Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
File: VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft (raw, json)
Hash identifier: /4hC/w633iaaGRUs22UYFVDjwhVHI+WUPEux4wi2xXw=
Subject key identifier: 9D:16:DE:5D:FF:4C:C6:7D:CF:63:1D:A7:66:A6:CD:AB:F8:AE:44:FB
Authority key identifier: 54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24
Certificate issuer: /CN=546175f2e829b46657596dd8f32e1f93ecbe0a24
Certificate serial: 019A4EF4A3CD7A99BF98EE59571B51678503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:00:46 +0000
Manifest this update: Tue 04 Nov 2025 13:00:46 +0000
Manifest next update: Wed 05 Nov 2025 13:00:46 +0000
Files and hashes: 1: VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl (hash: cLjkYCEsIwb2rKcghC2QCo9XjfBktNYPmswdWreehMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:a3:cd:7a:99:bf:98:ee:59:57:1b:51:67:85:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546175f2e829b46657596dd8f32e1f93ecbe0a24
Validity
Not Before: Nov 4 13:00:46 2025 GMT
Not After : Nov 5 13:00:46 2025 GMT
Subject: CN=9d16de5dff4cc67dcf631da766a6cdabf8ae44fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:69:90:65:7a:d3:4a:09:91:2d:8f:1f:96:
2a:45:45:e7:14:1d:89:1e:2c:ef:e3:f3:26:53:5c:
23:f2:fb:46:68:b9:98:b5:3d:80:24:6a:ca:60:09:
79:01:9b:e1:d8:ea:16:2e:e2:5d:8e:65:fe:7f:5f:
a2:83:07:de:56:17:5c:67:32:c0:cd:10:49:e7:d4:
89:6f:f2:9a:89:4e:cf:3b:11:06:77:75:5d:37:8a:
5f:87:7d:ba:36:3a:7b:9a:66:da:e8:ea:24:3b:66:
8c:15:58:69:25:7b:3d:8a:1b:8e:18:7c:bf:73:e1:
38:0a:55:31:8b:75:51:1f:3c:d3:fd:83:41:20:15:
1b:67:78:9d:ba:43:31:a2:2c:6c:bf:c4:9f:75:ce:
42:b3:f4:f8:62:9d:42:b5:ec:da:d6:a0:25:1d:51:
76:94:81:d3:c7:23:2d:60:9d:df:9d:90:77:e0:d8:
b8:2a:2a:19:8c:af:8f:02:78:27:8b:b3:c2:4e:6a:
30:fc:95:e0:84:1d:9e:7c:05:fe:df:c2:9f:60:da:
94:56:91:98:7f:db:d8:7b:0d:8b:81:42:1b:0e:99:
73:09:6a:73:0a:c0:9e:19:59:43:6a:d2:0e:80:b5:
21:a5:de:37:d2:4a:b0:73:0c:16:c2:ee:31:89:43:
2b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:16:DE:5D:FF:4C:C6:7D:CF:63:1D:A7:66:A6:CD:AB:F8:AE:44:FB
X509v3 Authority Key Identifier:
keyid:54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0b:3d:b5:de:c3:19:1a:d6:3d:5a:e9:74:fc:d3:c9:2b:6a:
f1:66:f5:19:f8:10:e5:17:5d:86:c6:e6:ba:a4:55:c1:e6:65:
bc:0e:78:20:86:d0:1b:e7:30:e4:b6:17:65:c0:7b:ab:11:6f:
44:d1:53:c2:88:c2:05:b4:f6:76:ce:35:bb:26:08:b2:a9:b8:
8e:8b:3d:01:a8:ce:44:73:55:45:d7:fc:e6:88:ff:68:f1:67:
bc:f8:3f:d6:ce:3e:f3:94:38:da:69:64:0b:5b:09:d2:d2:3b:
88:43:d6:35:91:06:dd:96:37:8a:35:61:8a:60:3b:1b:ef:a3:
b4:3e:7c:65:fe:3f:3b:68:85:da:0d:0a:50:13:04:74:50:95:
b4:e1:91:f0:ec:46:23:e5:5f:e4:93:5e:2f:62:bb:9b:56:7d:
29:6a:49:9c:76:cb:57:ca:65:41:16:49:79:2d:28:0b:39:a1:
a3:c6:fb:66:30:00:f8:c8:ba:6d:9d:28:e1:46:5c:c7:cc:86:
bf:75:2e:a4:cb:64:3d:6e:a1:8d:a1:0d:33:9f:5b:7d:91:75:
24:3c:8e:76:c6:14:2f:0f:e3:54:6b:e1:56:24:fe:fb:c6:56:
5f:e6:60:ad:34:64:14:3f:88:ed:fc:88:49:13:be:bb:c3:9a:
e2:a5:7d:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9KPNepm/mO5ZVxtRZ4UDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjE3NWYyZTgyOWI0NjY1NzU5NmRkOGYzMmUxZjkzZWNi
ZTBhMjQwHhcNMjUxMTA0MTMwMDQ2WhcNMjUxMTA1MTMwMDQ2WjAzMTEwLwYDVQQD
Eyg5ZDE2ZGU1ZGZmNGNjNjdkY2Y2MzFkYTc2NmE2Y2RhYmY4YWU0NGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAhpkGV600oJkS2PH5YqRUXnFB2J
Hizv4/MmU1wj8vtGaLmYtT2AJGrKYAl5AZvh2OoWLuJdjmX+f1+igwfeVhdcZzLA
zRBJ59SJb/KaiU7POxEGd3VdN4pfh326Njp7mmba6OokO2aMFVhpJXs9ihuOGHy/
c+E4ClUxi3VRHzzT/YNBIBUbZ3idukMxoixsv8Sfdc5Cs/T4Yp1Cteza1qAlHVF2
lIHTxyMtYJ3fnZB34Ni4KioZjK+PAngni7PCTmow/JXghB2efAX+38KfYNqUVpGY
f9vYew2LgUIbDplzCWpzCsCeGVlDatIOgLUhpd430kqwcwwWwu4xiUMrlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0W3l3/TMZ9z2Mdp2amzav4rkT7MB8GA1UdIwQY
MBaAFFRhdfLoKbRmV1lt2PMuH5PsvgokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdGMTh1Z3B0R1pYV1czWTh5NGZrLXktQ2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yY2U3NzUtMzdhYS00ODQwLTk4NTIt
YmIxYjBlNDE4YTIxLzEvVkdGMTh1Z3B0R1pYV1czWTh5NGZrLXktQ2lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8yY2U3NzUtMzdhYS00ODQwLTk4NTItYmIxYjBlNDE4YTIx
LzEvVkdGMTh1Z3B0R1pYV1czWTh5NGZrLXktQ2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdAs9td7D
GRrWPVrpdPzTyStq8Wb1GfgQ5RddhsbmuqRVweZlvA54IIbQG+cw5LYXZcB7qxFv
RNFTwojCBbT2ds41uyYIsqm4jos9AajORHNVRdf85oj/aPFnvPg/1s4+85Q42mlk
C1sJ0tI7iEPWNZEG3ZY3ijVhimA7G++jtD58Zf4/O2iF2g0KUBMEdFCVtOGR8OxG
I+Vf5JNeL2K7m1Z9KWpJnHbLV8plQRZJeS0oCzmho8b7ZjAA+Mi6bZ0o4UZcx8yG
v3UupMtkPW6hjaENM59bfZF1JDyOdsYULw/jVGvhViT++8ZWX+ZgrTRkFD+I7fyI
SRO+u8Oa4qV97w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:24:30 2025 by rpki-client