
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
File: V3GDYWiNFi_4AjwSJ81kTa45ocA.mft (raw, json)
Hash identifier: JZAH0Z98sl6DlySAzdq2+pycIe+IvyXoksNJO9VIVys=
Subject key identifier: 94:7D:C1:41:F9:DB:41:03:18:CA:16:5D:53:ED:88:B8:7C:40:89:80
Authority key identifier: 57:71:83:61:68:8D:16:2F:F8:02:3C:12:27:CD:64:4D:AE:39:A1:C0
Certificate issuer: /CN=57718361688d162ff8023c1227cd644dae39a1c0
Certificate serial: 019A19BD13E5FE76FBCD38CA1B6EED79F3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
Manifest number: 1680
Signing time: Sat 25 Oct 2025 05:00:13 +0000
Manifest this update: Sat 25 Oct 2025 05:00:13 +0000
Manifest next update: Sun 26 Oct 2025 05:00:13 +0000
Files and hashes: 1: V3GDYWiNFi_4AjwSJ81kTa45ocA.crl (hash: VeuCGm43Xl/2UGQ7nYwVBFYySiNe8jZkNWXkyb7PhSk=)
2: lgeLoySacO5n6-jqTWkewt--0AI.roa (hash: cHeeK4JCsJJNj8Pz7DQjcNm/axVPSQ0h4TJyF4NqSFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 05:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:bd:13:e5:fe:76:fb:cd:38:ca:1b:6e:ed:79:f3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57718361688d162ff8023c1227cd644dae39a1c0
Validity
Not Before: Oct 25 05:00:13 2025 GMT
Not After : Oct 26 05:00:13 2025 GMT
Subject: CN=947dc141f9db410318ca165d53ed88b87c408980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:1b:bb:e7:bf:fd:9d:6b:ff:ca:3f:73:f5:1c:
f4:bf:cf:04:40:eb:73:91:fe:97:8c:dd:b7:1f:f9:
06:81:c6:ca:d6:bd:3f:eb:0c:99:85:c4:46:10:4d:
e7:33:0b:d9:24:0d:3c:e2:a9:44:41:87:87:98:44:
67:34:15:7b:fa:d8:0d:96:ac:d6:6e:af:32:e6:94:
08:ba:2e:ea:05:79:84:91:8b:ed:1b:98:cb:74:1b:
de:10:d2:43:ee:75:9e:6d:68:d1:42:12:75:76:fc:
8b:cb:2b:db:ee:28:27:74:aa:7a:04:70:f7:cf:ea:
ff:73:31:ae:67:fb:86:a4:60:a4:88:7a:60:78:5f:
b7:22:2d:89:77:f2:da:eb:70:f2:83:41:e0:d3:6b:
05:23:7e:16:c1:4e:42:f6:68:ac:67:00:84:f2:06:
cb:b7:4d:67:b5:92:1c:6b:8c:2d:b9:27:08:b1:00:
ee:1d:04:41:f7:2e:b7:db:7f:af:44:2e:d7:ac:a3:
af:fe:7c:3a:0f:c2:f6:54:75:14:22:94:24:5e:15:
67:f9:c7:d3:77:56:5e:23:87:e8:50:73:c0:70:0b:
e6:42:f9:c9:79:ba:f2:5d:bf:3d:b3:6a:52:42:7c:
5a:18:bd:56:8e:76:cc:b8:1f:6e:56:a6:2f:01:c1:
ff:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7D:C1:41:F9:DB:41:03:18:CA:16:5D:53:ED:88:B8:7C:40:89:80
X509v3 Authority Key Identifier:
keyid:57:71:83:61:68:8D:16:2F:F8:02:3C:12:27:CD:64:4D:AE:39:A1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f3:1f:b9:95:b9:60:52:8f:c5:85:2c:95:8e:af:92:fc:b6:
93:3a:17:48:50:38:2f:05:0b:c6:8d:3a:cd:1b:44:f7:4b:b5:
fb:98:8b:4f:c1:82:12:22:9f:1e:e5:47:b2:f3:97:b0:b3:27:
f7:98:09:43:ee:28:c0:69:88:b3:5d:ba:f7:1a:f6:e5:d5:38:
7e:5c:61:c5:8a:b4:9a:56:1a:ca:23:69:98:47:8f:ae:9e:6a:
fd:71:b5:39:10:37:cf:89:55:bc:b3:ce:8a:9a:30:b0:7c:88:
11:35:90:96:6a:03:bd:1c:40:5f:06:01:56:d7:d5:0f:b3:65:
bb:70:bb:8f:c6:30:81:f2:a2:36:d8:34:50:7e:83:25:54:b0:
0b:ae:5f:71:7f:80:c7:1c:6a:46:de:ac:43:87:03:64:72:81:
ce:75:b8:85:33:e3:5a:23:b8:75:33:30:9f:94:07:25:4a:d0:
aa:ca:46:b9:52:19:a9:73:07:ea:59:0a:9f:2c:c7:20:47:70:
8a:5d:5e:a2:99:2b:ff:fc:ea:e7:39:ba:ba:aa:3d:91:0d:ef:
e2:8f:82:4c:93:d9:a1:20:32:1e:fb:43:3d:be:71:96:ba:95:
9a:50:e2:01:57:c7:b8:b7:81:43:8d:83:e9:43:dc:f8:06:d4:
0f:16:b4:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoZvRPl/nb7zTjKG27tefOoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NzE4MzYxNjg4ZDE2MmZmODAyM2MxMjI3Y2Q2NDRkYWUz
OWExYzAwHhcNMjUxMDI1MDUwMDEzWhcNMjUxMDI2MDUwMDEzWjAzMTEwLwYDVQQD
Eyg5NDdkYzE0MWY5ZGI0MTAzMThjYTE2NWQ1M2VkODhiODdjNDA4OTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hu757/9nWv/yj9z9Rz0v88EQOtz
kf6XjN23H/kGgcbK1r0/6wyZhcRGEE3nMwvZJA084qlEQYeHmERnNBV7+tgNlqzW
bq8y5pQIui7qBXmEkYvtG5jLdBveENJD7nWebWjRQhJ1dvyLyyvb7igndKp6BHD3
z+r/czGuZ/uGpGCkiHpgeF+3Ii2Jd/La63Dyg0Hg02sFI34WwU5C9misZwCE8gbL
t01ntZIca4wtuScIsQDuHQRB9y6323+vRC7XrKOv/nw6D8L2VHUUIpQkXhVn+cfT
d1ZeI4foUHPAcAvmQvnJebryXb89s2pSQnxaGL1WjnbMuB9uVqYvAcH/swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJR9wUH520EDGMoWXVPtiLh8QImAMB8GA1UdIwQY
MBaAFFdxg2FojRYv+AI8EifNZE2uOaHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjNHRFlXaU5GaV80QWp3U0o4MWtUYTQ1b2NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hNTU0ZDMtNDIzMi00OGZjLWI4ODMt
YjNiNWNhYWY1ZWE2LzEvVjNHRFlXaU5GaV80QWp3U0o4MWtUYTQ1b2NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9hNTU0ZDMtNDIzMi00OGZjLWI4ODMtYjNiNWNhYWY1ZWE2
LzEvVjNHRFlXaU5GaV80QWp3U0o4MWtUYTQ1b2NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfMfuZW5
YFKPxYUslY6vkvy2kzoXSFA4LwULxo06zRtE90u1+5iLT8GCEiKfHuVHsvOXsLMn
95gJQ+4owGmIs1269xr25dU4flxhxYq0mlYayiNpmEePrp5q/XG1ORA3z4lVvLPO
ipowsHyIETWQlmoDvRxAXwYBVtfVD7Nlu3C7j8YwgfKiNtg0UH6DJVSwC65fcX+A
xxxqRt6sQ4cDZHKBznW4hTPjWiO4dTMwn5QHJUrQqspGuVIZqXMH6lkKnyzHIEdw
il1eopkr//zq5zm6uqo9kQ3v4o+CTJPZoSAyHvtDPb5xlrqVmlDiAVfHuLeBQ42D
6UPc+AbUDxa0qQ==
-----END CERTIFICATE-----
Generated at Sat Oct 25 13:35:33 2025 by rpki-client