Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
File: VWyanGGYCpC10MUfhtfLrJ_xQto.mft (raw, json)
Hash identifier: Q98w3+Z5wRXUl0INmfB4Zseh3Q9Bpl015RHU6wiU7fY=
Subject key identifier: 67:2A:E0:C8:06:B6:FC:90:97:46:F3:8B:00:34:90:57:FF:37:58:82
Authority key identifier: 55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA
Certificate issuer: /CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da
Certificate serial: 019A7293EBE8014C6D63A2252198B407F59D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 11:01:28 +0000
Manifest this update: Tue 11 Nov 2025 11:01:28 +0000
Manifest next update: Wed 12 Nov 2025 11:01:28 +0000
Files and hashes: 1: VWyanGGYCpC10MUfhtfLrJ_xQto.crl (hash: mlXN/UUSCa33uJ58kmpbkFrBvEE3U7eklbifTbx3lY4=)
2: haz-HdaagkevUDJWOKHcKbMpfs4.roa (hash: 4MYVAihmuy2VBnQslitsGPSQAlGwL1bJXLz/oBhLSUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:eb:e8:01:4c:6d:63:a2:25:21:98:b4:07:f5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da
Validity
Not Before: Nov 11 11:01:28 2025 GMT
Not After : Nov 12 11:01:28 2025 GMT
Subject: CN=672ae0c806b6fc909746f38b00349057ff375882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:80:d7:c0:0e:ef:17:19:c4:5a:e9:f1:cf:f9:
24:ec:0a:6c:aa:93:fa:86:5b:23:f4:96:8b:5a:1f:
a4:12:dc:0d:e2:52:49:30:4a:06:90:35:a9:8b:58:
19:04:0b:37:7e:d8:d0:7a:07:9b:51:b9:9d:13:9c:
19:fc:d2:cc:64:f9:98:71:7f:af:34:da:78:c5:8a:
4b:9d:9b:70:2f:eb:2d:bc:4c:f4:22:56:d0:82:a3:
6f:f2:97:63:5c:bc:f9:d8:33:8b:0a:8d:6b:9e:3b:
92:a7:00:dc:c2:53:f2:33:e5:63:51:13:80:68:f5:
7f:a3:11:77:5b:32:78:ae:2b:eb:b8:27:ee:8f:b2:
87:a3:2e:d0:00:22:18:18:c8:6a:08:4d:84:7a:e1:
2c:ad:a5:cc:47:20:11:5d:9d:3f:5d:84:6e:01:eb:
ba:4d:8e:3d:c9:78:93:12:40:c1:a1:89:2d:f1:02:
a6:8d:67:6d:c0:b4:a8:1b:0e:44:9b:43:f7:7b:dd:
3a:78:7a:c0:a4:9c:d3:96:88:c0:c8:d2:8e:03:7e:
88:93:05:e1:7c:d7:09:53:90:bc:55:11:97:20:53:
7f:f7:dc:fa:84:7a:a7:46:e0:89:2a:f3:e1:3e:ea:
6a:32:29:ed:2b:48:07:cd:cd:e2:a4:d1:54:be:3a:
1a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2A:E0:C8:06:B6:FC:90:97:46:F3:8B:00:34:90:57:FF:37:58:82
X509v3 Authority Key Identifier:
keyid:55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:41:13:7f:ab:ca:35:6f:4e:48:3b:84:57:87:2d:a5:6b:14:
7b:1e:8b:19:b3:4d:ee:4a:39:8a:19:7a:f1:c9:71:d3:e6:a2:
c0:fc:60:b0:bc:3b:94:a7:3c:75:09:e9:2d:bc:6b:6b:db:1d:
d5:9c:cd:1f:95:a4:3f:8a:94:a9:da:04:3c:aa:60:32:8b:9c:
20:c3:32:f6:8b:67:2c:7f:71:f6:bf:f8:ee:0d:46:aa:cf:4f:
4f:e1:fc:3a:59:f4:ec:cc:1b:63:4f:7b:78:8d:21:46:8d:a5:
bb:4e:e1:71:63:d4:a6:23:8f:5f:b2:f2:18:7a:9a:81:fd:85:
a5:d2:46:f2:53:3b:a7:69:8e:6b:8e:55:d5:93:84:56:d1:e5:
ce:d7:1e:b0:61:42:16:af:2f:b9:b4:84:46:27:a2:e9:6c:ac:
e4:3e:f0:eb:1c:6d:78:93:c2:22:d4:09:87:e5:4a:33:5f:f2:
8a:0b:09:43:21:f4:7a:7d:2a:77:52:26:cd:8d:fc:cf:6e:9a:
80:fc:20:55:f9:da:42:47:ae:b6:b0:e0:f5:fc:74:4b:15:1a:
90:b6:60:c5:16:81:72:81:ed:03:2a:2a:c7:e0:46:f5:d9:e0:
93:f4:be:a8:19:b8:31:b8:ae:a2:60:24:76:4d:08:6a:00:69:
c9:e7:bf:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk+voAUxtY6IlIZi0B/WdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NmM5YTljNjE5ODBhOTBiNWQwYzUxZjg2ZDdjYmFjOWZm
MTQyZGEwHhcNMjUxMTExMTEwMTI4WhcNMjUxMTEyMTEwMTI4WjAzMTEwLwYDVQQD
Eyg2NzJhZTBjODA2YjZmYzkwOTc0NmYzOGIwMDM0OTA1N2ZmMzc1ODgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYDXwA7vFxnEWunxz/kk7ApsqpP6
hlsj9JaLWh+kEtwN4lJJMEoGkDWpi1gZBAs3ftjQegebUbmdE5wZ/NLMZPmYcX+v
NNp4xYpLnZtwL+stvEz0IlbQgqNv8pdjXLz52DOLCo1rnjuSpwDcwlPyM+VjUROA
aPV/oxF3WzJ4rivruCfuj7KHoy7QACIYGMhqCE2EeuEsraXMRyARXZ0/XYRuAeu6
TY49yXiTEkDBoYkt8QKmjWdtwLSoGw5Em0P3e906eHrApJzTlojAyNKOA36IkwXh
fNcJU5C8VRGXIFN/99z6hHqnRuCJKvPhPupqMintK0gHzc3ipNFUvjoaxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcq4MgGtvyQl0bziwA0kFf/N1iCMB8GA1UdIwQY
MBaAFFVsmpxhmAqQtdDFH4bXy6yf8ULaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVld5YW5HR1lDcEMxME1VZmh0ZkxySl94UXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yNWE3NDctODQyNi00MzBhLTllMzAt
NDViMzQ0M2E3NmY5LzEvVld5YW5HR1lDcEMxME1VZmh0ZkxySl94UXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yNWE3NDctODQyNi00MzBhLTllMzAtNDViMzQ0M2E3NmY5
LzEvVld5YW5HR1lDcEMxME1VZmh0ZkxySl94UXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwEETf6vK
NW9OSDuEV4ctpWsUex6LGbNN7ko5ihl68clx0+aiwPxgsLw7lKc8dQnpLbxra9sd
1ZzNH5WkP4qUqdoEPKpgMoucIMMy9otnLH9x9r/47g1Gqs9PT+H8Oln07MwbY097
eI0hRo2lu07hcWPUpiOPX7LyGHqagf2FpdJG8lM7p2mOa45V1ZOEVtHlztcesGFC
Fq8vubSERiei6Wys5D7w6xxteJPCItQJh+VKM1/yigsJQyH0en0qd1ImzY38z26a
gPwgVfnaQkeutrDg9fx0SxUakLZgxRaBcoHtAyoqx+BG9dngk/S+qBm4MbiuomAk
dk0IagBpyee/FQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:10 2025 by rpki-client