Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
File: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft (raw, json)
Hash identifier: spol1I5qQOLE0Z3Rj8aaXsFqzH37+68wtD5uiJ74u2M=
Subject key identifier: 2A:05:49:0B:16:E2:A5:2F:41:DD:1B:9C:AC:E2:56:A7:A6:4B:8D:2F
Authority key identifier: 56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C
Certificate issuer: /CN=5647798f253c724eb07f2e8ad8c2ed949436499c
Certificate serial: 019A5119FBF65EB0E705F324B5F33F4C86CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
Manifest number: 01FB
Signing time: Tue 04 Nov 2025 23:00:48 +0000
Manifest this update: Tue 04 Nov 2025 23:00:48 +0000
Manifest next update: Wed 05 Nov 2025 23:00:48 +0000
Files and hashes: 1: Pw15r0tJiPvDyuMOBQn_URPGo5I.roa (hash: k7iEyCH3l0LCjD2Op61Rjmw/pHSf07/MBQiciVefF9Q=)
2: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl (hash: ZEHCETt0qBzz3NCw+X4h/QyDQRX364KFvkhCJPux6oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:fb:f6:5e:b0:e7:05:f3:24:b5:f3:3f:4c:86:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5647798f253c724eb07f2e8ad8c2ed949436499c
Validity
Not Before: Nov 4 23:00:48 2025 GMT
Not After : Nov 5 23:00:48 2025 GMT
Subject: CN=2a05490b16e2a52f41dd1b9cace256a7a64b8d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:88:d6:8b:b2:45:02:9f:d0:ab:6e:d1:cd:
31:b3:a7:c0:c7:1b:ab:b1:09:d7:9f:92:35:58:07:
12:bf:29:b8:07:33:ad:1b:dc:5d:82:5c:a1:e4:ff:
41:a0:d1:65:da:ca:2d:ba:74:f9:7f:95:1d:7d:4f:
8d:ff:34:63:57:0c:b0:b3:ff:5e:82:f0:73:7b:29:
7d:26:83:10:e3:23:f3:0b:ee:80:46:d5:e6:24:6f:
5a:8b:d4:06:e6:df:ca:73:11:0a:00:65:96:e1:df:
b3:ea:57:be:fc:ab:6e:72:1e:a1:80:9d:79:79:be:
64:da:71:f3:8f:d3:ea:fc:6f:8d:fc:7f:dd:8d:38:
59:79:b1:6d:fc:f6:27:1a:84:62:57:74:cf:92:f6:
54:c4:5b:4f:f7:5b:75:90:5a:41:31:e8:17:21:f0:
0b:49:e7:75:a3:d4:99:2b:54:29:fb:91:f1:30:56:
a9:b8:2d:8d:6d:ce:a4:7b:9d:76:0c:28:e1:71:72:
e0:42:32:8b:ad:79:5a:12:ed:b2:37:86:ea:32:f5:
df:79:af:1b:bb:03:59:e9:cd:ac:ac:de:62:44:cf:
a3:2e:2c:fe:00:ab:73:4b:1f:fc:6a:ce:6c:66:28:
fe:33:cc:1f:19:1b:59:35:80:fb:2a:f7:ef:dc:a9:
f1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:05:49:0B:16:E2:A5:2F:41:DD:1B:9C:AC:E2:56:A7:A6:4B:8D:2F
X509v3 Authority Key Identifier:
keyid:56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5b:f5:52:3f:d8:f6:3a:61:14:69:55:a8:e2:86:7e:43:b2:
a0:a1:c7:a0:b4:d1:6b:61:1c:59:aa:0a:7a:bd:31:03:dc:19:
13:24:d0:2b:ca:59:cd:ac:d0:24:e0:b0:20:b7:a7:9f:09:83:
5f:c8:d6:e9:7d:ea:30:c9:71:70:b2:a8:66:33:d9:bb:34:37:
e4:62:89:fa:8c:10:a7:5b:15:15:5f:87:ba:38:82:2f:90:e2:
97:dc:61:9e:6c:ca:03:0f:80:0b:ca:ef:e9:c3:26:ab:b6:45:
77:18:a4:69:66:4b:ff:1a:56:1c:f3:d4:80:70:36:a4:4b:18:
34:be:78:82:05:f8:7e:72:dd:9a:23:b1:28:3b:74:d4:cb:84:
b6:8f:92:eb:ae:c5:6d:0a:7f:9f:7e:4a:36:66:e9:d1:8d:0d:
78:5b:da:f6:82:64:0b:bf:9a:b6:ce:20:c2:c9:c2:bc:98:a7:
04:7b:17:0e:f9:78:a3:a9:06:d7:48:12:f1:e0:7f:f0:bb:12:
ed:de:b9:62:0a:bc:1a:7c:81:bb:0f:bb:c0:3b:2a:e8:aa:8c:
dd:28:cc:48:6a:25:fd:f8:81:30:56:37:87:88:b3:f0:38:39:
28:9d:ef:c3:81:62:43:89:e3:a8:1e:5c:0a:ec:a5:11:09:6f:
02:d5:be:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRGfv2XrDnBfMktfM/TIbLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NDc3OThmMjUzYzcyNGViMDdmMmU4YWQ4YzJlZDk0OTQz
NjQ5OWMwHhcNMjUxMTA0MjMwMDQ4WhcNMjUxMTA1MjMwMDQ4WjAzMTEwLwYDVQQD
EygyYTA1NDkwYjE2ZTJhNTJmNDFkZDFiOWNhY2UyNTZhN2E2NGI4ZDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4aI1ouyRQKf0Ktu0c0xs6fAxxur
sQnXn5I1WAcSvym4BzOtG9xdglyh5P9BoNFl2sotunT5f5UdfU+N/zRjVwyws/9e
gvBzeyl9JoMQ4yPzC+6ARtXmJG9ai9QG5t/KcxEKAGWW4d+z6le+/Ktuch6hgJ15
eb5k2nHzj9Pq/G+N/H/djThZebFt/PYnGoRiV3TPkvZUxFtP91t1kFpBMegXIfAL
Sed1o9SZK1Qp+5HxMFapuC2Nbc6ke512DCjhcXLgQjKLrXlaEu2yN4bqMvXfea8b
uwNZ6c2srN5iRM+jLiz+AKtzSx/8as5sZij+M8wfGRtZNYD7Kvfv3KnxMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCoFSQsW4qUvQd0bnKziVqemS40vMB8GA1UdIwQY
MBaAFFZHeY8lPHJOsH8uitjC7ZSUNkmcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmtkNWp5VThjazZ3Znk2SzJNTHRsSlEyU1p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80YzRmNjYtOTAzOS00ZmIxLWJkNDkt
MWE0YjZlZGIwM2E3LzEvVmtkNWp5VThjazZ3Znk2SzJNTHRsSlEyU1p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC80YzRmNjYtOTAzOS00ZmIxLWJkNDktMWE0YjZlZGIwM2E3
LzEvVmtkNWp5VThjazZ3Znk2SzJNTHRsSlEyU1p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAclv1Uj/Y
9jphFGlVqOKGfkOyoKHHoLTRa2EcWaoKer0xA9wZEyTQK8pZzazQJOCwILennwmD
X8jW6X3qMMlxcLKoZjPZuzQ35GKJ+owQp1sVFV+HujiCL5Dil9xhnmzKAw+AC8rv
6cMmq7ZFdxikaWZL/xpWHPPUgHA2pEsYNL54ggX4fnLdmiOxKDt01MuEto+S667F
bQp/n35KNmbp0Y0NeFva9oJkC7+ats4gwsnCvJinBHsXDvl4o6kG10gS8eB/8LsS
7d65Ygq8GnyBuw+7wDsq6KqM3SjMSGol/fiBMFY3h4iz8Dg5KJ3vw4FiQ4njqB5c
CuylEQlvAtW+BA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:37:16 2025 by rpki-client