Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
File: VPQtulHsKDXT5NCj2MSL8yL2vbU.mft (raw, json)
Hash identifier: 6uQujL0BLf9xJBa0J1Pb9FaMRxz8YvFYq6YZh+QiZlo=
Subject key identifier: E3:28:60:4F:E8:6C:13:E8:E5:63:A0:E1:66:2F:7D:EA:37:51:4E:58
Authority key identifier: 54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5
Certificate issuer: /CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
Certificate serial: 019A71B7F7722E1AD148F8E5602B53C362B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
Manifest number: 0BA0
Signing time: Tue 11 Nov 2025 07:01:13 +0000
Manifest this update: Tue 11 Nov 2025 07:01:13 +0000
Manifest next update: Wed 12 Nov 2025 07:01:13 +0000
Files and hashes: 1: VPQtulHsKDXT5NCj2MSL8yL2vbU.crl (hash: ruUvHRzin5fTTmbtv4LGUYsOah7S+nP228djduD2v9c=)
2: mUHt0oKQoXS4NriBI7EGKLoM09o.roa (hash: SD6es8T2Vz3P454Q+Wryhaz45Qcvfh6pBeSnz1RWRNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f7:72:2e:1a:d1:48:f8:e5:60:2b:53:c3:62:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
Validity
Not Before: Nov 11 07:01:13 2025 GMT
Not After : Nov 12 07:01:13 2025 GMT
Subject: CN=e328604fe86c13e8e563a0e1662f7dea37514e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a6:e0:b9:ed:7e:08:03:4f:f8:65:2e:a5:a0:
59:e7:f5:ea:0c:d5:2b:ef:59:c3:a2:8a:46:7c:eb:
48:f9:17:fd:90:93:e1:d7:07:cc:d9:29:4b:c6:4e:
2a:a7:91:37:70:19:6d:15:67:2e:37:ff:e6:17:04:
9f:03:71:c9:fe:2a:6c:86:ed:f2:e6:45:8b:35:1c:
4c:53:61:a6:de:0d:f2:7b:f6:21:18:4e:1c:83:22:
58:a6:10:23:44:22:15:94:74:c1:01:a4:ea:d1:b0:
4e:39:fd:f6:44:98:a5:69:50:93:fb:ff:69:e3:f1:
e2:48:6e:97:61:5e:e8:fb:d9:31:09:b8:22:49:ac:
91:63:35:a5:1b:9e:1d:d7:c8:13:da:04:a0:64:ff:
40:ae:21:cd:7a:e6:bd:7e:77:ad:e6:3c:71:3e:42:
8e:7b:55:f1:6e:ba:b7:27:ce:08:9b:d2:47:af:6d:
d2:f5:b6:2f:39:db:dd:1a:df:51:55:ac:97:eb:3e:
0b:ff:1e:b3:71:56:fd:f6:16:e0:79:b2:2d:7d:40:
2f:ae:57:6b:89:c7:02:b7:45:d9:50:aa:a5:eb:72:
96:a0:65:0a:4e:b7:c8:f8:6d:d7:f7:25:c0:28:68:
db:8a:81:6d:ac:f5:d4:44:c3:f5:1a:49:a0:00:ec:
09:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:28:60:4F:E8:6C:13:E8:E5:63:A0:E1:66:2F:7D:EA:37:51:4E:58
X509v3 Authority Key Identifier:
keyid:54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:bc:ff:1c:fe:3e:b0:f2:70:37:99:9e:fd:ed:34:53:7c:a6:
e3:1f:5d:1c:7f:ec:4a:50:9d:84:bb:f4:5f:4f:50:59:2b:6d:
74:49:17:3d:79:f1:de:5a:02:eb:85:1c:96:74:26:63:f2:b2:
c5:7a:b8:a3:2a:09:34:6d:57:fa:86:bf:ea:cf:90:b6:b6:ce:
23:86:72:66:c7:de:ba:35:95:e5:46:e1:9a:54:4c:0d:92:d7:
fb:5b:86:0a:61:c0:07:4e:c3:b8:27:f9:09:8c:3b:e2:ea:bc:
15:12:9e:e9:4d:eb:01:91:63:f6:a0:35:00:82:e7:bd:41:f0:
51:7a:cd:54:09:d3:d8:76:64:4c:27:c3:9a:86:cf:2d:09:6c:
18:ff:cb:ee:f3:df:bb:3e:bc:8f:ad:4f:d4:15:c1:ce:da:e5:
3d:72:a8:39:34:5b:56:23:4c:b1:25:54:29:01:81:96:7a:bd:
27:9c:9e:c7:1f:a9:10:1b:97:ac:87:a7:d5:a7:59:1e:1a:66:
e9:d3:50:ae:d8:97:8f:02:a9:98:e9:0c:b5:67:3d:1b:5a:60:
f5:f8:5b:cc:94:5a:41:3c:d8:a1:48:12:d5:b6:37:1e:b6:fa:
37:fd:6b:34:81:c1:ea:00:a1:9b:69:1d:07:b9:35:6e:01:e6:
0c:4d:44:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt/dyLhrRSPjlYCtTw2KyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZjQyZGJhNTFlYzI4MzVkM2U0ZDBhM2Q4YzQ4YmYzMjJm
NmJkYjUwHhcNMjUxMTExMDcwMTEzWhcNMjUxMTEyMDcwMTEzWjAzMTEwLwYDVQQD
EyhlMzI4NjA0ZmU4NmMxM2U4ZTU2M2EwZTE2NjJmN2RlYTM3NTE0ZTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16bgue1+CANP+GUupaBZ5/XqDNUr
71nDoopGfOtI+Rf9kJPh1wfM2SlLxk4qp5E3cBltFWcuN//mFwSfA3HJ/ipshu3y
5kWLNRxMU2Gm3g3ye/YhGE4cgyJYphAjRCIVlHTBAaTq0bBOOf32RJilaVCT+/9p
4/HiSG6XYV7o+9kxCbgiSayRYzWlG54d18gT2gSgZP9AriHNeua9fnet5jxxPkKO
e1Xxbrq3J84Im9JHr23S9bYvOdvdGt9RVayX6z4L/x6zcVb99hbgebItfUAvrldr
iccCt0XZUKql63KWoGUKTrfI+G3X9yXAKGjbioFtrPXURMP1GkmgAOwJiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMoYE/obBPo5WOg4WYvfeo3UU5YMB8GA1UdIwQY
MBaAFFT0LbpR7Cg10+TQo9jEi/Mi9r21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlBRdHVsSHNLRFhUNU5DajJNU0w4eUwydmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85YTllMTQtMDRlYS00MTNmLThjNDgt
YTI0ZmFiZjU2ZGFkLzEvVlBRdHVsSHNLRFhUNU5DajJNU0w4eUwydmJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85YTllMTQtMDRlYS00MTNmLThjNDgtYTI0ZmFiZjU2ZGFk
LzEvVlBRdHVsSHNLRFhUNU5DajJNU0w4eUwydmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7z/HP4+
sPJwN5me/e00U3ym4x9dHH/sSlCdhLv0X09QWSttdEkXPXnx3loC64UclnQmY/Ky
xXq4oyoJNG1X+oa/6s+QtrbOI4ZyZsfeujWV5UbhmlRMDZLX+1uGCmHAB07DuCf5
CYw74uq8FRKe6U3rAZFj9qA1AILnvUHwUXrNVAnT2HZkTCfDmobPLQlsGP/L7vPf
uz68j61P1BXBztrlPXKoOTRbViNMsSVUKQGBlnq9J5yexx+pEBuXrIen1adZHhpm
6dNQrtiXjwKpmOkMtWc9G1pg9fhbzJRaQTzYoUgS1bY3Hrb6N/1rNIHB6gChm2kd
B7k1bgHmDE1E5Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:40 2025 by rpki-client