Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
File: VHbDyngMxXdErb6QoPOU8dHNcvM.mft (raw, json)
Hash identifier: h03l8UOal+s71FnMqrXs5rJht1L4p+rniRBrA0sk0V0=
Subject key identifier: 29:35:E9:54:FB:9E:FC:84:97:F9:C1:44:75:7E:46:97:51:70:CA:AA
Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
Certificate issuer: /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Certificate serial: 019A19BD9F4AB7338627E0FDAAA1ABABF5A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
Manifest number: 035A
Signing time: Sat 25 Oct 2025 05:00:48 +0000
Manifest this update: Sat 25 Oct 2025 05:00:48 +0000
Manifest next update: Sun 26 Oct 2025 05:00:48 +0000
Files and hashes: 1: J1F-UaHfYAClgmD-n-h_bemva1g.roa (hash: LkkLFeCVLkb+GZvSdm+hQS9Yt//NS73l5BEh3ajjGOM=)
2: Mzf3T5ZCYDRP9VJBsVQOjUFWDdY.roa (hash: fMfmlTHaxDxkKj4QIO7HlLPP5wMEtHiZKgYxRA6zmJA=)
3: VHbDyngMxXdErb6QoPOU8dHNcvM.crl (hash: x53DTlDTIDjca1S/Et2xSaK9gB8QMdHy1dFZKq4AmJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:bd:9f:4a:b7:33:86:27:e0:fd:aa:a1:ab:ab:f5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Validity
Not Before: Oct 25 05:00:48 2025 GMT
Not After : Oct 26 05:00:48 2025 GMT
Subject: CN=2935e954fb9efc8497f9c144757e46975170caaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:44:17:3a:ba:57:1f:d5:46:c4:2c:25:58:
fe:27:11:96:e2:bf:c6:ab:15:4a:08:4b:dd:d0:55:
ed:ef:15:97:9c:27:28:f1:44:86:26:d4:d3:b1:e7:
64:33:2b:12:46:a2:42:b7:62:ca:20:50:6e:35:5d:
90:e4:51:70:8f:ee:92:40:07:db:12:63:18:e9:94:
77:2f:66:74:5c:76:66:91:95:37:fc:ed:02:dc:5e:
9b:22:bd:a6:98:e1:dc:93:49:cc:a7:f4:11:9c:7f:
af:63:55:9e:0a:33:06:48:1e:99:7a:d6:3c:3e:d1:
1e:41:01:f2:9e:97:19:30:90:21:e5:68:17:6d:97:
4a:76:66:f9:ee:85:43:8a:ef:fc:ad:5a:0b:1c:1d:
75:8c:ad:e7:63:d2:a3:11:62:e6:e5:7b:d9:36:2e:
ab:0a:77:19:7a:36:eb:6a:5a:6b:09:fc:43:44:01:
9c:6e:0e:38:d9:70:8e:fc:4e:19:f2:24:89:9a:4c:
72:27:ea:6f:b2:97:db:0b:1c:c4:c6:4a:85:fd:5d:
74:9b:12:59:c8:e7:28:73:1c:fe:ce:27:03:0e:ca:
83:76:68:dc:a0:13:48:42:91:4d:f1:c3:e0:62:61:
85:85:d9:3d:ae:5c:08:4e:85:d9:82:af:66:fd:83:
bb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:35:E9:54:FB:9E:FC:84:97:F9:C1:44:75:7E:46:97:51:70:CA:AA
X509v3 Authority Key Identifier:
keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:94:cf:ea:92:79:fe:d6:95:af:b6:aa:07:a2:24:17:1e:f4:
fb:c8:d9:ea:38:f9:d5:a9:08:88:61:1c:60:0d:ff:8f:8d:73:
ce:68:ee:41:b0:c1:1f:0a:33:9e:f5:73:b8:e2:bb:6f:14:d3:
54:fc:01:02:e4:34:69:05:9c:c3:78:75:5f:7a:a2:93:c1:8b:
68:96:3c:52:26:c9:23:47:5f:cc:a4:b7:e6:af:f6:93:01:f3:
66:59:db:cd:5c:cb:35:03:55:e7:7b:e0:d1:88:ea:42:1c:97:
14:7a:10:f3:3e:24:05:08:68:97:ee:58:3e:18:15:e3:36:b0:
95:02:88:5b:6e:6e:53:4f:4d:36:23:a4:ca:2f:0a:c5:1a:b4:
0f:55:75:9e:56:7a:82:c5:99:ae:b3:02:37:9f:75:cf:91:8e:
c4:20:25:16:87:8d:a3:0b:77:54:e5:2b:60:21:fb:17:44:30:
f7:2e:cd:34:8a:21:04:19:e5:e6:d3:2f:2d:01:c7:b1:17:a1:
fc:8e:08:ea:02:b3:ad:06:88:3e:48:3c:df:02:c7:6d:b3:c8:
2a:0f:9c:2f:bf:39:78:5b:87:bf:7c:2c:19:bf:02:5e:1c:f8:
5f:a8:d1:6b:6b:db:fb:57:a9:97:23:06:65:80:33:09:ab:2d:
9c:b3:7b:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoZvZ9KtzOGJ+D9qqGrq/WgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NzZjM2NhNzgwY2M1Nzc0NGFkYmU5MGEwZjM5NGYxZDFj
ZDcyZjMwHhcNMjUxMDI1MDUwMDQ4WhcNMjUxMDI2MDUwMDQ4WjAzMTEwLwYDVQQD
EygyOTM1ZTk1NGZiOWVmYzg0OTdmOWMxNDQ3NTdlNDY5NzUxNzBjYWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSdEFzq6Vx/VRsQsJVj+JxGW4r/G
qxVKCEvd0FXt7xWXnCco8USGJtTTsedkMysSRqJCt2LKIFBuNV2Q5FFwj+6SQAfb
EmMY6ZR3L2Z0XHZmkZU3/O0C3F6bIr2mmOHck0nMp/QRnH+vY1WeCjMGSB6ZetY8
PtEeQQHynpcZMJAh5WgXbZdKdmb57oVDiu/8rVoLHB11jK3nY9KjEWLm5XvZNi6r
CncZejbralprCfxDRAGcbg442XCO/E4Z8iSJmkxyJ+pvspfbCxzExkqF/V10mxJZ
yOcocxz+zicDDsqDdmjcoBNIQpFN8cPgYmGFhdk9rlwIToXZgq9m/YO7XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCk16VT7nvyEl/nBRHV+RpdRcMqqMB8GA1UdIwQY
MBaAFFR2w8p4DMV3RK2+kKDzlPHRzXLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80MzkyODUtNzIyYS00MmRmLWIxODUt
MzAzMTUxZDc2YWNlLzEvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi80MzkyODUtNzIyYS00MmRmLWIxODUtMzAzMTUxZDc2YWNl
LzEvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZTP6pJ5
/taVr7aqB6IkFx70+8jZ6jj51akIiGEcYA3/j41zzmjuQbDBHwoznvVzuOK7bxTT
VPwBAuQ0aQWcw3h1X3qik8GLaJY8UibJI0dfzKS35q/2kwHzZlnbzVzLNQNV53vg
0YjqQhyXFHoQ8z4kBQhol+5YPhgV4zawlQKIW25uU09NNiOkyi8KxRq0D1V1nlZ6
gsWZrrMCN591z5GOxCAlFoeNowt3VOUrYCH7F0Qw9y7NNIohBBnl5tMvLQHHsReh
/I4I6gKzrQaIPkg83wLHbbPIKg+cL785eFuHv3wsGb8CXhz4X6jRa2vb+1eplyMG
ZYAzCastnLN7XA==
-----END CERTIFICATE-----
Generated at Sat Oct 25 12:37:23 2025 by rpki-client