Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
File: VEBNpgLasGJb5yI9CTILHNeq_O0.mft (raw, json)
Hash identifier: q4wt/QbBbDpWReMpdNRto/ikE4Z8k/v0gEXYPjiR5xo=
Subject key identifier: BB:76:D0:FF:01:08:01:A3:D5:28:2C:1D:1C:21:A6:EF:B7:4E:57:D3
Authority key identifier: 54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
Certificate issuer: /CN=54404da602dab0625be7223d09320b1cd7aafced
Certificate serial: 019A70DC59CFCF7EE2B7E58E17F184DA3856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 03:01:20 +0000
Manifest this update: Tue 11 Nov 2025 03:01:20 +0000
Manifest next update: Wed 12 Nov 2025 03:01:20 +0000
Files and hashes: 1: VEBNpgLasGJb5yI9CTILHNeq_O0.crl (hash: TSHxl7d1f6965XO2TgE4PhhmY8gn7K1pioWvRiZJp78=)
2: alBKH0o_4kzhleiX69soFknJKkc.roa (hash: 0xl3ZFg/7Sno8/QF5nbiqzzuYWBqhpcMDwGXyIlAUiw=)
3: kVbSHrAHHzDssRXONUlwJ1GWoHU.roa (hash: mu0OOdtXupXjhLysliKeG+XZYEBhpCYVNN9APqeB6iQ=)
4: zPr7HrZQ0fX72obaVzae4hA6SNc.roa (hash: vjUhNFOtlaK42JGVIDi0wjlCpnam1o78sbpNvjcx8Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:59:cf:cf:7e:e2:b7:e5:8e:17:f1:84:da:38:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54404da602dab0625be7223d09320b1cd7aafced
Validity
Not Before: Nov 11 03:01:20 2025 GMT
Not After : Nov 12 03:01:20 2025 GMT
Subject: CN=bb76d0ff010801a3d5282c1d1c21a6efb74e57d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:b0:a7:cc:18:ad:b8:c9:06:80:c1:ff:94:
c9:e4:3b:cf:ce:94:42:07:3d:04:49:4d:65:06:0d:
f2:ac:02:ba:27:8e:8d:9a:86:d7:90:e8:4c:64:06:
da:b9:d8:f6:9b:c6:ce:fe:80:98:ad:84:d6:0e:52:
27:42:ed:d6:8a:ba:13:df:63:54:af:9b:5b:05:2c:
7f:4f:04:be:c8:5b:7a:12:2c:66:97:62:da:ec:a4:
47:bd:b1:2f:68:46:04:46:51:9f:34:d4:2c:ef:15:
91:4f:d1:e6:5b:b9:10:5c:11:e6:c9:59:9a:8b:f2:
c7:30:f2:ee:65:96:65:3c:39:40:11:80:7c:e8:06:
42:26:6f:1b:47:1a:8a:ab:ee:c7:dc:63:f6:f9:d3:
dc:b8:dc:9f:34:f9:d9:ed:52:fa:3d:86:de:ac:dd:
7b:28:69:e1:37:00:42:eb:08:6d:d6:c6:a0:2e:0b:
da:5d:27:70:10:ef:40:c9:47:00:d1:cc:a2:bf:dd:
ec:2f:93:9b:da:b8:8d:c5:95:43:a8:ef:9e:61:45:
83:35:97:14:19:60:9c:a8:1c:0e:9c:fa:30:54:2e:
2b:11:a1:24:c5:ae:f7:f7:52:f9:98:06:2b:0e:9f:
cf:5d:f1:e1:6f:5c:ef:5d:dd:f1:03:fe:9d:a9:cd:
5a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:76:D0:FF:01:08:01:A3:D5:28:2C:1D:1C:21:A6:EF:B7:4E:57:D3
X509v3 Authority Key Identifier:
keyid:54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ad:f8:83:b8:bb:59:69:70:18:e9:66:36:f1:5c:b1:2e:30:
19:4c:a5:12:00:f6:47:67:63:cb:4d:6f:e6:3a:c5:55:a5:cb:
10:bb:84:12:2a:84:8d:4b:db:e6:5e:6c:3d:34:5f:59:e9:22:
1e:41:f7:e3:56:ac:bf:18:2b:cc:8d:42:53:cc:31:c7:11:52:
05:d8:5e:92:f6:cc:ab:79:f5:2a:2b:b7:0c:db:3a:20:73:a3:
6b:49:28:33:50:34:6f:41:ee:a1:8f:db:2c:de:02:cd:86:70:
5a:ab:c1:ae:47:95:6e:2e:cb:91:7d:06:f4:6b:c0:8a:36:97:
f7:d1:72:00:7c:c7:44:5a:f7:fc:a8:01:3d:35:0f:00:5d:e7:
f0:9b:67:8c:49:6e:47:cd:9e:a0:2b:87:b8:a3:ad:b0:f0:ab:
ea:c4:83:ff:91:85:52:1e:22:11:f1:d9:2a:e8:d7:08:e8:4e:
49:6c:d7:8b:95:d2:8e:6c:c8:5c:a5:98:be:4a:84:87:7b:0e:
81:81:c6:00:ce:f3:86:ce:66:1c:41:74:3a:46:86:90:4a:20:
74:a6:33:f1:a5:6d:b6:f6:b8:63:73:78:72:5b:c9:04:31:80:
7d:fb:fd:e0:79:5c:be:c1:40:75:5e:09:d0:c2:47:e5:a8:8d:
45:e8:62:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3FnPz37it+WOF/GE2jhWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NDA0ZGE2MDJkYWIwNjI1YmU3MjIzZDA5MzIwYjFjZDdh
YWZjZWQwHhcNMjUxMTExMDMwMTIwWhcNMjUxMTEyMDMwMTIwWjAzMTEwLwYDVQQD
EyhiYjc2ZDBmZjAxMDgwMWEzZDUyODJjMWQxYzIxYTZlZmI3NGU1N2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKuwp8wYrbjJBoDB/5TJ5DvPzpRC
Bz0ESU1lBg3yrAK6J46NmobXkOhMZAbaudj2m8bO/oCYrYTWDlInQu3WiroT32NU
r5tbBSx/TwS+yFt6Eixml2La7KRHvbEvaEYERlGfNNQs7xWRT9HmW7kQXBHmyVma
i/LHMPLuZZZlPDlAEYB86AZCJm8bRxqKq+7H3GP2+dPcuNyfNPnZ7VL6PYberN17
KGnhNwBC6wht1sagLgvaXSdwEO9AyUcA0cyiv93sL5Ob2riNxZVDqO+eYUWDNZcU
GWCcqBwOnPowVC4rEaEkxa7391L5mAYrDp/PXfHhb1zvXd3xA/6dqc1aHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLt20P8BCAGj1SgsHRwhpu+3TlfTMB8GA1UdIwQY
MBaAFFRATaYC2rBiW+ciPQkyCxzXqvztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkVCTnBnTGFzR0piNXlJOUNUSUxITmVxX08wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83ZDJjYjUtYmRkZi00MjAxLWJhZjgt
MWIyNDQ4NGU1NWVjLzEvVkVCTnBnTGFzR0piNXlJOUNUSUxITmVxX08wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny83ZDJjYjUtYmRkZi00MjAxLWJhZjgtMWIyNDQ4NGU1NWVj
LzEvVkVCTnBnTGFzR0piNXlJOUNUSUxITmVxX08wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAga34g7i7
WWlwGOlmNvFcsS4wGUylEgD2R2djy01v5jrFVaXLELuEEiqEjUvb5l5sPTRfWeki
HkH341asvxgrzI1CU8wxxxFSBdhekvbMq3n1Kiu3DNs6IHOja0koM1A0b0HuoY/b
LN4CzYZwWqvBrkeVbi7LkX0G9GvAijaX99FyAHzHRFr3/KgBPTUPAF3n8JtnjElu
R82eoCuHuKOtsPCr6sSD/5GFUh4iEfHZKujXCOhOSWzXi5XSjmzIXKWYvkqEh3sO
gYHGAM7zhs5mHEF0OkaGkEogdKYz8aVttva4Y3N4clvJBDGAffv94HlcvsFAdV4J
0MJH5aiNRehi0g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:57 2025 by rpki-client