMjUxMTEyMTMwMDQ5WjAzMTEwLwYDVQQD
EygyODc4OWYzZTE1OWVkMmU3YTgxZGVkYWQ3ZGJjNDVmMGU1YmQ0ZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM5WmK6KmV3gSsSZxIeYRrylM0Xn
tvYQuoUMkYSgsjjosJBzOJeTzrUiZ0oWXxpr/dDu6V0YKYATDqiIKuVjfUOZDJ6R
RflSIV62yqA3ixoOiOAlVxg+vtRg3NGWJIF2lSY0yYr9TPK/a6Vu4ES/YHgXucpg
TZF0Osq88DOf0a+TuebB8cA0wsJ/e+WDueF6/G/8ESdWxtoeHYWxw6+Uby9WrRA8
iLJyzQ0tl8OUOQ1uA4iXTW6LLfmSnZSsRZjnmlO+2j2a6LPOYknxgp2WwDBpcdaJ
agWuqxxa1NlYuquNBm/kHJAOSbs+zcUSyAoP9L6Fx0EPDUp8QvflOzcr5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCh4nz4VntLnqB3trX28RfDlvU9pMB8GA1UdIwQY
MBaAFFQnL/MXKXPIaaUiEr986AHh+OeDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkNjdjh4Y3BjOGhwcFNJU3Yzem9BZUg0NTRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lMjg3ZDktOWMzYi00MTIxLTkyYjYt
YTFkOWU3NTRjMTJlLzEvVkNjdjh4Y3BjOGhwcFNJU3Yzem9BZUg0NTRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lMjg3ZDktOWMzYi00MTIxLTkyYjYtYTFkOWU3NTRjMTJl
LzEvVkNjdjh4Y3BjOGhwcFNJU3Yzem9BZUg0NTRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqaW6Nr1K
YPCTFLW/O+vzkvlKgdloUukEaaX4mKdRJGdnCv8XnvS7yDbFeEnQ4dKy8TR02C5P
afCnGatttLT/TVoKeVi89H+o5M3y5cm4MabXhW5LaLH7+CRBk5CgyuDQFydyl2QP
voZSlqjC2uHJ6pWkm6KKJ9ykoOFRVd4S+kLfv7BhVR+Uu7zO034hUFjAH450w5E/
0KNnepSpzJ4A+SwXGSyZfyMNwRUbvY2ypg/72rZ7insmyUZawK0UM6xtFYta/xsG
pctmpCab+kM/m1jxH2KEsw3jpztGUYD8lvQJB417J5F0xjDh+Btn7DqOkl8e1OX3
vSeF6G7Rxk7TxQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:59 2025 by rpki-client