Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
File: VSV3WnBqwAyC-ikzniLkMQgJnnk.mft (raw, json)
Hash identifier: 0Tf9XW9iG/4fWr2kx73sTIrVcwg5hXPofYkeW1q5ssA=
Subject key identifier: 16:A1:94:A4:39:D9:2F:C0:13:AE:0C:53:D3:A3:36:D3:8E:01:3D:0B
Authority key identifier: 55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79
Certificate issuer: /CN=5525775a706ac00c82fa29339e22e43108099e79
Certificate serial: 019A4D74514BCE0FC011CCF25A668261FA0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
Manifest number: 11E2
Signing time: Tue 04 Nov 2025 06:00:59 +0000
Manifest this update: Tue 04 Nov 2025 06:00:59 +0000
Manifest next update: Wed 05 Nov 2025 06:00:59 +0000
Files and hashes: 1: 7Hysv3h3cIK_WddtBkhV4eeOKec.roa (hash: vqkbaBvGL81dJNu1I/whqip6EIOAqXAyhwvf9zKaCBc=)
2: VSV3WnBqwAyC-ikzniLkMQgJnnk.crl (hash: 5ow0wfYjsstRRKTh/t2hG7fY5bj8E0OSuhbBuDCmtDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:51:4b:ce:0f:c0:11:cc:f2:5a:66:82:61:fa:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5525775a706ac00c82fa29339e22e43108099e79
Validity
Not Before: Nov 4 06:00:59 2025 GMT
Not After : Nov 5 06:00:59 2025 GMT
Subject: CN=16a194a439d92fc013ae0c53d3a336d38e013d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:43:7d:06:25:8d:24:4b:a7:98:8f:8d:31:
44:44:da:ee:db:9f:44:7d:cf:2d:d8:40:26:a8:29:
26:7b:4f:9b:ce:5d:6d:cb:fc:fe:1c:72:b3:b5:c8:
f8:54:2e:bb:b6:f4:60:84:6a:37:45:0c:7b:51:51:
3c:69:7a:26:7c:17:5a:4d:0f:13:3b:6c:e8:17:17:
a2:a4:6d:a4:85:b6:40:ba:b5:be:86:cc:6c:79:02:
30:15:d1:54:e0:c9:a8:3f:b7:b3:42:09:da:b8:1d:
7b:62:cc:13:82:42:b6:69:8c:48:fe:61:11:63:6b:
65:ea:97:c5:16:39:8c:b9:87:41:93:0b:a3:9a:64:
63:83:58:a8:c5:f4:f9:fb:56:0b:69:01:79:28:1f:
a2:48:d8:33:27:d8:b8:bb:9f:d1:68:56:71:7f:a9:
f1:bc:b6:45:08:b5:81:14:95:7e:09:11:5c:52:7c:
06:d7:7c:22:62:82:30:a3:8d:43:be:56:5c:f1:fd:
c3:cd:f3:f3:44:52:fe:76:87:10:c0:fd:44:c5:a0:
2a:26:37:61:6d:ee:60:03:35:90:c6:a5:28:84:4a:
b9:91:6d:d8:8c:b8:a8:fa:ed:78:7f:dc:7e:67:1b:
37:07:b2:37:3a:b5:ae:5f:76:c1:29:5e:18:3b:5c:
3b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A1:94:A4:39:D9:2F:C0:13:AE:0C:53:D3:A3:36:D3:8E:01:3D:0B
X509v3 Authority Key Identifier:
keyid:55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:40:bb:fd:58:00:7b:8e:e8:b1:e8:de:b0:6f:8c:bb:db:19:
c5:a4:a0:9d:79:01:5a:06:48:2a:ba:c1:67:cc:f6:89:fe:4f:
5c:ce:0d:03:00:cb:20:04:65:f5:57:5d:c7:2d:da:53:56:fb:
2a:39:72:e2:72:fd:69:74:2b:bb:b6:76:dc:47:d2:de:39:fd:
4a:81:10:d4:b8:93:d0:24:ec:3d:be:aa:0c:ce:06:d4:2c:a2:
a0:9f:e8:09:ce:66:03:c7:0f:4c:c1:02:27:2b:ac:d5:11:fb:
5f:52:0b:ac:78:05:74:d5:0e:8e:98:71:92:95:7d:d2:70:10:
be:d1:e1:d8:2b:86:0f:48:be:93:38:89:c7:d0:51:93:8a:a2:
64:68:bf:37:c2:ac:ce:e4:c9:b1:00:cd:56:a8:b3:71:d2:d6:
4e:52:c3:2d:4b:f3:8e:2d:ec:e6:31:ed:1c:a0:44:c2:08:8c:
2a:ae:ad:af:4e:56:f0:a4:a2:7b:24:b1:ac:57:79:10:6e:5c:
47:c1:34:ad:3e:c8:bf:d8:06:eb:95:c6:b0:e2:d9:df:09:b0:
6a:25:60:81:ba:e9:ac:da:37:25:87:35:62:ec:f0:c2:08:4e:
7f:d8:28:5f:d4:a2:90:fa:b5:03:84:29:36:74:2b:c8:94:1f:
77:85:d0:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdFFLzg/AEczyWmaCYfoOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MjU3NzVhNzA2YWMwMGM4MmZhMjkzMzllMjJlNDMxMDgw
OTllNzkwHhcNMjUxMTA0MDYwMDU5WhcNMjUxMTA1MDYwMDU5WjAzMTEwLwYDVQQD
EygxNmExOTRhNDM5ZDkyZmMwMTNhZTBjNTNkM2EzMzZkMzhlMDEzZDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR9DfQYljSRLp5iPjTFERNru259E
fc8t2EAmqCkme0+bzl1ty/z+HHKztcj4VC67tvRghGo3RQx7UVE8aXomfBdaTQ8T
O2zoFxeipG2khbZAurW+hsxseQIwFdFU4MmoP7ezQgnauB17YswTgkK2aYxI/mER
Y2tl6pfFFjmMuYdBkwujmmRjg1ioxfT5+1YLaQF5KB+iSNgzJ9i4u5/RaFZxf6nx
vLZFCLWBFJV+CRFcUnwG13wiYoIwo41DvlZc8f3DzfPzRFL+docQwP1ExaAqJjdh
be5gAzWQxqUohEq5kW3YjLio+u14f9x+Zxs3B7I3OrWuX3bBKV4YO1w7uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBahlKQ52S/AE64MU9OjNtOOAT0LMB8GA1UdIwQY
MBaAFFUld1pwasAMgvopM54i5DEICZ55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlNWM1duQnF3QXlDLWlrem5pTGtNUWdKbm5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9mNDZkNGUtYWMzMy00ZmQxLTllNjkt
Nzk1NGVkMzhjOGJhLzEvVlNWM1duQnF3QXlDLWlrem5pTGtNUWdKbm5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9mNDZkNGUtYWMzMy00ZmQxLTllNjktNzk1NGVkMzhjOGJh
LzEvVlNWM1duQnF3QXlDLWlrem5pTGtNUWdKbm5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkC7/VgA
e47osejesG+Mu9sZxaSgnXkBWgZIKrrBZ8z2if5PXM4NAwDLIARl9Vddxy3aU1b7
Kjly4nL9aXQru7Z23EfS3jn9SoEQ1LiT0CTsPb6qDM4G1CyioJ/oCc5mA8cPTMEC
Jyus1RH7X1ILrHgFdNUOjphxkpV90nAQvtHh2CuGD0i+kziJx9BRk4qiZGi/N8Ks
zuTJsQDNVqizcdLWTlLDLUvzji3s5jHtHKBEwgiMKq6tr05W8KSieySxrFd5EG5c
R8E0rT7Iv9gG65XGsOLZ3wmwaiVggbrprNo3JYc1YuzwwghOf9goX9SikPq1A4Qp
NnQryJQfd4XQHA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:14:27 2025 by rpki-client