Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
File: VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft (raw, json)
Hash identifier: 1DyBXGn2ASxglPS0KwDHIPUjsQv8dD4kQnlK+nIq/+8=
Subject key identifier: 54:22:3A:25:36:7D:D8:2F:95:B8:D9:18:5D:7E:E0:48:57:29:98:FA
Authority key identifier: 56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18
Certificate issuer: /CN=56e02f73509bde35d95d1851803e1f00829eb718
Certificate serial: 019A71B974EA5AB3BCE8F6CA7D12EA0B70B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
Manifest number: 06FD
Signing time: Tue 11 Nov 2025 07:02:50 +0000
Manifest this update: Tue 11 Nov 2025 07:02:50 +0000
Manifest next update: Wed 12 Nov 2025 07:02:50 +0000
Files and hashes: 1: Kk17QDRaVm55Nj1Ql5GZNxMxg-E.roa (hash: 1DI9vhSZXA/YJqAVaaagZypXr5kFSqz0lKWRcfLOEfQ=)
2: VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl (hash: AKYW2C3+Sm+SmWnZaFq3BWGzDl3NHzcGha3xgVVKuP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:74:ea:5a:b3:bc:e8:f6:ca:7d:12:ea:0b:70:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e02f73509bde35d95d1851803e1f00829eb718
Validity
Not Before: Nov 11 07:02:50 2025 GMT
Not After : Nov 12 07:02:50 2025 GMT
Subject: CN=54223a25367dd82f95b8d9185d7ee048572998fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:3d:f5:e2:3c:27:d6:7c:2d:11:e6:7e:f4:
50:ee:1d:79:35:da:73:4b:3a:cc:04:37:6c:75:fb:
bc:dc:da:f4:12:b2:85:53:0f:9d:e8:fd:e9:e2:3d:
4d:40:d6:59:b6:90:01:45:85:73:db:1b:4e:0f:df:
d9:64:70:4e:92:4a:40:fa:cd:48:89:59:e4:d2:5b:
9f:cd:e6:58:6f:8b:e8:06:0e:e2:d0:99:f6:30:21:
36:47:73:e5:9b:4d:7d:15:1a:ab:d9:a1:b4:09:51:
6d:7d:f0:68:2e:45:71:33:ab:95:09:50:4e:5c:d5:
a6:1b:0a:74:cf:ad:f0:27:ba:27:e1:8c:1c:8f:4e:
78:75:74:71:0c:e6:dd:c4:15:51:1a:b0:04:dc:8a:
19:c6:f9:80:f7:bf:44:10:c3:8c:da:5b:9e:9a:a1:
32:15:92:32:ec:6e:da:bd:7c:76:13:2e:b0:72:35:
52:d0:37:7e:71:24:f1:54:42:19:48:d3:ea:c0:5d:
07:28:60:22:25:ef:51:17:88:8e:44:5d:0f:3c:e8:
43:32:86:c5:8c:01:b3:a4:43:2c:ac:c4:f9:e4:2e:
8c:d8:e2:a6:e2:9b:20:5f:53:67:0b:cb:84:7a:1b:
50:bf:73:6b:1b:60:af:8b:f8:b7:e5:9c:4d:d8:f4:
cc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:22:3A:25:36:7D:D8:2F:95:B8:D9:18:5D:7E:E0:48:57:29:98:FA
X509v3 Authority Key Identifier:
keyid:56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:9b:e1:b8:50:ae:a4:1f:71:0c:9a:5e:81:34:1f:6d:90:44:
8a:38:65:38:84:8b:ad:72:b3:63:94:00:9a:9b:ee:b5:76:9d:
f3:e2:9a:96:eb:9b:e5:5f:79:aa:27:b8:6d:ab:78:94:ed:cc:
5e:6c:24:78:e4:8a:91:b7:4a:7d:fd:b5:4a:e2:0c:e6:74:23:
b5:a4:fb:76:ef:76:eb:50:a9:04:95:af:a0:0a:14:e6:f7:b0:
4f:4c:53:f2:48:f4:f1:3c:37:5f:5b:c6:d0:92:d6:2b:67:9c:
99:ce:a9:4f:9b:80:2c:b9:e9:2a:8a:b8:8b:ab:f2:77:dc:65:
20:38:56:f4:dd:bd:17:9a:c2:b3:a5:f8:7a:2b:76:19:aa:a2:
4a:0a:cd:8c:21:14:a0:12:c0:97:6a:c3:27:71:83:ac:b1:cf:
6c:ac:32:44:65:cc:97:a5:69:6e:aa:06:73:83:03:05:2c:11:
68:7a:94:ba:45:12:c3:93:56:87:c7:7b:b4:4c:81:04:2a:83:
0b:75:f3:31:dc:40:17:06:f3:f1:29:f3:17:21:c3:c3:8a:b2:
02:66:28:fe:96:d8:d8:ee:bb:a2:d3:54:61:b4:3c:7a:71:93:
97:7d:db:f6:49:a5:91:a1:d7:db:06:9b:3c:7b:32:de:6d:1b:
d4:86:35:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuXTqWrO86PbKfRLqC3CzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZTAyZjczNTA5YmRlMzVkOTVkMTg1MTgwM2UxZjAwODI5
ZWI3MTgwHhcNMjUxMTExMDcwMjUwWhcNMjUxMTEyMDcwMjUwWjAzMTEwLwYDVQQD
Eyg1NDIyM2EyNTM2N2RkODJmOTViOGQ5MTg1ZDdlZTA0ODU3Mjk5OGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpQ99eI8J9Z8LRHmfvRQ7h15Ndpz
SzrMBDdsdfu83Nr0ErKFUw+d6P3p4j1NQNZZtpABRYVz2xtOD9/ZZHBOkkpA+s1I
iVnk0lufzeZYb4voBg7i0Jn2MCE2R3Plm019FRqr2aG0CVFtffBoLkVxM6uVCVBO
XNWmGwp0z63wJ7on4Ywcj054dXRxDObdxBVRGrAE3IoZxvmA979EEMOM2luemqEy
FZIy7G7avXx2Ey6wcjVS0Dd+cSTxVEIZSNPqwF0HKGAiJe9RF4iORF0PPOhDMobF
jAGzpEMsrMT55C6M2OKm4psgX1NnC8uEehtQv3NrG2Cvi/i35ZxN2PTMrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQiOiU2fdgvlbjZGF1+4EhXKZj6MB8GA1UdIwQY
MBaAFFbgL3NQm9412V0YUYA+HwCCnrcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnVBdmMxQ2IzalhaWFJoUmdENGZBSUtldHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDBjMDctZTk3Mi00ZDg4LTk1ZTgt
ZmM5NThlOGQ0OGMyLzEvVnVBdmMxQ2IzalhaWFJoUmdENGZBSUtldHhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iZDBjMDctZTk3Mi00ZDg4LTk1ZTgtZmM5NThlOGQ0OGMy
LzEvVnVBdmMxQ2IzalhaWFJoUmdENGZBSUtldHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5vhuFCu
pB9xDJpegTQfbZBEijhlOISLrXKzY5QAmpvutXad8+Kaluub5V95qie4bat4lO3M
XmwkeOSKkbdKff21SuIM5nQjtaT7du9261CpBJWvoAoU5vewT0xT8kj08Tw3X1vG
0JLWK2ecmc6pT5uALLnpKoq4i6vyd9xlIDhW9N29F5rCs6X4eit2GaqiSgrNjCEU
oBLAl2rDJ3GDrLHPbKwyRGXMl6VpbqoGc4MDBSwRaHqUukUSw5NWh8d7tEyBBCqD
C3XzMdxAFwbz8SnzFyHDw4qyAmYo/pbY2O67otNUYbQ8enGTl33b9kmlkaHX2wab
PHsy3m0b1IY1iw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:44 2025 by rpki-client