Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
File: VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft (raw, json)
Hash identifier: ZPbjhPmhVy2lRjFRta8rh4kxCHhHhWCSi/x0LdKvy2w=
Subject key identifier: 64:0C:66:12:43:3F:1E:01:87:18:5D:61:1E:36:91:9C:78:2A:35:58
Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Certificate serial: 019A72CA3F3BB292ED940395F3B3D9C28D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
Manifest number: 11FD
Signing time: Tue 11 Nov 2025 12:00:48 +0000
Manifest this update: Tue 11 Nov 2025 12:00:48 +0000
Manifest next update: Wed 12 Nov 2025 12:00:48 +0000
Files and hashes: 1: 8ywt7YsrRBMREchgHLgyKhwPgx4.roa (hash: aCuMcxrQC+7OXrTGuhaVav/hwtQSKlgeWzdcYZWQMpw=)
2: VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl (hash: /Crqvr33R8XgUBiMkWHicY2k0LmBmwLzdrbPCJyrm5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:3f:3b:b2:92:ed:94:03:95:f3:b3:d9:c2:8d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Validity
Not Before: Nov 11 12:00:48 2025 GMT
Not After : Nov 12 12:00:48 2025 GMT
Subject: CN=640c6612433f1e0187185d611e36919c782a3558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:cf:2f:41:0d:58:7d:93:53:14:3a:81:65:
db:df:6a:ac:bf:d9:20:16:82:9e:7d:45:7c:a1:a0:
51:56:36:a9:9d:88:0e:76:67:06:55:a9:ae:3b:9f:
7d:22:7a:05:97:57:ca:88:02:7f:b0:65:43:80:9f:
39:9c:a8:2f:5b:27:74:ea:29:a0:47:bf:04:f1:6f:
42:0f:37:e0:65:72:50:2d:0b:dd:95:d8:ed:90:6b:
e6:5f:af:a0:4e:df:1a:2e:b4:21:55:45:cb:58:9f:
86:75:20:57:2c:2a:ec:8a:fa:e2:17:19:27:ab:6e:
a7:7e:2f:26:66:e2:ee:35:a3:ee:cc:12:61:cc:34:
59:0f:7e:d7:66:92:0f:ee:29:0a:5e:42:d2:93:e5:
86:75:37:c2:c5:36:89:03:ed:71:97:ff:94:8f:73:
a5:db:9a:e6:c7:83:b7:7f:d2:23:23:e5:98:0d:22:
3d:99:43:61:67:ec:e0:70:04:ab:f6:16:0c:c5:3a:
b4:ab:b0:f8:1b:10:fb:d8:2b:1e:4a:81:06:6e:fa:
07:a2:80:4f:01:eb:05:69:ea:f8:f2:5e:97:63:ac:
d7:4a:07:8f:96:44:3c:ed:90:b3:0d:15:18:43:71:
6e:18:ab:ff:56:62:a6:a1:fd:ee:91:d4:38:63:f8:
ee:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0C:66:12:43:3F:1E:01:87:18:5D:61:1E:36:91:9C:78:2A:35:58
X509v3 Authority Key Identifier:
keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8d:e6:da:5d:18:e9:80:9a:59:93:75:a8:bc:6d:4a:36:f7:
79:5d:57:b4:b3:74:6e:63:78:6b:9c:77:51:f1:b7:99:31:a7:
42:3a:96:c0:d7:78:04:a1:92:3f:93:8f:da:66:b8:a5:24:7d:
51:74:53:5e:f1:af:ad:75:66:63:1a:5d:a8:a0:ce:20:a6:45:
ce:e5:9b:db:08:40:81:93:6b:24:72:fb:42:c5:d2:02:6d:63:
11:8a:4a:1f:ea:38:f0:96:fb:ca:3f:68:e8:d0:0a:b9:7a:0e:
2e:c3:f1:8c:3d:4f:1a:f1:6b:ac:e4:84:7f:00:68:ab:f6:b0:
af:99:3e:14:c9:d5:bb:e3:b4:af:ce:f0:81:cd:24:62:60:67:
d1:21:11:c2:a6:8d:d5:67:da:64:0d:9f:c9:db:4d:a8:60:61:
32:54:10:61:85:2c:b0:5e:45:72:0b:8f:37:52:c9:a8:68:00:
b4:8c:cf:b9:a9:03:14:4d:c1:b5:81:7c:2a:de:b1:30:a3:2f:
8a:f9:47:e9:f3:95:62:a1:f8:dc:1c:f2:ca:67:99:0d:b0:47:
d1:08:0e:47:23:d4:89:0e:55:63:1d:5c:4f:4c:c0:7b:78:74:
eb:05:02:9d:59:00:5b:9e:2c:d3:b8:c7:51:b2:59:63:f4:24:
0f:06:3b:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyj87spLtlAOV87PZwo08MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0M2UyMGJmNWYyNTJiMWJkYmQyMWRjOTlkOTRjZDk3ZWE3
ZjBmZTYwHhcNMjUxMTExMTIwMDQ4WhcNMjUxMTEyMTIwMDQ4WjAzMTEwLwYDVQQD
Eyg2NDBjNjYxMjQzM2YxZTAxODcxODVkNjExZTM2OTE5Yzc4MmEzNTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC7PL0ENWH2TUxQ6gWXb32qsv9kg
FoKefUV8oaBRVjapnYgOdmcGVamuO599InoFl1fKiAJ/sGVDgJ85nKgvWyd06img
R78E8W9CDzfgZXJQLQvdldjtkGvmX6+gTt8aLrQhVUXLWJ+GdSBXLCrsivriFxkn
q26nfi8mZuLuNaPuzBJhzDRZD37XZpIP7ikKXkLSk+WGdTfCxTaJA+1xl/+Uj3Ol
25rmx4O3f9IjI+WYDSI9mUNhZ+zgcASr9hYMxTq0q7D4GxD72CseSoEGbvoHooBP
AesFaer48l6XY6zXSgePlkQ87ZCzDRUYQ3FuGKv/VmKmof3ukdQ4Y/ju1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQMZhJDPx4BhxhdYR42kZx4KjVYMB8GA1UdIwQY
MBaAFFQ+IL9fJSsb29IdyZ2UzZfqfw/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZTg3YTYtNjUzNi00NTRhLWE1OWUt
ZDVhZDk5NmExYWM4LzEvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80ZTg3YTYtNjUzNi00NTRhLWE1OWUtZDVhZDk5NmExYWM4
LzEvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACo3m2l0Y
6YCaWZN1qLxtSjb3eV1XtLN0bmN4a5x3UfG3mTGnQjqWwNd4BKGSP5OP2ma4pSR9
UXRTXvGvrXVmYxpdqKDOIKZFzuWb2whAgZNrJHL7QsXSAm1jEYpKH+o48Jb7yj9o
6NAKuXoOLsPxjD1PGvFrrOSEfwBoq/awr5k+FMnVu+O0r87wgc0kYmBn0SERwqaN
1WfaZA2fydtNqGBhMlQQYYUssF5FcguPN1LJqGgAtIzPuakDFE3BtYF8Kt6xMKMv
ivlH6fOVYqH43BzyymeZDbBH0QgORyPUiQ5VYx1cT0zAe3h06wUCnVkAW54s07jH
UbJZY/QkDwY7fg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:56 2025 by rpki-client