Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft
File: VggFtzAYcRab0JuIZWnR9p3Bm1c.mft (raw, json)
Hash identifier: pW9pOkqTrV2n+YSB+2CxmNJMT+a3AuwFVK0BXsrON+s=
Subject key identifier: 74:B2:E1:C2:38:A4:4A:CB:11:71:58:EA:DD:2C:3B:B7:4D:DF:C4:E1
Authority key identifier: 56:08:05:B7:30:18:71:16:9B:D0:9B:88:65:69:D1:F6:9D:C1:9B:57
Certificate issuer: /CN=560805b7301871169bd09b886569d1f69dc19b57
Certificate serial: 019A72263FF11B6EEF07049EDB5D44B0C749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:01:40 +0000
Manifest this update: Tue 11 Nov 2025 09:01:40 +0000
Manifest next update: Wed 12 Nov 2025 09:01:40 +0000
Files and hashes: 1: VggFtzAYcRab0JuIZWnR9p3Bm1c.crl (hash: iPueUhE1DiNt3LcJrXv1wDc40PxygdpyKMCpFyUYnjc=)
2: yXXR2fzrFaQnF3NWV4_d0yBPIgU.roa (hash: nTOlg6X5m06JtLL56eIgSs3eGUVRFrI3X2RQbngIypQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:3f:f1:1b:6e:ef:07:04:9e:db:5d:44:b0:c7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560805b7301871169bd09b886569d1f69dc19b57
Validity
Not Before: Nov 11 09:01:40 2025 GMT
Not After : Nov 12 09:01:40 2025 GMT
Subject: CN=74b2e1c238a44acb117158eadd2c3bb74ddfc4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:44:8c:f9:4d:6e:92:ff:31:78:73:02:68:09:
c5:9e:f7:76:49:78:cc:46:9f:9c:76:bf:25:bc:9b:
1d:ca:a7:80:7c:fc:33:a3:16:b4:10:1d:e6:5c:e8:
09:00:97:2b:1f:b8:b6:7e:c9:89:25:c3:13:59:64:
56:47:cb:7b:b4:2c:e5:33:1b:38:ab:b2:fd:2a:4b:
3d:9f:99:15:3a:d5:0b:68:00:0c:e5:b7:46:cc:69:
f5:8b:49:d0:54:84:52:33:67:b1:24:c6:21:86:f5:
c1:ad:83:0d:53:fc:cd:6e:83:d9:a3:6c:99:bf:d2:
f8:82:60:eb:31:5a:61:25:03:96:0b:6a:e9:d9:d7:
08:a0:ec:85:14:62:75:15:e0:e6:79:59:a3:fd:ce:
4f:24:f7:f3:d0:f2:d3:34:02:46:92:ce:5e:18:72:
f8:b2:33:37:c3:0b:05:46:6f:e0:60:7e:d8:0d:8b:
a3:03:1c:cd:4a:c1:d8:a1:9a:55:6e:d3:02:0e:16:
97:55:37:2b:fd:d9:8c:0e:51:a0:23:3e:4a:83:50:
ef:b2:e4:8a:59:53:dc:ce:a9:ed:df:b3:00:4e:ac:
e5:1e:b0:90:5f:d2:5b:a8:14:bc:2e:a8:39:f1:de:
6a:d7:73:16:2e:65:ee:7c:a7:2a:32:d0:98:b7:c9:
08:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B2:E1:C2:38:A4:4A:CB:11:71:58:EA:DD:2C:3B:B7:4D:DF:C4:E1
X509v3 Authority Key Identifier:
keyid:56:08:05:B7:30:18:71:16:9B:D0:9B:88:65:69:D1:F6:9D:C1:9B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5b:43:e4:31:fa:98:c8:51:4e:6f:2c:41:3e:e7:00:9d:ea:
01:89:f9:77:12:2b:7a:89:f4:55:eb:43:90:ca:1c:08:cc:b4:
8b:24:62:86:66:d0:c9:a9:ea:9d:ab:92:4c:84:35:81:9a:9a:
09:f2:59:8c:4e:93:7f:61:ef:d8:83:7c:79:76:66:4d:30:eb:
cb:70:47:e0:4e:7c:5c:67:57:ab:bb:29:08:d7:e2:73:f8:fd:
ab:5b:81:48:fe:fa:8f:f0:7e:e1:79:35:dc:02:01:1a:7d:e6:
78:ad:f8:e8:66:2f:cc:71:fc:b9:f2:dd:bf:ac:e9:ac:a9:b3:
ba:bd:3a:cc:de:e5:b8:d7:6a:aa:4a:bc:d6:1f:a9:85:4c:68:
b3:da:c8:ad:e7:fe:c0:ef:ea:0f:e7:d1:f4:23:79:b9:08:9d:
e1:3d:12:ca:83:db:58:e2:f5:5b:9d:5e:41:87:0c:20:cb:0c:
83:f9:8f:c0:4e:4c:d2:b2:14:3a:cc:cc:d7:67:33:67:fb:e3:
52:b9:7b:b2:08:09:81:87:63:93:e0:a5:b3:a0:84:d6:53:15:
60:48:c5:32:85:1c:05:51:e1:37:8e:a6:dd:75:34:5c:fb:28:
60:1d:50:1c:eb:5c:2a:68:0f:e1:a9:46:07:23:80:66:7c:1a:
b6:b2:2c:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJj/xG27vBwSe211EsMdJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2MDgwNWI3MzAxODcxMTY5YmQwOWI4ODY1NjlkMWY2OWRj
MTliNTcwHhcNMjUxMTExMDkwMTQwWhcNMjUxMTEyMDkwMTQwWjAzMTEwLwYDVQQD
Eyg3NGIyZTFjMjM4YTQ0YWNiMTE3MTU4ZWFkZDJjM2JiNzRkZGZjNGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjESM+U1ukv8xeHMCaAnFnvd2SXjM
Rp+cdr8lvJsdyqeAfPwzoxa0EB3mXOgJAJcrH7i2fsmJJcMTWWRWR8t7tCzlMxs4
q7L9Kks9n5kVOtULaAAM5bdGzGn1i0nQVIRSM2exJMYhhvXBrYMNU/zNboPZo2yZ
v9L4gmDrMVphJQOWC2rp2dcIoOyFFGJ1FeDmeVmj/c5PJPfz0PLTNAJGks5eGHL4
sjM3wwsFRm/gYH7YDYujAxzNSsHYoZpVbtMCDhaXVTcr/dmMDlGgIz5Kg1DvsuSK
WVPczqnt37MATqzlHrCQX9JbqBS8Lqg58d5q13MWLmXufKcqMtCYt8kIpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSy4cI4pErLEXFY6t0sO7dN38ThMB8GA1UdIwQY
MBaAFFYIBbcwGHEWm9CbiGVp0fadwZtXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmdnRnR6QVljUmFiMEp1SVpXblI5cDNCbTFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC83Y2NkMmMtMmMwNS00NTNhLWI3YmUt
MDhkYTQyMGYyOGM4LzEvVmdnRnR6QVljUmFiMEp1SVpXblI5cDNCbTFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC83Y2NkMmMtMmMwNS00NTNhLWI3YmUtMDhkYTQyMGYyOGM4
LzEvVmdnRnR6QVljUmFiMEp1SVpXblI5cDNCbTFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFtD5DH6
mMhRTm8sQT7nAJ3qAYn5dxIreon0VetDkMocCMy0iyRihmbQyanqnauSTIQ1gZqa
CfJZjE6Tf2Hv2IN8eXZmTTDry3BH4E58XGdXq7spCNfic/j9q1uBSP76j/B+4Xk1
3AIBGn3meK346GYvzHH8ufLdv6zprKmzur06zN7luNdqqkq81h+phUxos9rIref+
wO/qD+fR9CN5uQid4T0SyoPbWOL1W51eQYcMIMsMg/mPwE5M0rIUOszM12czZ/vj
Url7sggJgYdjk+Cls6CE1lMVYEjFMoUcBVHhN46m3XU0XPsoYB1QHOtcKmgP4alG
ByOAZnwatrIsyQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:55 2025 by rpki-client