Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
File: VEbfB_88sm389O64dh-wFsr3-e4.mft (raw, json)
Hash identifier: 98WvjZyFnwc5oFsSBHdrtDTuLV9C3LU6XPp7yrw3T4I=
Subject key identifier: 67:A5:AC:24:A2:AA:E1:5E:C0:86:77:8B:47:85:7D:DE:AA:D5:AA:05
Authority key identifier: 54:46:DF:07:FF:3C:B2:6D:FC:F4:EE:B8:76:1F:B0:16:CA:F7:F9:EE
Certificate issuer: /CN=5446df07ff3cb26dfcf4eeb8761fb016caf7f9ee
Certificate serial: 019A706DFE1AA6D45C68918D5004BAB8161A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
Manifest number: 0111
Signing time: Tue 11 Nov 2025 01:00:47 +0000
Manifest this update: Tue 11 Nov 2025 01:00:47 +0000
Manifest next update: Wed 12 Nov 2025 01:00:47 +0000
Files and hashes: 1: Mt4ySnJ9tLnzzQYq2U6tfp3Q3JA.roa (hash: Czeue2iwQkgf4dbWmDFWclQeOMsHJV7V0inLeSwakN8=)
2: VEbfB_88sm389O64dh-wFsr3-e4.crl (hash: gPti0w7AmD90JYtXUA6V6RCZbnFJrl4+WkdpMsBwdkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:fe:1a:a6:d4:5c:68:91:8d:50:04:ba:b8:16:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5446df07ff3cb26dfcf4eeb8761fb016caf7f9ee
Validity
Not Before: Nov 11 01:00:47 2025 GMT
Not After : Nov 12 01:00:47 2025 GMT
Subject: CN=67a5ac24a2aae15ec086778b47857ddeaad5aa05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f9:c4:c2:0c:a2:12:de:b2:5f:3d:27:ce:6f:
0c:98:18:6a:c1:7f:26:27:63:a3:e3:7c:18:cd:86:
48:7b:63:01:ba:32:f2:b6:c7:11:08:a0:cf:be:b5:
0a:f3:ae:ec:1e:6f:e4:78:48:04:aa:fd:12:c3:00:
8f:4f:d7:27:02:c8:8c:fe:d9:36:2f:f9:40:42:50:
28:87:08:99:7f:23:3b:03:a7:64:15:79:43:71:d7:
6c:69:6b:07:aa:d8:d2:b4:bb:b6:f8:35:07:de:76:
0f:ae:d9:e8:29:b4:92:c5:cc:38:78:4e:45:9e:42:
5f:e0:bb:fd:13:03:e1:e8:e4:56:34:ce:f2:45:d7:
4d:59:f2:2d:1c:0a:84:c6:20:05:47:8d:8c:a7:b2:
d6:bf:60:db:1a:9f:eb:5a:fa:2e:06:98:74:3f:83:
93:00:22:ff:a3:51:ea:11:89:fe:32:8d:ce:4d:14:
eb:e3:3f:6d:93:82:49:5d:08:2b:bd:f4:bb:87:3f:
97:a2:b4:67:b8:33:6a:0e:fd:ac:25:6b:8e:e2:ae:
87:b7:cf:0d:26:d9:06:29:f3:59:de:67:5d:cd:9b:
c0:af:a2:0a:ef:f8:09:ec:72:94:1a:f8:21:5a:bc:
de:0f:a9:d7:f0:d3:1b:0b:04:f9:eb:39:63:df:af:
b0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A5:AC:24:A2:AA:E1:5E:C0:86:77:8B:47:85:7D:DE:AA:D5:AA:05
X509v3 Authority Key Identifier:
keyid:54:46:DF:07:FF:3C:B2:6D:FC:F4:EE:B8:76:1F:B0:16:CA:F7:F9:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:3c:24:e8:12:bb:ef:87:c2:9c:5c:bf:4b:5c:ca:d0:5b:18:
72:d6:7f:4b:56:44:4b:59:98:55:74:78:79:11:06:a1:7b:5e:
5c:55:5f:f1:a6:f3:67:54:f5:3e:a0:5c:98:b1:c4:51:3d:72:
d8:42:7c:9a:f9:35:af:dc:40:86:e6:00:ea:46:19:9e:5d:89:
e3:a1:63:47:26:a9:31:3f:95:b8:1e:52:45:93:07:50:6b:9a:
95:5e:1c:2b:ed:fd:ae:fd:66:b4:25:35:3d:cc:ce:b7:ac:62:
1c:1e:9d:6c:78:6f:b7:50:8c:ea:29:a4:08:92:dc:a8:8d:e2:
c7:06:d3:b2:33:35:40:6b:d3:a5:82:7b:f7:ec:8f:ca:d9:ef:
03:d2:9e:4f:f9:73:4f:49:37:54:31:2c:4d:f8:d3:bc:16:d5:
ce:5b:ca:32:89:fd:95:94:08:26:ce:fc:5f:77:27:bb:ba:b1:
18:8e:b1:20:fd:76:10:18:b5:a6:69:b0:7b:2a:70:de:69:2d:
8c:e0:3f:dc:04:58:e2:73:fd:87:8e:09:dc:f3:c3:16:c0:a4:
c3:ae:e5:69:6a:49:41:99:63:59:9f:70:1f:7d:90:c0:22:c4:
b7:60:73:5c:58:0d:70:3c:8d:3f:e7:c2:29:69:5d:2a:41:c6:
77:80:9b:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbf4aptRcaJGNUAS6uBYaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NDZkZjA3ZmYzY2IyNmRmY2Y0ZWViODc2MWZiMDE2Y2Fm
N2Y5ZWUwHhcNMjUxMTExMDEwMDQ3WhcNMjUxMTEyMDEwMDQ3WjAzMTEwLwYDVQQD
Eyg2N2E1YWMyNGEyYWFlMTVlYzA4Njc3OGI0Nzg1N2RkZWFhZDVhYTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PnEwgyiEt6yXz0nzm8MmBhqwX8m
J2Oj43wYzYZIe2MBujLytscRCKDPvrUK867sHm/keEgEqv0SwwCPT9cnAsiM/tk2
L/lAQlAohwiZfyM7A6dkFXlDcddsaWsHqtjStLu2+DUH3nYPrtnoKbSSxcw4eE5F
nkJf4Lv9EwPh6ORWNM7yRddNWfItHAqExiAFR42Mp7LWv2DbGp/rWvouBph0P4OT
ACL/o1HqEYn+Mo3OTRTr4z9tk4JJXQgrvfS7hz+XorRnuDNqDv2sJWuO4q6Ht88N
JtkGKfNZ3mddzZvAr6IK7/gJ7HKUGvghWrzeD6nX8NMbCwT56zlj36+wEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGelrCSiquFewIZ3i0eFfd6q1aoFMB8GA1UdIwQY
MBaAFFRG3wf/PLJt/PTuuHYfsBbK9/nuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkViZkJfODhzbTM4OU82NGRoLXdGc3IzLWU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zZjg1ZGEtMzExZi00NWI0LWE3NDct
NTY1NjBiMjZhMGRiLzEvVkViZkJfODhzbTM4OU82NGRoLXdGc3IzLWU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8zZjg1ZGEtMzExZi00NWI0LWE3NDctNTY1NjBiMjZhMGRi
LzEvVkViZkJfODhzbTM4OU82NGRoLXdGc3IzLWU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsTwk6BK7
74fCnFy/S1zK0FsYctZ/S1ZES1mYVXR4eREGoXteXFVf8abzZ1T1PqBcmLHEUT1y
2EJ8mvk1r9xAhuYA6kYZnl2J46FjRyapMT+VuB5SRZMHUGualV4cK+39rv1mtCU1
PczOt6xiHB6dbHhvt1CM6imkCJLcqI3ixwbTsjM1QGvTpYJ79+yPytnvA9KeT/lz
T0k3VDEsTfjTvBbVzlvKMon9lZQIJs78X3cnu7qxGI6xIP12EBi1pmmweypw3mkt
jOA/3ARY4nP9h44J3PPDFsCkw67laWpJQZljWZ9wH32QwCLEt2BzXFgNcDyNP+fC
KWldKkHGd4Cbww==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:15 2025 by rpki-client