Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
File: VUNDfunFqMhPjTSD3F4PpLqJzD0.mft (raw, json)
Hash identifier: lYRlt+pEyNo9nPjeT7YBaGSSLHdg9mMcAgTcrNr34ZI=
Subject key identifier: 74:2D:D8:2E:1A:A9:7A:A8:52:C1:83:4A:57:F1:74:83:DD:30:77:9B
Authority key identifier: 55:43:43:7E:E9:C5:A8:C8:4F:8D:34:83:DC:5E:0F:A4:BA:89:CC:3D
Certificate issuer: /CN=5543437ee9c5a8c84f8d3483dc5e0fa4ba89cc3d
Certificate serial: 019A72935E5480B0BA099275980387C25347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:00:51 +0000
Manifest this update: Tue 11 Nov 2025 11:00:51 +0000
Manifest next update: Wed 12 Nov 2025 11:00:51 +0000
Files and hashes: 1: VUNDfunFqMhPjTSD3F4PpLqJzD0.crl (hash: PcJO57qXMyYxKWSNz2oSnYOHX9Jb7w24nijlfRa958E=)
2: XNlRYOrdP4YhxB9m-RjQGIDXydw.roa (hash: yt93xApYhguaF4Zby7MP0nE6qjw1BNUYTRRGsguxdkI=)
3: dpCn75hkt5WCsXcemx99arZsVj4.roa (hash: UNV6qFqvh7+zsZgIxSlwdVSHxi77oGWMR4+NitLYm6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:5e:54:80:b0:ba:09:92:75:98:03:87:c2:53:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5543437ee9c5a8c84f8d3483dc5e0fa4ba89cc3d
Validity
Not Before: Nov 11 11:00:51 2025 GMT
Not After : Nov 12 11:00:51 2025 GMT
Subject: CN=742dd82e1aa97aa852c1834a57f17483dd30779b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:22:71:05:8e:30:79:dc:a9:66:8a:65:4f:07:
ea:89:cb:03:f4:cd:19:7d:7d:c4:46:52:b7:d7:b6:
5e:23:9a:c5:e9:1e:86:e0:f4:e9:92:b7:2e:09:ec:
8d:6e:a0:9b:e0:e2:fc:f5:96:9a:5d:4a:df:84:55:
67:ef:68:ed:1a:8b:d2:18:e2:8a:77:5f:8e:70:58:
3d:4f:4d:91:b7:68:0f:4c:d2:fe:03:b8:ad:37:ec:
22:ce:f4:5f:04:f3:28:12:8b:e9:41:07:0d:0a:cc:
15:0b:32:ad:d8:05:08:4a:00:24:b8:1a:90:e4:93:
f3:a2:4d:a7:52:fa:a4:ec:6c:f2:e1:15:af:29:b4:
e6:ca:10:d3:b1:5a:23:7a:5b:c0:5f:a3:77:35:e5:
a7:45:85:63:86:83:03:02:fd:86:89:7c:cd:f2:95:
e1:87:5b:4e:be:e0:a6:f4:ed:db:64:b7:2d:7d:8d:
7e:da:2c:c1:e7:c9:e9:90:89:77:7a:09:17:d7:9f:
e9:20:77:c6:fc:c7:f3:d1:95:a8:16:67:7a:6b:7c:
ef:8b:95:31:88:aa:99:c0:00:cd:05:a0:fe:d0:dd:
af:91:01:76:1a:96:9b:c8:60:d4:de:43:ff:79:ee:
14:b4:de:de:0c:ed:65:60:ae:9c:dc:66:04:b0:5e:
83:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2D:D8:2E:1A:A9:7A:A8:52:C1:83:4A:57:F1:74:83:DD:30:77:9B
X509v3 Authority Key Identifier:
keyid:55:43:43:7E:E9:C5:A8:C8:4F:8D:34:83:DC:5E:0F:A4:BA:89:CC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:34:9f:6b:d9:69:9a:9b:66:75:23:8d:02:d6:ee:5e:d2:a5:
d0:14:09:26:2e:eb:8f:50:16:6c:e4:b3:ba:b5:3e:d5:a4:10:
a3:68:6c:63:9b:78:c0:ae:e1:95:0f:d5:e1:de:ee:7f:87:8c:
95:cb:39:dc:a9:b0:0c:8a:0b:e8:17:ac:35:ce:25:fa:ab:a9:
02:95:ef:0c:7f:cc:8f:e9:f1:df:4c:5f:b4:05:5b:05:30:57:
65:80:11:72:d9:a3:a8:40:df:fb:6f:47:2e:f3:94:61:74:a6:
bc:cb:6f:d1:fb:86:81:51:ea:5f:42:da:89:5a:68:39:26:db:
a1:a7:68:f5:b6:5c:03:af:ac:12:b3:9b:85:78:8c:c4:66:6b:
02:5b:97:31:84:8a:f2:ab:09:89:12:c0:ad:67:22:a8:81:1e:
47:9c:8b:23:ea:73:1b:f4:c8:04:c3:54:18:1e:05:fc:cc:c3:
b5:58:39:37:bd:6a:40:23:91:35:b3:9b:57:ae:ef:4d:13:00:
a0:5b:55:f1:f4:1b:44:a6:96:c9:a2:c3:2b:26:2f:a4:24:76:
f2:20:af:91:98:0a:c6:76:94:44:75:7f:c0:72:13:f3:38:2d:
e5:04:77:8c:45:d1:56:fb:eb:05:11:75:42:a2:d9:df:00:94:
53:5a:61:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk15UgLC6CZJ1mAOHwlNHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NDM0MzdlZTljNWE4Yzg0ZjhkMzQ4M2RjNWUwZmE0YmE4
OWNjM2QwHhcNMjUxMTExMTEwMDUxWhcNMjUxMTEyMTEwMDUxWjAzMTEwLwYDVQQD
Eyg3NDJkZDgyZTFhYTk3YWE4NTJjMTgzNGE1N2YxNzQ4M2RkMzA3NzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiJxBY4wedypZoplTwfqicsD9M0Z
fX3ERlK317ZeI5rF6R6G4PTpkrcuCeyNbqCb4OL89ZaaXUrfhFVn72jtGovSGOKK
d1+OcFg9T02Rt2gPTNL+A7itN+wizvRfBPMoEovpQQcNCswVCzKt2AUISgAkuBqQ
5JPzok2nUvqk7Gzy4RWvKbTmyhDTsVojelvAX6N3NeWnRYVjhoMDAv2GiXzN8pXh
h1tOvuCm9O3bZLctfY1+2izB58npkIl3egkX15/pIHfG/Mfz0ZWoFmd6a3zvi5Ux
iKqZwADNBaD+0N2vkQF2GpabyGDU3kP/ee4UtN7eDO1lYK6c3GYEsF6DdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQt2C4aqXqoUsGDSlfxdIPdMHebMB8GA1UdIwQY
MBaAFFVDQ37pxajIT400g9xeD6S6icw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlVORGZ1bkZxTWhQalRTRDNGNFBwTHFKekQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wYjI1MjQtZmM3Yi00ZWNmLWE4MTMt
NGE1ZjkyZTViZGUyLzEvVlVORGZ1bkZxTWhQalRTRDNGNFBwTHFKekQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wYjI1MjQtZmM3Yi00ZWNmLWE4MTMtNGE1ZjkyZTViZGUy
LzEvVlVORGZ1bkZxTWhQalRTRDNGNFBwTHFKekQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTSfa9lp
mptmdSONAtbuXtKl0BQJJi7rj1AWbOSzurU+1aQQo2hsY5t4wK7hlQ/V4d7uf4eM
lcs53KmwDIoL6BesNc4l+qupApXvDH/Mj+nx30xftAVbBTBXZYARctmjqEDf+29H
LvOUYXSmvMtv0fuGgVHqX0LaiVpoOSbboado9bZcA6+sErObhXiMxGZrAluXMYSK
8qsJiRLArWciqIEeR5yLI+pzG/TIBMNUGB4F/MzDtVg5N71qQCORNbObV67vTRMA
oFtV8fQbRKaWyaLDKyYvpCR28iCvkZgKxnaURHV/wHIT8zgt5QR3jEXRVvvrBRF1
QqLZ3wCUU1phJw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:11 2025 by rpki-client