Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
File: VEqCql4utxcZt_nwSaMHsSRUSX4.mft (raw, json)
Hash identifier: Q3O8bn4Kust+MjuT119NbHlYYJng7k1rtatTV7EpDqw=
Subject key identifier: 52:B3:1E:26:29:66:93:5D:90:84:CB:0E:39:BC:27:B3:95:50:F9:B3
Authority key identifier: 54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
Certificate issuer: /CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Certificate serial: 019A51506AE73D895871369115D6E3F579F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
Manifest number: 86
Signing time: Wed 05 Nov 2025 00:00:15 +0000
Manifest this update: Wed 05 Nov 2025 00:00:15 +0000
Manifest next update: Thu 06 Nov 2025 00:00:15 +0000
Files and hashes: 1: D6r05J6D3sA79ZZwq1eEGmeTVdE.roa (hash: 4BzqyVO9j3Co5UPBfledlmasXeXWcyyXJrp3dBPxaTE=)
2: VEqCql4utxcZt_nwSaMHsSRUSX4.crl (hash: GbIUr0u1oo4UMGpMnCnc5LqGCX/+ZWtYHTx7hZ3sU70=)
3: w-Q5BuRRipFl39NqReThB1XFeBI.roa (hash: rd7Mv0pn5jmnyPB8+QCPb62fzHqKtbWhfZxpEbX+YvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:6a:e7:3d:89:58:71:36:91:15:d6:e3:f5:79:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Validity
Not Before: Nov 5 00:00:15 2025 GMT
Not After : Nov 6 00:00:15 2025 GMT
Subject: CN=52b31e262966935d9084cb0e39bc27b39550f9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:6d:09:36:82:26:b2:c7:1c:38:78:b9:df:
13:79:e4:3a:f9:43:cf:8d:9e:62:0f:24:44:4d:42:
cc:2c:8a:0a:be:3c:2e:30:b0:b8:ba:2a:e4:f6:34:
31:76:46:5f:d2:aa:88:05:20:2f:ef:d0:e2:7c:49:
3a:b1:33:58:de:5f:61:9b:57:82:34:3f:d9:a2:b4:
1f:63:06:43:92:d4:94:45:55:a5:72:1b:41:17:96:
dd:02:a6:bd:81:de:42:2d:03:c7:c7:aa:ab:54:b9:
6a:21:16:a4:58:8f:4b:71:d3:c7:5a:a5:04:82:14:
27:26:60:3c:a6:5c:82:88:c3:9e:8a:3d:d5:5a:d2:
7a:f8:a6:25:69:b0:ec:f7:32:ba:81:64:5b:39:9a:
6f:79:68:6c:5b:b8:52:5c:54:e1:a4:2e:0e:80:b1:
57:ac:11:da:4e:8c:66:55:8f:a1:bd:81:1a:58:f0:
43:ce:51:a8:70:e6:bc:b6:04:9c:43:e3:3a:cb:ca:
d6:b4:15:12:3c:3d:16:ac:f6:a6:07:0d:e6:66:95:
87:28:ad:66:97:18:c0:95:65:a9:7e:11:87:8a:b1:
9a:ef:8e:48:6b:be:43:79:d2:46:69:bf:7d:b4:89:
d9:a0:84:67:06:73:8d:01:9b:ca:ed:32:68:01:d0:
90:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B3:1E:26:29:66:93:5D:90:84:CB:0E:39:BC:27:B3:95:50:F9:B3
X509v3 Authority Key Identifier:
keyid:54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:09:9d:13:84:f3:95:46:a5:98:23:44:c2:94:7d:45:83:96:
a1:78:2f:ca:38:b7:b3:25:4c:d3:d5:08:c8:fb:94:b0:38:2d:
7a:44:97:26:8d:12:00:5b:39:7b:25:e1:c1:11:44:91:3d:98:
d3:50:2b:6c:0a:ff:c7:8c:a3:30:c7:f8:8b:41:a0:a1:6f:d1:
de:fe:9a:d3:b1:d7:69:8e:a6:c6:f6:6d:90:4c:54:ef:6c:8d:
23:57:4a:0d:a7:ce:e1:5d:0c:7f:df:2b:81:86:16:fc:0c:38:
9d:cd:2c:f5:46:49:e2:59:51:9b:f2:37:53:ea:34:a6:8d:8d:
f8:df:f0:8b:f9:84:4e:3a:19:ef:67:ab:f5:f1:ad:a3:87:3f:
1c:6d:28:b2:86:f5:a2:29:47:ea:c5:ef:0b:73:22:9e:d6:8e:
02:0e:35:12:48:12:d0:4c:94:2f:3f:71:5c:71:69:ed:72:eb:
a2:19:41:44:d8:93:ec:cf:a3:76:25:97:d6:62:51:3e:49:23:
42:27:8c:58:96:21:e0:a8:2e:10:ff:a9:e6:9a:51:04:e1:df:
67:51:7c:9d:7a:c6:02:01:4e:8d:70:e7:0e:f3:23:55:d8:6c:
77:29:85:c5:ba:82:0f:3f:da:f3:7a:ac:25:2e:be:a2:fb:c0:
c7:15:65:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUGrnPYlYcTaRFdbj9Xn2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NGE4MmFhNWUyZWI3MTcxOWI3ZjlmMDQ5YTMwN2IxMjQ1
NDQ5N2UwHhcNMjUxMTA1MDAwMDE1WhcNMjUxMTA2MDAwMDE1WjAzMTEwLwYDVQQD
Eyg1MmIzMWUyNjI5NjY5MzVkOTA4NGNiMGUzOWJjMjdiMzk1NTBmOWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFZtCTaCJrLHHDh4ud8TeeQ6+UPP
jZ5iDyRETULMLIoKvjwuMLC4uirk9jQxdkZf0qqIBSAv79DifEk6sTNY3l9hm1eC
ND/ZorQfYwZDktSURVWlchtBF5bdAqa9gd5CLQPHx6qrVLlqIRakWI9LcdPHWqUE
ghQnJmA8plyCiMOeij3VWtJ6+KYlabDs9zK6gWRbOZpveWhsW7hSXFThpC4OgLFX
rBHaToxmVY+hvYEaWPBDzlGocOa8tgScQ+M6y8rWtBUSPD0WrPamBw3mZpWHKK1m
lxjAlWWpfhGHirGa745Ia75DedJGab99tInZoIRnBnONAZvK7TJoAdCQ4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKzHiYpZpNdkITLDjm8J7OVUPmzMB8GA1UdIwQY
MBaAFFRKgqpeLrcXGbf58EmjB7EkVEl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkVxQ3FsNHV0eGNadF9ud1NhTUhzU1JVU1g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9jNTAxOGMtZmRjNi00MTRiLWJlZWYt
MDJkZTAxMjQyMjhlLzEvVkVxQ3FsNHV0eGNadF9ud1NhTUhzU1JVU1g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9jNTAxOGMtZmRjNi00MTRiLWJlZWYtMDJkZTAxMjQyMjhl
LzEvVkVxQ3FsNHV0eGNadF9ud1NhTUhzU1JVU1g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcAmdE4Tz
lUalmCNEwpR9RYOWoXgvyji3syVM09UIyPuUsDgtekSXJo0SAFs5eyXhwRFEkT2Y
01ArbAr/x4yjMMf4i0GgoW/R3v6a07HXaY6mxvZtkExU72yNI1dKDafO4V0Mf98r
gYYW/Aw4nc0s9UZJ4llRm/I3U+o0po2N+N/wi/mETjoZ72er9fGto4c/HG0osob1
oilH6sXvC3MintaOAg41EkgS0EyULz9xXHFp7XLrohlBRNiT7M+jdiWX1mJRPkkj
QieMWJYh4KguEP+p5ppRBOHfZ1F8nXrGAgFOjXDnDvMjVdhsdymFxbqCDz/a83qs
JS6+ovvAxxVlAw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:51:57 2025 by rpki-client