Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
File: vstVJuhB53DLVWTzBMxmluqx5Ls.mft (raw, json)
Hash identifier: S9rjhhqoCFt+fVJudLZMf3cSqBVx0s5OkPfjHZVNfdk=
Subject key identifier: B0:B9:39:10:A0:A3:30:A4:D3:9E:DA:DE:CA:70:05:B4:73:ED:D2:D4
Authority key identifier: BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB
Certificate issuer: /CN=becb5526e841e770cb5564f304cc6696eab1e4bb
Certificate serial: 019A4E18F93DBE5D49AFB7F3412AD1FF4C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
Manifest number: 0648
Signing time: Tue 04 Nov 2025 09:00:50 +0000
Manifest this update: Tue 04 Nov 2025 09:00:50 +0000
Manifest next update: Wed 05 Nov 2025 09:00:50 +0000
Files and hashes: 1: HD7ZQ20BrfhIQig7jEtYMWBXqig.roa (hash: 0U8nx89LMB5Sbx+cfc6esGNSApn9xmAb50VsRUl9HHk=)
2: vstVJuhB53DLVWTzBMxmluqx5Ls.crl (hash: syyH7j5ehlzuuWQLDLPvi44bzX1ftlyI7cN+TemE3do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:f9:3d:be:5d:49:af:b7:f3:41:2a:d1:ff:4c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becb5526e841e770cb5564f304cc6696eab1e4bb
Validity
Not Before: Nov 4 09:00:50 2025 GMT
Not After : Nov 5 09:00:50 2025 GMT
Subject: CN=b0b93910a0a330a4d39edadeca7005b473edd2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c7:c5:3f:7b:3e:e4:f8:73:99:26:8f:00:f0:
ab:ee:74:c2:4f:61:71:83:e1:65:9f:3d:0b:72:b8:
1e:5e:35:53:15:a1:1b:80:d7:bd:36:ec:2b:67:4d:
dd:ff:4c:9d:f1:53:03:6f:e2:1f:03:8d:67:ab:14:
8a:7e:4c:da:c5:52:50:c3:70:39:39:d4:38:3b:cb:
46:b8:f0:04:0c:67:3a:1f:a4:40:c3:e6:98:61:97:
d9:f8:0c:ec:92:c7:ca:80:1e:2d:a5:03:0f:b3:88:
a9:90:00:5e:1d:ff:66:ee:f7:3b:bb:1c:4e:cf:41:
ec:18:e5:6c:b3:bc:81:5a:7d:f4:52:11:cc:bf:38:
83:21:4e:cb:a0:0e:ae:c0:4f:aa:d1:0f:5c:1e:28:
55:04:e0:3e:39:85:de:e0:2a:44:93:6d:79:14:f7:
f2:dd:1f:99:1c:20:fe:88:8e:66:b0:2a:df:38:ea:
f3:aa:89:44:5e:8d:fb:0e:f5:2e:02:a5:0c:75:94:
a9:3d:c1:93:5f:2c:f2:87:75:e5:fd:ee:e7:1c:23:
72:32:63:5b:1c:88:31:0c:fc:a3:ca:53:ee:7c:ca:
f8:4a:ef:a7:92:e0:27:63:c0:cc:77:59:2f:fe:5d:
49:06:9b:2a:62:2a:c3:98:2f:e1:f5:d8:62:6e:5c:
17:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B9:39:10:A0:A3:30:A4:D3:9E:DA:DE:CA:70:05:B4:73:ED:D2:D4
X509v3 Authority Key Identifier:
keyid:BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3d:2e:6a:20:95:96:d2:e2:5f:8b:5c:0c:86:88:e5:cb:ac:
f1:53:7e:62:cf:1b:d1:3f:76:7f:1d:0b:d2:f0:b4:10:08:a2:
78:34:a6:b3:66:c6:df:c6:64:79:b2:6b:05:f7:9c:f1:76:ea:
7a:eb:8c:76:2d:38:83:30:21:d9:dc:f6:96:2c:36:6f:ea:7f:
ca:6f:8d:35:9c:e8:7b:e3:86:54:48:68:da:06:1d:4b:8b:c4:
9a:17:03:56:17:95:7a:7f:97:ce:22:5d:1f:89:58:59:9e:9d:
45:8e:2c:b4:3b:79:2d:d5:5c:32:56:ec:4e:97:03:11:10:71:
87:3c:81:a0:c6:b4:fb:6d:06:a6:4f:50:25:bf:30:97:57:f6:
07:97:b5:09:e9:33:41:93:a7:19:e1:e7:69:21:2c:e1:b2:ac:
be:74:a0:0f:bb:94:e5:4d:2a:61:c2:58:d4:7d:6d:54:e2:35:
79:21:75:ca:01:d9:7f:ae:55:1e:0a:f4:29:a0:d5:0e:90:43:
af:6d:55:23:5e:fe:b8:41:56:78:0f:63:2f:39:fd:61:dd:46:
d3:f9:18:b1:6f:c1:59:4c:10:63:cd:8a:61:e1:fe:98:47:7a:
d0:1b:02:ca:d0:b4:7c:f3:52:fd:af:69:7a:35:07:68:bf:88:
fd:75:09:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGPk9vl1Jr7fzQSrR/0yeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlY2I1NTI2ZTg0MWU3NzBjYjU1NjRmMzA0Y2M2Njk2ZWFi
MWU0YmIwHhcNMjUxMTA0MDkwMDUwWhcNMjUxMTA1MDkwMDUwWjAzMTEwLwYDVQQD
EyhiMGI5MzkxMGEwYTMzMGE0ZDM5ZWRhZGVjYTcwMDViNDczZWRkMmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsfFP3s+5PhzmSaPAPCr7nTCT2Fx
g+Flnz0LcrgeXjVTFaEbgNe9NuwrZ03d/0yd8VMDb+IfA41nqxSKfkzaxVJQw3A5
OdQ4O8tGuPAEDGc6H6RAw+aYYZfZ+AzsksfKgB4tpQMPs4ipkABeHf9m7vc7uxxO
z0HsGOVss7yBWn30UhHMvziDIU7LoA6uwE+q0Q9cHihVBOA+OYXe4CpEk215FPfy
3R+ZHCD+iI5msCrfOOrzqolEXo37DvUuAqUMdZSpPcGTXyzyh3Xl/e7nHCNyMmNb
HIgxDPyjylPufMr4Su+nkuAnY8DMd1kv/l1JBpsqYirDmC/h9dhiblwX/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLC5ORCgozCk057a3spwBbRz7dLUMB8GA1UdIwQY
MBaAFL7LVSboQedwy1Vk8wTMZpbqseS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnN0Vkp1aEI1M0RMVldUekJNeG1sdXF4NUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi85ZDY5OGQtZDI3Ny00OTdmLTgzM2Qt
YTIxMjdjMmFhMWIzLzEvdnN0Vkp1aEI1M0RMVldUekJNeG1sdXF4NUxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi85ZDY5OGQtZDI3Ny00OTdmLTgzM2QtYTIxMjdjMmFhMWIz
LzEvdnN0Vkp1aEI1M0RMVldUekJNeG1sdXF4NUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbz0uaiCV
ltLiX4tcDIaI5cus8VN+Ys8b0T92fx0L0vC0EAiieDSms2bG38ZkebJrBfec8Xbq
euuMdi04gzAh2dz2liw2b+p/ym+NNZzoe+OGVEho2gYdS4vEmhcDVheVen+XziJd
H4lYWZ6dRY4stDt5LdVcMlbsTpcDERBxhzyBoMa0+20Gpk9QJb8wl1f2B5e1Cekz
QZOnGeHnaSEs4bKsvnSgD7uU5U0qYcJY1H1tVOI1eSF1ygHZf65VHgr0KaDVDpBD
r21VI17+uEFWeA9jLzn9Yd1G0/kYsW/BWUwQY82KYeH+mEd60BsCytC0fPNS/a9p
ejUHaL+I/XUJGw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:57 2025 by rpki-client