Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
File: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft (raw, json)
Hash identifier: xnybVC4jACCXU77NT/UP9NzPaq7Bse6Vo/B9G/0Dm/c=
Subject key identifier: FB:E5:3E:05:DA:0F:61:25:C0:6C:D7:93:98:4E:2C:90:40:CC:61:6A
Authority key identifier: BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
Certificate issuer: /CN=bea7769343c691f675bb369253cb3f6fc304b01f
Certificate serial: 019A72258E923CC8EDDE38687AC778436306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
Manifest number: 0AC2
Signing time: Tue 11 Nov 2025 09:00:55 +0000
Manifest this update: Tue 11 Nov 2025 09:00:55 +0000
Manifest next update: Wed 12 Nov 2025 09:00:55 +0000
Files and hashes: 1: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl (hash: XDMbnxfjJWSg+Atk6GplA4gPWBsHHUFJ4aO6XLBdJfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8e:92:3c:c8:ed:de:38:68:7a:c7:78:43:63:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea7769343c691f675bb369253cb3f6fc304b01f
Validity
Not Before: Nov 11 09:00:55 2025 GMT
Not After : Nov 12 09:00:55 2025 GMT
Subject: CN=fbe53e05da0f6125c06cd793984e2c9040cc616a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ed:03:5b:e5:ad:db:da:72:f4:03:12:47:20:
b4:00:d6:27:56:86:49:db:39:f1:84:34:9a:d3:da:
36:e1:77:ed:63:df:c1:91:35:8f:1f:38:84:de:63:
7c:2b:68:b4:11:69:12:91:76:9f:7b:e3:e7:d6:eb:
09:36:c8:37:73:c8:37:37:56:8e:23:b7:7c:44:3f:
25:f6:96:50:87:2e:51:01:5d:73:d9:61:4f:b4:f1:
0f:e0:7a:38:47:6c:c1:06:60:4d:03:f0:61:47:d7:
2c:3d:9b:b6:ae:d3:02:9d:02:76:63:f4:77:49:7e:
c0:7a:bc:ed:c9:b7:27:bd:37:76:06:62:2e:a1:09:
94:92:de:e1:93:8a:03:64:c0:b9:f0:b3:39:15:e5:
01:bc:4b:97:3e:3b:8e:f8:69:6c:c3:c8:c1:97:4e:
7f:10:f1:85:95:a5:14:ac:24:0a:4e:33:b6:bb:47:
5e:ae:90:ac:f5:4b:8d:92:73:90:8c:64:9a:45:78:
8b:e5:e2:8a:e0:b5:35:bc:1a:4c:ac:dd:5c:f4:a7:
4e:9c:ec:c4:3f:93:2d:5e:81:cf:c2:de:41:97:ee:
ac:f5:cd:49:36:d5:2f:78:24:0a:80:e1:1c:d6:17:
f5:f7:88:d8:16:3e:c5:2b:be:55:92:ec:2f:74:84:
c4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E5:3E:05:DA:0F:61:25:C0:6C:D7:93:98:4E:2C:90:40:CC:61:6A
X509v3 Authority Key Identifier:
keyid:BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:33:31:50:5c:6b:09:01:8a:e2:0a:fb:e4:68:50:13:88:01:
59:71:3c:21:f2:a8:f8:6d:31:71:e6:2b:aa:88:4f:9b:dd:d0:
f1:e5:51:af:2b:a0:2e:2b:1e:95:1d:5a:dd:74:ff:05:20:48:
8b:e1:0d:8d:1f:20:58:93:ea:61:f2:c9:21:c0:01:48:d4:85:
d1:cf:8d:02:79:fa:25:97:77:33:93:91:82:00:bb:fa:10:08:
bc:ea:f1:d2:18:ac:6f:96:f7:85:61:ac:b8:bc:46:ef:ad:83:
f3:ef:82:22:dc:7d:32:3c:59:88:28:87:05:1c:b9:fa:c3:86:
08:ef:a8:12:c6:92:45:e7:62:a4:4e:95:c7:7e:a7:c3:c6:2a:
6f:6b:b4:6d:fa:ec:36:d5:e3:40:ff:ef:27:e2:4e:73:74:f0:
34:e9:ac:3f:a3:b7:6b:06:4c:bb:a9:d0:5b:ff:46:5b:dc:64:
b6:a6:28:33:c3:2c:a8:38:e5:10:cd:2c:5a:f1:52:5d:5b:18:
1a:79:44:75:4f:a2:67:49:6c:2e:9c:9e:2e:ad:3c:0c:b1:87:
da:e6:2d:3a:5f:53:1a:0e:ad:69:6a:e2:41:97:9b:4b:17:ba:
3b:b4:91:51:83:e9:14:e0:41:80:77:38:6d:b9:b3:a4:71:a0:
e2:9a:ea:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJY6SPMjt3jhoesd4Q2MGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTc3NjkzNDNjNjkxZjY3NWJiMzY5MjUzY2IzZjZmYzMw
NGIwMWYwHhcNMjUxMTExMDkwMDU1WhcNMjUxMTEyMDkwMDU1WjAzMTEwLwYDVQQD
EyhmYmU1M2UwNWRhMGY2MTI1YzA2Y2Q3OTM5ODRlMmM5MDQwY2M2MTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+0DW+Wt29py9AMSRyC0ANYnVoZJ
2znxhDSa09o24XftY9/BkTWPHziE3mN8K2i0EWkSkXafe+Pn1usJNsg3c8g3N1aO
I7d8RD8l9pZQhy5RAV1z2WFPtPEP4Ho4R2zBBmBNA/BhR9csPZu2rtMCnQJ2Y/R3
SX7AerztybcnvTd2BmIuoQmUkt7hk4oDZMC58LM5FeUBvEuXPjuO+Glsw8jBl05/
EPGFlaUUrCQKTjO2u0derpCs9UuNknOQjGSaRXiL5eKK4LU1vBpMrN1c9KdOnOzE
P5MtXoHPwt5Bl+6s9c1JNtUveCQKgOEc1hf194jYFj7FK75VkuwvdITEqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvlPgXaD2ElwGzXk5hOLJBAzGFqMB8GA1UdIwQY
MBaAFL6ndpNDxpH2dbs2klPLP2/DBLAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni83ZDllYWEtZWM3NS00MjRlLTljNWUt
ZTI0ZDU4OGJiMDNmLzEvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni83ZDllYWEtZWM3NS00MjRlLTljNWUtZTI0ZDU4OGJiMDNm
LzEvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArTMxUFxr
CQGK4gr75GhQE4gBWXE8IfKo+G0xceYrqohPm93Q8eVRryugLiselR1a3XT/BSBI
i+ENjR8gWJPqYfLJIcABSNSF0c+NAnn6JZd3M5ORggC7+hAIvOrx0hisb5b3hWGs
uLxG762D8++CItx9MjxZiCiHBRy5+sOGCO+oEsaSRedipE6Vx36nw8Yqb2u0bfrs
NtXjQP/vJ+JOc3TwNOmsP6O3awZMu6nQW/9GW9xktqYoM8MsqDjlEM0sWvFSXVsY
GnlEdU+iZ0lsLpyeLq08DLGH2uYtOl9TGg6taWriQZebSxe6O7SRUYPpFOBBgHc4
bbmzpHGg4prqDQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:13 2025 by rpki-client