Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
File: Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft (raw, json)
Hash identifier: TPNO8gGvRQUwMFjl0Y5/I7eZVDeV9dBbpzmZywwv3LM=
Subject key identifier: 80:8E:4C:47:81:6C:EA:80:6A:C1:16:70:72:07:67:E9:85:CB:7A:F7
Authority key identifier: 56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E
Certificate issuer: /CN=561c7ccc52376787374092eafac2623e0571a81e
Certificate serial: 019A0C02079A44F8C6F26FE0938A7DAA1655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
Manifest number: 11D3
Signing time: Wed 22 Oct 2025 13:00:50 +0000
Manifest this update: Wed 22 Oct 2025 13:00:50 +0000
Manifest next update: Thu 23 Oct 2025 13:00:50 +0000
Files and hashes: 1: HGBJjgjbxKOwS-tzE8qO9Sb0DTk.roa (hash: IycrXxPRq8sHYUqWekjaODjaqQ8VZx13yD5H8Pnu6n8=)
2: Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl (hash: RDN8K8IkOSGUpThZe1wHf0M1/2dcpBKR0DOQVVG/Y+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:02:07:9a:44:f8:c6:f2:6f:e0:93:8a:7d:aa:16:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=561c7ccc52376787374092eafac2623e0571a81e
Validity
Not Before: Oct 22 13:00:50 2025 GMT
Not After : Oct 23 13:00:50 2025 GMT
Subject: CN=808e4c47816cea806ac11670720767e985cb7af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:df:c8:15:b6:ab:92:21:2e:d2:05:15:53:07:
de:df:19:b6:b0:ef:0b:58:3d:34:07:61:1e:0e:64:
96:6f:8d:0d:4b:15:8d:ff:06:bb:43:a4:d8:72:e2:
db:6c:44:44:06:6a:e8:65:cb:5d:22:61:c4:a3:68:
8e:ff:96:ec:eb:f8:6c:26:08:1b:36:5e:14:e8:85:
ab:b5:41:de:3f:90:fa:42:70:75:26:ea:0a:dc:f8:
48:fb:89:d2:db:4c:a3:3e:b5:cd:4d:12:46:2c:e4:
87:d0:cd:4d:19:52:fb:0a:1d:fc:1f:bc:2a:7f:9f:
8d:e0:28:31:bd:b3:c0:95:db:c0:2e:01:7d:20:82:
d7:a1:a2:48:11:70:11:cf:89:83:2b:48:ba:14:e0:
fa:0a:1e:12:65:f9:f8:e5:9c:53:66:77:94:15:15:
ed:67:92:e5:a6:ed:fc:ca:bf:a7:65:fc:2e:bb:6b:
06:73:34:a9:65:27:67:ae:f8:f9:43:5b:60:29:51:
13:9c:36:78:c8:1d:e3:b5:13:4e:a2:3a:2d:3d:9c:
52:36:d7:1d:e0:b0:82:ed:f8:45:cb:6f:b2:66:69:
7c:ce:0b:67:75:bf:11:71:0a:02:14:bd:e7:47:64:
e2:9f:2f:f5:3c:32:0d:1d:d2:30:30:f6:1f:37:49:
4f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8E:4C:47:81:6C:EA:80:6A:C1:16:70:72:07:67:E9:85:CB:7A:F7
X509v3 Authority Key Identifier:
keyid:56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:49:c2:c5:59:f8:a5:5b:2c:e5:68:c9:18:a4:4f:b2:7b:9c:
71:be:5e:53:7c:3f:87:fb:54:9c:d9:c5:23:13:c4:ce:3f:e9:
cd:96:b3:0c:26:d7:b7:2e:1c:62:22:58:ea:74:91:11:b7:c0:
7c:82:f3:f2:b0:43:b5:1d:65:a6:c7:e0:b4:b4:ef:a1:06:30:
d3:c1:39:9e:02:2e:41:fa:59:bb:0e:6a:b7:85:51:24:6e:a1:
93:e8:0e:e6:9c:54:a8:1b:52:b9:d6:d2:51:b5:22:dc:99:1c:
9b:9f:3b:21:40:d9:f0:89:1f:55:a7:d8:b7:82:28:35:cc:11:
0c:20:fe:d6:e0:b2:84:cd:60:7a:35:3c:16:12:9b:fa:30:85:
db:37:9f:68:14:c3:b8:bc:29:74:96:0b:93:f5:14:a5:39:9f:
83:ba:98:ef:5d:f1:e7:d2:69:5a:5b:7e:10:ba:19:3a:5a:ca:
46:d2:f1:a1:ab:a7:f9:5c:23:15:82:c3:81:5e:ff:6f:a7:9b:
ba:b0:27:81:57:56:20:57:d0:a2:26:09:32:6c:01:e8:76:1b:
1c:4f:96:31:a2:d3:b8:3b:11:ad:1b:9c:4e:5f:86:30:3b:3b:
b8:bd:2a:c5:73:96:69:42:3a:bc:55:5b:6e:7c:a2:bc:63:92:
6e:2c:4d:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoMAgeaRPjG8m/gk4p9qhZVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2MWM3Y2NjNTIzNzY3ODczNzQwOTJlYWZhYzI2MjNlMDU3
MWE4MWUwHhcNMjUxMDIyMTMwMDUwWhcNMjUxMDIzMTMwMDUwWjAzMTEwLwYDVQQD
Eyg4MDhlNGM0NzgxNmNlYTgwNmFjMTE2NzA3MjA3NjdlOTg1Y2I3YWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4N/IFbarkiEu0gUVUwfe3xm2sO8L
WD00B2EeDmSWb40NSxWN/wa7Q6TYcuLbbEREBmroZctdImHEo2iO/5bs6/hsJggb
Nl4U6IWrtUHeP5D6QnB1JuoK3PhI+4nS20yjPrXNTRJGLOSH0M1NGVL7Ch38H7wq
f5+N4CgxvbPAldvALgF9IILXoaJIEXARz4mDK0i6FOD6Ch4SZfn45ZxTZneUFRXt
Z5Llpu38yr+nZfwuu2sGczSpZSdnrvj5Q1tgKVETnDZ4yB3jtRNOojotPZxSNtcd
4LCC7fhFy2+yZml8zgtndb8RcQoCFL3nR2Tiny/1PDINHdIwMPYfN0lP5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICOTEeBbOqAasEWcHIHZ+mFy3r3MB8GA1UdIwQY
MBaAFFYcfMxSN2eHN0CS6vrCYj4FcageMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmh4OHpGSTNaNGMzUUpMcS1zSmlQZ1Z4cUI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kY2EyNTctZDE2My00ZWQ5LTk0YWQt
YzE3MDA5MTI4M2ViLzEvVmh4OHpGSTNaNGMzUUpMcS1zSmlQZ1Z4cUI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kY2EyNTctZDE2My00ZWQ5LTk0YWQtYzE3MDA5MTI4M2Vi
LzEvVmh4OHpGSTNaNGMzUUpMcS1zSmlQZ1Z4cUI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEnCxVn4
pVss5WjJGKRPsnuccb5eU3w/h/tUnNnFIxPEzj/pzZazDCbXty4cYiJY6nSREbfA
fILz8rBDtR1lpsfgtLTvoQYw08E5ngIuQfpZuw5qt4VRJG6hk+gO5pxUqBtSudbS
UbUi3Jkcm587IUDZ8IkfVafYt4IoNcwRDCD+1uCyhM1gejU8FhKb+jCF2zefaBTD
uLwpdJYLk/UUpTmfg7qY713x59JpWlt+ELoZOlrKRtLxoaun+VwjFYLDgV7/b6eb
urAngVdWIFfQoiYJMmwB6HYbHE+WMaLTuDsRrRucTl+GMDs7uL0qxXOWaUI6vFVb
bnyivGOSbixNKA==
-----END CERTIFICATE-----
Generated at Wed Oct 22 20:08:59 2025 by rpki-client