Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
File: VbU-iTBDTHKlgHoFUIK5hZmycH8.mft (raw, json)
Hash identifier: zWNOQXf23DYTQ0IPJaT8+cYQy4YKSK8bUr4HQltRBAc=
Subject key identifier: 8C:5E:44:02:22:12:1D:F1:62:69:36:7D:27:88:09:60:D9:6C:18:35
Authority key identifier: 55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
Certificate issuer: /CN=55b53e8930434c72a5807a055082b98599b2707f
Certificate serial: 019A533FA1BD5230E3BBD1D0831158368494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
Manifest number: 0290
Signing time: Wed 05 Nov 2025 09:01:10 +0000
Manifest this update: Wed 05 Nov 2025 09:01:10 +0000
Manifest next update: Thu 06 Nov 2025 09:01:10 +0000
Files and hashes: 1: UfsWVLXlKS-YeedBQ6KLEcHVpj4.roa (hash: boZrSX+IxVlQdGAIp3Em+CvprqHqmfbsNvAMqDk06S4=)
2: VbU-iTBDTHKlgHoFUIK5hZmycH8.crl (hash: ppqANOWD568EvIbZ18Z2MHDumu1IIErLAATpDXUuGhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:a1:bd:52:30:e3:bb:d1:d0:83:11:58:36:84:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b53e8930434c72a5807a055082b98599b2707f
Validity
Not Before: Nov 5 09:01:10 2025 GMT
Not After : Nov 6 09:01:10 2025 GMT
Subject: CN=8c5e440222121df16269367d27880960d96c1835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b8:43:6f:4d:0a:a5:cd:7c:8c:e7:f1:4a:f1:
90:ba:d4:4a:12:94:30:38:9a:b9:db:ca:19:45:6f:
77:ee:da:2f:64:bf:8a:77:b8:38:5b:9e:5c:43:d8:
2c:b8:1a:9b:8d:a4:c6:1f:b5:00:17:47:a9:ac:27:
17:27:69:e8:3f:de:b9:2a:81:44:40:58:42:83:9f:
c0:bb:29:9d:6d:cb:69:79:ca:b5:bd:3d:02:aa:73:
c4:34:6e:e2:d8:2e:ce:81:f4:d8:e4:a9:cf:83:cd:
ba:c0:81:b0:f5:a6:1f:76:27:6e:05:3c:6c:90:4c:
59:e8:e3:10:c0:b9:72:6c:74:6b:05:b8:27:c4:c1:
dc:23:32:af:aa:ba:2c:62:2f:2d:77:93:95:71:8b:
c1:23:f3:0c:34:88:c4:8d:63:99:a3:81:9a:91:44:
4d:b7:7c:b0:cb:d3:cf:87:c0:a5:bc:14:2a:a5:85:
5b:b1:f0:20:52:85:29:25:d0:01:7d:d9:34:5f:fa:
68:3f:13:d6:d8:f0:18:54:0a:95:7d:5b:68:f0:f4:
c2:7b:48:ca:fc:e4:a0:91:02:5b:0e:5d:e6:64:ef:
db:64:e4:42:26:f8:13:e6:27:0e:59:cd:c9:2f:18:
0f:0d:cd:52:98:70:36:68:14:a6:33:59:f8:36:b3:
99:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5E:44:02:22:12:1D:F1:62:69:36:7D:27:88:09:60:D9:6C:18:35
X509v3 Authority Key Identifier:
keyid:55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c0:10:dd:41:c6:07:09:d6:cb:e5:a7:4d:6b:e4:4f:97:1f:
17:48:5c:e9:45:c2:f9:61:00:51:12:2e:d8:46:33:a3:23:58:
93:3a:90:71:74:3a:7d:03:0b:8f:dc:c9:0d:25:49:86:54:4c:
31:df:20:81:95:4a:9b:8c:a0:34:35:ba:f9:0c:0c:76:e7:8d:
a7:00:fe:66:4c:c6:03:97:4c:e4:7d:ff:5c:24:aa:89:8b:a5:
a0:d9:48:b1:90:14:81:55:59:1a:38:dd:e5:96:e6:39:dd:1e:
b2:b0:b6:a3:d7:ce:bf:de:65:be:09:11:2f:54:16:30:1b:6e:
b9:20:dd:86:f8:41:9a:b2:f5:f0:88:2c:55:9c:69:6a:52:bd:
2f:e5:1c:c7:8b:87:0a:18:08:fb:fa:f7:62:25:34:49:b6:42:
80:a3:f2:af:63:27:ff:d0:e1:6d:ec:67:3b:d5:ef:ba:d3:b9:
0a:e6:cd:38:5d:d3:e5:a3:a3:70:53:d7:ce:c7:85:7f:db:b5:
99:19:ae:0e:b6:7f:e4:ac:e6:15:93:56:e6:28:27:a0:4c:42:
7c:91:81:06:a4:69:75:8b:0b:35:2e:44:da:52:bb:2e:29:0a:
2f:7a:d3:d7:40:80:4f:24:15:3b:50:4b:8e:b4:94:90:c0:b7:
fb:0b:04:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTP6G9UjDju9HQgxFYNoSUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YjUzZTg5MzA0MzRjNzJhNTgwN2EwNTUwODJiOTg1OTli
MjcwN2YwHhcNMjUxMTA1MDkwMTEwWhcNMjUxMTA2MDkwMTEwWjAzMTEwLwYDVQQD
Eyg4YzVlNDQwMjIyMTIxZGYxNjI2OTM2N2QyNzg4MDk2MGQ5NmMxODM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7hDb00Kpc18jOfxSvGQutRKEpQw
OJq528oZRW937tovZL+Kd7g4W55cQ9gsuBqbjaTGH7UAF0eprCcXJ2noP965KoFE
QFhCg5/Auymdbctpecq1vT0CqnPENG7i2C7OgfTY5KnPg826wIGw9aYfdiduBTxs
kExZ6OMQwLlybHRrBbgnxMHcIzKvqrosYi8td5OVcYvBI/MMNIjEjWOZo4GakURN
t3ywy9PPh8ClvBQqpYVbsfAgUoUpJdABfdk0X/poPxPW2PAYVAqVfVto8PTCe0jK
/OSgkQJbDl3mZO/bZORCJvgT5icOWc3JLxgPDc1SmHA2aBSmM1n4NrOZIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxeRAIiEh3xYmk2fSeICWDZbBg1MB8GA1UdIwQY
MBaAFFW1PokwQ0xypYB6BVCCuYWZsnB/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJVLWlUQkRUSEtsZ0hvRlVJSzVoWm15Y0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iM2ZkZDctMDg4YS00ZjYyLThjMmEt
OTQ1NDA3YTAxN2IyLzEvVmJVLWlUQkRUSEtsZ0hvRlVJSzVoWm15Y0g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iM2ZkZDctMDg4YS00ZjYyLThjMmEtOTQ1NDA3YTAxN2Iy
LzEvVmJVLWlUQkRUSEtsZ0hvRlVJSzVoWm15Y0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMAQ3UHG
BwnWy+WnTWvkT5cfF0hc6UXC+WEAURIu2EYzoyNYkzqQcXQ6fQMLj9zJDSVJhlRM
Md8ggZVKm4ygNDW6+QwMdueNpwD+ZkzGA5dM5H3/XCSqiYuloNlIsZAUgVVZGjjd
5ZbmOd0esrC2o9fOv95lvgkRL1QWMBtuuSDdhvhBmrL18IgsVZxpalK9L+Ucx4uH
ChgI+/r3YiU0SbZCgKPyr2Mn/9DhbexnO9XvutO5CubNOF3T5aOjcFPXzseFf9u1
mRmuDrZ/5KzmFZNW5ignoExCfJGBBqRpdYsLNS5E2lK7LikKL3rT10CATyQVO1BL
jrSUkMC3+wsEMA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:26:21 2025 by rpki-client