Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
File: VHFLUoQ1EPnzrDC4GbYQ15a338E.mft (raw, json)
Hash identifier: M5DvWE9+DGw6tB3KiAG9MlJlwm4gs4lD78eEQGBIaYg=
Subject key identifier: 3D:00:00:4B:DA:16:C5:E3:19:15:05:BB:71:78:55:A8:C3:35:F3:BC
Authority key identifier: 54:71:4B:52:84:35:10:F9:F3:AC:30:B8:19:B6:10:D7:96:B7:DF:C1
Certificate issuer: /CN=54714b52843510f9f3ac30b819b610d796b7dfc1
Certificate serial: 019A718083F99C11FFE36A02C2A9138BE289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
Manifest number: 12B9
Signing time: Tue 11 Nov 2025 06:00:39 +0000
Manifest this update: Tue 11 Nov 2025 06:00:39 +0000
Manifest next update: Wed 12 Nov 2025 06:00:39 +0000
Files and hashes: 1: VHFLUoQ1EPnzrDC4GbYQ15a338E.crl (hash: WQODpgdc0aO5mCeYenGXQ25QzVE1k+uqvTi/6Vzc7us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:83:f9:9c:11:ff:e3:6a:02:c2:a9:13:8b:e2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54714b52843510f9f3ac30b819b610d796b7dfc1
Validity
Not Before: Nov 11 06:00:39 2025 GMT
Not After : Nov 12 06:00:39 2025 GMT
Subject: CN=3d00004bda16c5e3191505bb717855a8c335f3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:10:49:5d:9d:1d:32:9a:cf:a9:0d:4c:7c:
e9:67:40:f1:ec:00:48:08:31:92:7e:52:4b:b2:70:
59:3c:f5:bd:68:c5:cb:db:d7:f7:5a:d5:1f:11:cd:
a1:df:aa:c6:94:76:3b:d7:28:c6:16:ab:9f:68:a2:
cd:c9:ea:64:7e:8b:42:4e:c5:79:2b:82:e7:c3:bb:
e0:5f:04:85:52:69:e2:4c:96:7b:7a:c5:e2:36:9e:
d9:7b:12:f8:6e:e6:cf:c5:3f:26:b7:43:30:54:fd:
75:cb:0d:f5:8b:12:6d:70:93:d5:cc:16:5f:6c:ac:
1f:d1:2f:95:37:04:8c:00:9e:6e:08:f3:9d:1e:ce:
d8:33:60:56:44:ee:3b:9a:37:b4:6b:61:8c:2b:cc:
9b:b4:08:00:bd:47:af:39:3e:bc:7e:a0:03:3b:78:
a6:cf:d0:0b:9b:a5:1f:66:58:cc:0f:c7:c6:4d:b4:
b7:59:fa:6a:d9:a9:5f:ff:44:6b:1c:7f:24:09:cc:
83:56:62:36:be:dc:6c:00:bb:6a:66:3d:8e:2a:9a:
8c:44:10:2a:e1:42:53:4e:f1:dc:0d:66:22:0d:e8:
71:5c:7e:38:7d:fa:ba:38:31:9a:43:cf:59:32:c5:
fc:c5:aa:6e:9c:3a:43:20:5c:8e:4e:1c:dc:b4:e3:
02:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:00:00:4B:DA:16:C5:E3:19:15:05:BB:71:78:55:A8:C3:35:F3:BC
X509v3 Authority Key Identifier:
keyid:54:71:4B:52:84:35:10:F9:F3:AC:30:B8:19:B6:10:D7:96:B7:DF:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8d:7f:5a:f5:e3:d0:b9:5a:76:fb:62:33:23:a2:ae:8d:ed:
f6:cb:00:7a:a4:79:00:07:9c:9e:2c:d9:ff:9c:c5:30:25:8a:
6b:38:06:73:11:8b:7f:54:28:e5:0a:7b:1f:66:4e:bd:94:35:
84:13:3b:28:af:42:ee:0c:f5:be:33:cb:12:8f:a5:6f:44:d5:
fb:a3:11:8a:1e:ec:9b:40:43:4a:13:a9:4f:f3:65:9b:34:b1:
95:2f:af:3c:b0:21:54:91:57:63:e2:ff:04:99:2c:31:43:76:
87:85:6a:87:2e:dc:db:b8:3c:99:a5:11:64:fe:da:b1:87:ac:
a8:6f:65:e4:e4:4c:27:6f:b0:b1:7e:9a:4b:09:e6:d1:e7:d0:
56:9b:ab:6f:fb:4c:97:bc:42:4c:fe:d9:3f:88:97:45:d8:57:
fc:3d:62:57:61:54:db:03:b1:ff:09:76:68:a3:f6:84:d8:0c:
e5:be:b7:c4:b7:54:2c:6a:87:44:62:66:ec:ac:3e:ef:6e:17:
63:e4:ad:a1:f2:46:24:3c:3b:c3:79:9e:8f:98:61:4d:75:b2:
91:0f:7a:b2:c9:0b:82:a8:c7:98:7f:55:1d:a4:f4:41:97:9b:
31:48:c2:9a:d0:34:74:cb:61:b6:c7:b6:4e:34:ed:35:d5:d5:
40:e7:d2:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxgIP5nBH/42oCwqkTi+KJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NzE0YjUyODQzNTEwZjlmM2FjMzBiODE5YjYxMGQ3OTZi
N2RmYzEwHhcNMjUxMTExMDYwMDM5WhcNMjUxMTEyMDYwMDM5WjAzMTEwLwYDVQQD
EygzZDAwMDA0YmRhMTZjNWUzMTkxNTA1YmI3MTc4NTVhOGMzMzVmM2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbMQSV2dHTKaz6kNTHzpZ0Dx7ABI
CDGSflJLsnBZPPW9aMXL29f3WtUfEc2h36rGlHY71yjGFqufaKLNyepkfotCTsV5
K4Lnw7vgXwSFUmniTJZ7esXiNp7ZexL4bubPxT8mt0MwVP11yw31ixJtcJPVzBZf
bKwf0S+VNwSMAJ5uCPOdHs7YM2BWRO47mje0a2GMK8ybtAgAvUevOT68fqADO3im
z9ALm6UfZljMD8fGTbS3Wfpq2alf/0RrHH8kCcyDVmI2vtxsALtqZj2OKpqMRBAq
4UJTTvHcDWYiDehxXH44ffq6ODGaQ89ZMsX8xapunDpDIFyOThzctOMCCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0AAEvaFsXjGRUFu3F4VajDNfO8MB8GA1UdIwQY
MBaAFFRxS1KENRD586wwuBm2ENeWt9/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhGTFVvUTFFUG56ckRDNEdiWVExNWEzMzhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jYmYwMzYtMTk4MC00NmIzLWI3ZjYt
MjZjYWVjM2M0ODRhLzEvVkhGTFVvUTFFUG56ckRDNEdiWVExNWEzMzhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9jYmYwMzYtMTk4MC00NmIzLWI3ZjYtMjZjYWVjM2M0ODRh
LzEvVkhGTFVvUTFFUG56ckRDNEdiWVExNWEzMzhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj41/WvXj
0LladvtiMyOiro3t9ssAeqR5AAecnizZ/5zFMCWKazgGcxGLf1Qo5Qp7H2ZOvZQ1
hBM7KK9C7gz1vjPLEo+lb0TV+6MRih7sm0BDShOpT/NlmzSxlS+vPLAhVJFXY+L/
BJksMUN2h4Vqhy7c27g8maURZP7asYesqG9l5ORMJ2+wsX6aSwnm0efQVpurb/tM
l7xCTP7ZP4iXRdhX/D1iV2FU2wOx/wl2aKP2hNgM5b63xLdULGqHRGJm7Kw+724X
Y+StofJGJDw7w3mej5hhTXWykQ96sskLgqjHmH9VHaT0QZebMUjCmtA0dMthtse2
TjTtNdXVQOfSSw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:54 2025 by rpki-client