Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
File: VKwN3sMOJORX4W5lB9IZcoMQiT0.mft (raw, json)
Hash identifier: xMHfo19eDvFb8lqhPvrcRBMYrWbzR0ztDNeEE4FjDgQ=
Subject key identifier: AB:DA:3D:DB:52:64:07:86:F8:07:77:56:A0:B7:17:48:E7:2B:B4:72
Authority key identifier: 54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
Certificate issuer: /CN=54ac0ddec30e24e457e16e6507d219728310893d
Certificate serial: 019A52D2599889174D3AA0F3525955249141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
Manifest number: 0277
Signing time: Wed 05 Nov 2025 07:01:48 +0000
Manifest this update: Wed 05 Nov 2025 07:01:48 +0000
Manifest next update: Thu 06 Nov 2025 07:01:48 +0000
Files and hashes: 1: 3gl-l3qU8MpI3MVFIGvCINJyADE.roa (hash: utYF7PoXBqNr3o1w6VDP9HkMKeBzXvpa+DHx3iRNsmk=)
2: VKwN3sMOJORX4W5lB9IZcoMQiT0.crl (hash: 64jUgALRfjwugOMskcU/u/9q3rTy5MvPOfUx0vcBIRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:59:98:89:17:4d:3a:a0:f3:52:59:55:24:91:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac0ddec30e24e457e16e6507d219728310893d
Validity
Not Before: Nov 5 07:01:48 2025 GMT
Not After : Nov 6 07:01:48 2025 GMT
Subject: CN=abda3ddb52640786f8077756a0b71748e72bb472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ff:de:27:41:de:97:b9:6d:a3:e0:a8:dd:79:
f2:d8:7a:91:8a:e7:8d:0f:a2:08:da:ba:24:1a:17:
49:33:3f:7a:b6:d7:f6:20:05:68:9d:87:f8:c1:a7:
36:39:aa:61:72:51:1b:54:f2:56:4f:06:d9:3a:90:
c7:aa:1d:9a:40:bb:1a:87:99:f2:9e:2e:48:ae:e6:
43:34:39:9a:ab:da:ca:68:0b:e2:96:f0:5f:1e:f6:
74:a4:58:f4:af:1c:44:2f:6f:62:a7:83:14:d8:67:
46:91:7c:ed:3e:c1:ed:f2:93:b0:44:13:dc:d6:45:
a8:a9:d2:24:a6:48:22:80:63:21:8e:0e:dc:d9:f1:
0a:07:af:76:7e:a0:8a:09:5d:92:74:8f:15:e5:c1:
79:3f:16:86:2b:ab:7a:0c:a5:d5:0a:e8:81:47:26:
6f:c6:d7:e8:7c:02:6e:7d:22:bc:05:49:2a:2c:52:
9c:41:29:71:4b:d4:90:b2:87:67:ea:a4:f9:c5:cc:
37:1a:bb:2d:df:38:af:c7:fb:5f:02:dc:ff:69:18:
73:0e:cf:89:19:dc:71:f6:39:5d:ac:0d:67:0d:ae:
03:78:59:11:7e:48:9d:64:61:e1:aa:97:8b:fe:e3:
fd:f3:23:0f:c5:71:6d:8a:72:2b:e6:1c:dc:bc:1b:
0a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DA:3D:DB:52:64:07:86:F8:07:77:56:A0:B7:17:48:E7:2B:B4:72
X509v3 Authority Key Identifier:
keyid:54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2f:19:e9:5f:ff:46:92:96:b8:74:54:20:9a:26:11:9e:ff:
b7:39:1e:d0:23:bb:2c:54:d4:ed:ed:b9:b3:a5:b1:d7:1b:76:
17:2f:56:44:17:e2:e6:07:43:0b:39:7b:1b:bf:ff:b1:c8:2c:
a0:b8:24:78:da:5b:2b:f1:c6:11:85:0f:0f:65:47:db:f7:5f:
ae:9d:54:1b:87:86:62:7f:98:d5:da:67:96:e8:54:c8:59:44:
1e:96:a7:5e:07:c7:27:26:37:ec:e5:fb:af:24:0f:3e:5a:8f:
4f:39:e3:ae:38:08:56:7e:ce:85:e3:0b:59:6d:49:cd:d3:4d:
59:2d:6b:81:85:53:c0:44:34:36:d8:8c:3d:24:d7:f7:c2:4c:
af:20:5c:53:e3:05:b4:72:3c:a3:b9:08:5c:f3:a5:16:62:d8:
55:c4:59:ee:79:0c:c8:71:f9:5e:38:97:70:38:1e:b9:4b:d0:
50:1e:f0:01:a5:a4:2e:78:ad:3f:bf:23:e9:b5:a4:88:7b:71:
c2:72:95:8c:d8:cb:30:4f:f7:ac:f6:94:7b:dd:6c:81:69:07:
00:ab:31:ef:c6:bf:0a:f8:e1:0c:f6:43:71:e5:ea:a5:3a:a8:
68:76:96:c9:36:02:de:65:ed:57:8a:58:25:5c:d5:6a:8e:3c:
27:f8:33:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0lmYiRdNOqDzUllVJJFBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YWMwZGRlYzMwZTI0ZTQ1N2UxNmU2NTA3ZDIxOTcyODMx
MDg5M2QwHhcNMjUxMTA1MDcwMTQ4WhcNMjUxMTA2MDcwMTQ4WjAzMTEwLwYDVQQD
EyhhYmRhM2RkYjUyNjQwNzg2ZjgwNzc3NTZhMGI3MTc0OGU3MmJiNDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv/eJ0Hel7lto+Co3Xny2HqRiueN
D6II2rokGhdJMz96ttf2IAVonYf4wac2OaphclEbVPJWTwbZOpDHqh2aQLsah5ny
ni5IruZDNDmaq9rKaAvilvBfHvZ0pFj0rxxEL29ip4MU2GdGkXztPsHt8pOwRBPc
1kWoqdIkpkgigGMhjg7c2fEKB692fqCKCV2SdI8V5cF5PxaGK6t6DKXVCuiBRyZv
xtfofAJufSK8BUkqLFKcQSlxS9SQsodn6qT5xcw3Grst3zivx/tfAtz/aRhzDs+J
Gdxx9jldrA1nDa4DeFkRfkidZGHhqpeL/uP98yMPxXFtinIr5hzcvBsKswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvaPdtSZAeG+Ad3VqC3F0jnK7RyMB8GA1UdIwQY
MBaAFFSsDd7DDiTkV+FuZQfSGXKDEIk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkt3TjNzTU9KT1JYNFc1bEI5SVpjb01RaVQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZGRkMzktZTdiZC00NGJhLWFiMjEt
MmYwNjU1ZjAxMDI5LzEvVkt3TjNzTU9KT1JYNFc1bEI5SVpjb01RaVQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yZGRkMzktZTdiZC00NGJhLWFiMjEtMmYwNjU1ZjAxMDI5
LzEvVkt3TjNzTU9KT1JYNFc1bEI5SVpjb01RaVQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfC8Z6V//
RpKWuHRUIJomEZ7/tzke0CO7LFTU7e25s6Wx1xt2Fy9WRBfi5gdDCzl7G7//scgs
oLgkeNpbK/HGEYUPD2VH2/dfrp1UG4eGYn+Y1dpnluhUyFlEHpanXgfHJyY37OX7
ryQPPlqPTznjrjgIVn7OheMLWW1JzdNNWS1rgYVTwEQ0NtiMPSTX98JMryBcU+MF
tHI8o7kIXPOlFmLYVcRZ7nkMyHH5XjiXcDgeuUvQUB7wAaWkLnitP78j6bWkiHtx
wnKVjNjLME/3rPaUe91sgWkHAKsx78a/CvjhDPZDceXqpTqoaHaWyTYC3mXtV4pY
JVzVao48J/gzMw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:12:11 2025 by rpki-client