Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
File: VFhKIZ9vUGbYSO0quWTaiWbUCio.mft (raw, json)
Hash identifier: xvaBvJmra4FYkFfeRpGNLKHMwLpnOQpnfVXrh0bLlY4=
Subject key identifier: A3:D3:F6:F2:72:4B:FB:BB:F8:00:9A:0D:85:33:32:5B:0D:BE:84:C0
Authority key identifier: 54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A
Certificate issuer: /CN=54584a219f6f5066d848ed2ab964da8966d40a2a
Certificate serial: 019A4E18B53FB89FEC97C4443D279F93817E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 09:00:33 +0000
Manifest this update: Tue 04 Nov 2025 09:00:33 +0000
Manifest next update: Wed 05 Nov 2025 09:00:33 +0000
Files and hashes: 1: VFhKIZ9vUGbYSO0quWTaiWbUCio.crl (hash: rGV4ueEBUkJtbQ3Eu7eeMZZonywOApCmrkjJOP+9RJU=)
2: yO-xzrVzP9w-99d-1MgI3akuEEw.roa (hash: /wfJmKbrJk5HLRMl66b8UyeroQ01b/DROieeTJUHsw8=)
3: ykuZpqMlHSUIWtYa1mPsmyPe9Ho.roa (hash: yZcmu9TrDVEdaIS3LL1L046LUfG1VEvG/7HySIUseIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b5:3f:b8:9f:ec:97:c4:44:3d:27:9f:93:81:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54584a219f6f5066d848ed2ab964da8966d40a2a
Validity
Not Before: Nov 4 09:00:33 2025 GMT
Not After : Nov 5 09:00:33 2025 GMT
Subject: CN=a3d3f6f2724bfbbbf8009a0d8533325b0dbe84c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9d:fc:b4:8e:e7:3a:41:33:10:06:1f:9f:92:
67:cc:c7:00:d5:cb:9b:0b:60:01:12:d8:7d:a9:3c:
09:31:d8:00:a9:85:3e:e7:ae:9f:76:54:f6:d0:32:
0c:aa:10:87:36:ca:1e:49:79:f6:e4:2b:4c:6f:65:
a1:6b:46:98:aa:57:a7:43:d2:f8:a0:89:9c:02:03:
97:7a:ef:8a:ad:35:99:fd:37:6d:05:cd:45:ce:fb:
49:20:9c:7a:c2:e4:4d:a6:16:ef:1d:45:9e:e2:c0:
92:f1:b5:19:77:8e:59:e1:0b:51:51:f1:36:b8:f6:
44:04:ba:f2:1f:8d:66:8b:19:99:fb:6e:f6:fe:88:
b1:7d:af:ba:dd:6e:e0:b5:c0:6b:6d:91:0c:b4:19:
37:55:b9:87:40:c9:67:1d:4b:5b:91:1c:f6:65:b1:
bc:19:cc:ee:1e:c1:57:7d:c3:24:95:f0:4e:4d:1d:
54:4e:f8:da:85:35:f0:c5:72:60:58:40:b6:c1:c4:
a2:e1:f2:a7:51:db:38:bc:fc:c3:b5:df:75:6d:49:
bc:78:d4:e2:e0:8a:e1:69:98:16:ac:51:38:d1:22:
d7:4a:c8:fa:be:55:f4:3c:ef:38:74:59:d8:72:df:
e2:6d:1a:d5:cb:d4:b8:e4:6e:38:94:82:c5:5a:7b:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D3:F6:F2:72:4B:FB:BB:F8:00:9A:0D:85:33:32:5B:0D:BE:84:C0
X509v3 Authority Key Identifier:
keyid:54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:cc:ae:64:29:77:f5:d9:40:cc:a0:9b:e4:90:49:df:8d:39:
28:34:11:99:df:0b:c5:09:d9:c2:f1:fd:48:6a:4b:89:d9:82:
90:fb:7a:d9:9e:0d:7a:59:5c:5e:6f:d8:40:16:2a:4e:58:28:
34:0c:e7:02:78:ca:0c:2a:5f:f6:fe:cc:c7:ec:ac:46:44:6c:
26:0e:f2:7a:fa:91:2d:1c:7d:03:26:e7:42:10:36:00:c5:fe:
03:b7:b5:43:ca:94:99:4e:1b:a2:4b:ab:50:65:2c:2f:07:36:
3d:58:de:54:a7:4a:6c:a9:75:2d:ec:2d:7a:c1:3b:4f:f7:dc:
da:31:f9:60:34:fc:65:18:d2:22:02:d9:7f:56:6d:1a:cd:06:
9c:a0:68:ce:b2:51:83:36:e8:1e:d5:42:df:75:32:69:8e:7b:
cc:54:07:b0:0a:7e:f2:20:61:2c:15:d9:e1:ad:85:12:5e:eb:
b0:c1:10:71:b6:67:d2:e7:35:93:6f:fe:29:c9:4c:72:80:f3:
52:e8:85:60:ce:ee:21:47:6f:e4:fe:80:7e:c0:61:cf:12:bd:
be:60:d3:5d:e5:17:b1:5c:ba:bf:74:35:fb:fa:82:c1:7f:98:
61:83:d6:b5:e8:dd:58:e2:70:0b:39:c8:1f:12:3e:a9:d9:27:
b9:87:a4:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGLU/uJ/sl8REPSefk4F+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NTg0YTIxOWY2ZjUwNjZkODQ4ZWQyYWI5NjRkYTg5NjZk
NDBhMmEwHhcNMjUxMTA0MDkwMDMzWhcNMjUxMTA1MDkwMDMzWjAzMTEwLwYDVQQD
EyhhM2QzZjZmMjcyNGJmYmJiZjgwMDlhMGQ4NTMzMzI1YjBkYmU4NGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ38tI7nOkEzEAYfn5JnzMcA1cub
C2ABEth9qTwJMdgAqYU+566fdlT20DIMqhCHNsoeSXn25CtMb2Wha0aYqlenQ9L4
oImcAgOXeu+KrTWZ/TdtBc1FzvtJIJx6wuRNphbvHUWe4sCS8bUZd45Z4QtRUfE2
uPZEBLryH41mixmZ+272/oixfa+63W7gtcBrbZEMtBk3VbmHQMlnHUtbkRz2ZbG8
GczuHsFXfcMklfBOTR1UTvjahTXwxXJgWEC2wcSi4fKnUds4vPzDtd91bUm8eNTi
4IrhaZgWrFE40SLXSsj6vlX0PO84dFnYct/ibRrVy9S45G44lILFWnuyNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPT9vJyS/u7+ACaDYUzMlsNvoTAMB8GA1UdIwQY
MBaAFFRYSiGfb1Bm2EjtKrlk2olm1AoqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkZoS0laOXZVR2JZU08wcXVXVGFpV2JVQ2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kZDNkZDEtMDliNS00YWEyLWFlYzAt
OWZiMWNlNGQ3MjBiLzEvVkZoS0laOXZVR2JZU08wcXVXVGFpV2JVQ2lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9kZDNkZDEtMDliNS00YWEyLWFlYzAtOWZiMWNlNGQ3MjBi
LzEvVkZoS0laOXZVR2JZU08wcXVXVGFpV2JVQ2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8yuZCl3
9dlAzKCb5JBJ3405KDQRmd8LxQnZwvH9SGpLidmCkPt62Z4NellcXm/YQBYqTlgo
NAznAnjKDCpf9v7Mx+ysRkRsJg7yevqRLRx9AybnQhA2AMX+A7e1Q8qUmU4bokur
UGUsLwc2PVjeVKdKbKl1LewtesE7T/fc2jH5YDT8ZRjSIgLZf1ZtGs0GnKBozrJR
gzboHtVC33UyaY57zFQHsAp+8iBhLBXZ4a2FEl7rsMEQcbZn0uc1k2/+KclMcoDz
UuiFYM7uIUdv5P6AfsBhzxK9vmDTXeUXsVy6v3Q1+/qCwX+YYYPWtejdWOJwCznI
HxI+qdknuYekfg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:28:12 2025 by rpki-client