Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
File: VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft (raw, json)
Hash identifier: vgfyz6RQbvnagITjxrvhfNATObDu9xNL5tUeIuKl77Q=
Subject key identifier: 41:13:EF:0E:8E:22:8E:B3:07:82:48:10:8F:86:46:73:EF:41:DA:93
Authority key identifier: 56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
Certificate issuer: /CN=567190854786a16afa6b0ec78dfb0620abaacfef
Certificate serial: 019A4F62A0B41362F63954FF730A848B5B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 15:00:54 +0000
Manifest this update: Tue 04 Nov 2025 15:00:54 +0000
Manifest next update: Wed 05 Nov 2025 15:00:54 +0000
Files and hashes: 1: GQ1DSO1of_qyrqxkPQTC0ENKnfg.roa (hash: nTd0zjLE6XtOMPZyttCDWktzUnkCfLfuxFOPmZBOHEs=)
2: VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl (hash: D8pw/lbu9wvwuTJ6EaLxJapY6NthNW7rF3fx02c6lqE=)
3: qdba9XlB-cPjFIeLPK89fH4z7YE.roa (hash: 1JK31mC2SxxDKOuDPCP+7Ar2oTz/PPCsc7D4ztv27uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:a0:b4:13:62:f6:39:54:ff:73:0a:84:8b:5b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567190854786a16afa6b0ec78dfb0620abaacfef
Validity
Not Before: Nov 4 15:00:54 2025 GMT
Not After : Nov 5 15:00:54 2025 GMT
Subject: CN=4113ef0e8e228eb3078248108f864673ef41da93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ab:28:bd:be:a9:50:69:1c:08:9c:90:4d:41:
61:c8:3f:65:7f:ce:41:35:31:57:fb:c3:e2:fb:8b:
f2:f4:11:01:7c:f2:53:c7:72:48:d5:ef:d0:78:95:
f3:8c:78:be:c1:64:65:09:45:e8:9a:df:6c:83:94:
d9:6a:13:80:f2:b5:36:41:7f:f3:4c:9d:66:aa:3b:
12:16:05:97:37:9f:63:32:f4:28:21:bf:c0:9d:a0:
42:ad:0a:e8:5d:53:02:5f:34:c6:be:49:c1:68:14:
2a:55:a9:38:31:79:98:dc:c7:35:5d:49:d5:2e:4e:
a3:30:28:c8:e2:65:4b:41:a7:e2:10:82:d6:04:90:
dc:c6:2a:69:3b:79:8b:3a:ed:75:8c:42:d4:7a:cd:
76:ad:46:60:58:4d:dd:1a:ff:a9:6b:4a:ca:72:4e:
32:82:5e:94:96:46:8a:92:29:86:9c:13:ce:8a:80:
33:da:79:4d:9d:41:7c:cf:03:55:98:df:18:b8:e9:
0a:2e:0c:36:c0:0a:e7:e4:e2:9d:10:3e:b1:c0:76:
36:5c:b4:da:46:02:eb:7d:bd:0c:bb:8f:11:59:7f:
e0:18:29:3f:7b:13:c3:93:f3:36:99:31:9b:67:b9:
57:1c:03:e0:b4:e5:60:ae:0d:f3:d2:66:24:81:bc:
20:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:13:EF:0E:8E:22:8E:B3:07:82:48:10:8F:86:46:73:EF:41:DA:93
X509v3 Authority Key Identifier:
keyid:56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:2a:41:93:fc:8d:29:85:61:42:0c:62:97:87:07:ef:bd:97:
5b:a9:ef:35:cb:ed:be:5c:ac:af:01:9f:40:9b:4a:cf:9a:5e:
2d:a0:fd:c7:1b:dc:29:73:73:65:d0:06:93:45:d3:ec:fc:d1:
e2:dd:67:f4:71:0f:ca:b4:7d:4f:e9:6d:36:eb:a9:33:58:35:
c1:d2:f7:de:25:b2:af:16:ef:ea:9f:e0:57:01:42:5b:0a:fe:
57:bf:5f:6a:ab:53:61:92:16:f4:16:68:7f:e5:9e:df:58:c4:
04:fc:a8:e7:dd:c7:4a:df:17:27:59:27:e2:6d:c0:e2:4c:33:
73:10:11:9f:42:f8:05:b6:a7:4d:41:2a:3e:0a:e3:f1:f0:d0:
7b:5d:e4:4c:d2:08:10:57:d7:aa:88:3f:5c:fd:61:bf:af:7d:
00:72:4a:f0:74:be:7a:68:d0:e3:0e:ff:e7:a5:4e:84:68:fc:
ce:cf:04:e1:e7:62:c7:3b:02:4f:0f:5f:73:b7:ad:2e:4b:0f:
2b:84:29:78:88:0b:6d:4d:ea:a9:77:8f:57:13:36:cc:bf:6a:
2c:d4:04:e5:6d:ca:3a:8d:08:0b:ff:87:1c:ca:c5:02:7d:39:
b7:23:06:a1:53:0b:48:36:88:b2:4c:ff:36:84:11:9e:06:a8:
23:66:ba:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYqC0E2L2OVT/cwqEi1sjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NzE5MDg1NDc4NmExNmFmYTZiMGVjNzhkZmIwNjIwYWJh
YWNmZWYwHhcNMjUxMTA0MTUwMDU0WhcNMjUxMTA1MTUwMDU0WjAzMTEwLwYDVQQD
Eyg0MTEzZWYwZThlMjI4ZWIzMDc4MjQ4MTA4Zjg2NDY3M2VmNDFkYTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqsovb6pUGkcCJyQTUFhyD9lf85B
NTFX+8Pi+4vy9BEBfPJTx3JI1e/QeJXzjHi+wWRlCUXomt9sg5TZahOA8rU2QX/z
TJ1mqjsSFgWXN59jMvQoIb/AnaBCrQroXVMCXzTGvknBaBQqVak4MXmY3Mc1XUnV
Lk6jMCjI4mVLQafiEILWBJDcxippO3mLOu11jELUes12rUZgWE3dGv+pa0rKck4y
gl6UlkaKkimGnBPOioAz2nlNnUF8zwNVmN8YuOkKLgw2wArn5OKdED6xwHY2XLTa
RgLrfb0Mu48RWX/gGCk/exPDk/M2mTGbZ7lXHAPgtOVgrg3z0mYkgbwgcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEET7w6OIo6zB4JIEI+GRnPvQdqTMB8GA1UdIwQY
MBaAFFZxkIVHhqFq+msOx437BiCrqs/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm5HUWhVZUdvV3I2YXc3SGpmc0dJS3Vxei04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yNGMzMjQtYTE1ZS00Y2QwLTk0YzEt
NzNmZjQwOTU5MzQ4LzEvVm5HUWhVZUdvV3I2YXc3SGpmc0dJS3Vxei04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yNGMzMjQtYTE1ZS00Y2QwLTk0YzEtNzNmZjQwOTU5MzQ4
LzEvVm5HUWhVZUdvV3I2YXc3SGpmc0dJS3Vxei04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVypBk/yN
KYVhQgxil4cH772XW6nvNcvtvlysrwGfQJtKz5peLaD9xxvcKXNzZdAGk0XT7PzR
4t1n9HEPyrR9T+ltNuupM1g1wdL33iWyrxbv6p/gVwFCWwr+V79faqtTYZIW9BZo
f+We31jEBPyo593HSt8XJ1kn4m3A4kwzcxARn0L4BbanTUEqPgrj8fDQe13kTNII
EFfXqog/XP1hv699AHJK8HS+emjQ4w7/56VOhGj8zs8E4edixzsCTw9fc7etLksP
K4QpeIgLbU3qqXePVxM2zL9qLNQE5W3KOo0IC/+HHMrFAn05tyMGoVMLSDaIskz/
NoQRngaoI2a6Fg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:33:47 2025 by rpki-client