Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
File: vhqIfnZTot5E8TFj4YcDcyaimgM.mft (raw, json)
Hash identifier: XIKKIP1nH19nu2uRk8ZmSdWH3+N5gxtLzlh3bpvTZuk=
Subject key identifier: 84:2A:14:9B:C8:5B:46:66:E9:51:B1:E9:BA:0E:39:F7:90:A0:D3:09
Authority key identifier: BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
Certificate issuer: /CN=be1a887e7653a2de44f13163e187037326a29a03
Certificate serial: 019A4EF4D7A9088690EDD21FB16B91AE5780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 13:01:00 +0000
Manifest this update: Tue 04 Nov 2025 13:01:00 +0000
Manifest next update: Wed 05 Nov 2025 13:01:00 +0000
Files and hashes: 1: Ae-diP3rVk-4sa-PXAYgbcBanm4.roa (hash: u0iGxdBhci5JERVXq9GDeBfY++asc/728T5ZMln1pyE=)
2: Z9qZa3inYQ6MRNBOPIdAZNAoS4Y.roa (hash: hXK11vHnwMejj7JOnaAkUByhg12mm0SXJ7OP6kT8Ve8=)
3: vhqIfnZTot5E8TFj4YcDcyaimgM.crl (hash: sSvQL0gObnaULmUmtmCJLnFunzK8JhVxXxqO373Oa+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:d7:a9:08:86:90:ed:d2:1f:b1:6b:91:ae:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1a887e7653a2de44f13163e187037326a29a03
Validity
Not Before: Nov 4 13:01:00 2025 GMT
Not After : Nov 5 13:01:00 2025 GMT
Subject: CN=842a149bc85b4666e951b1e9ba0e39f790a0d309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:be:68:92:f8:1d:c2:87:e1:75:63:8d:f8:c4:
2e:e3:93:8d:5f:c5:be:fa:79:1b:c6:fb:30:7d:2d:
af:81:cc:d4:ed:9b:6b:72:39:04:35:e6:a3:0c:3f:
15:20:14:a7:83:c4:c2:bd:b0:b4:74:fb:a2:87:ae:
3b:4f:45:0c:75:dd:c7:d5:43:15:52:57:05:8c:44:
37:04:3a:52:54:7a:ed:6e:94:cc:96:4c:92:79:00:
3c:03:bb:0c:f6:6a:03:a2:4d:87:bf:55:65:86:fa:
7d:0e:39:13:7d:b5:25:1f:8f:3e:06:f5:b8:3d:59:
1c:25:11:17:79:d0:09:07:23:4a:25:cc:6c:5c:a2:
a3:b2:ca:1d:6a:69:b5:dc:28:82:4e:9b:de:b6:7c:
ac:71:68:85:7b:29:f5:d5:06:d5:58:62:ef:b4:ec:
c5:52:8f:d1:e0:af:ed:ee:dc:5b:02:22:bb:8c:70:
4a:f8:0d:ef:4c:6b:e8:6c:df:32:8a:b8:33:18:57:
49:57:ac:44:d4:14:e2:47:0e:23:bc:9a:18:c4:fe:
73:04:7c:ab:a5:a4:94:7e:54:14:d1:d6:5f:29:0d:
6b:3a:e6:25:ae:9e:a9:50:42:b0:58:8d:88:26:de:
da:a4:ca:85:97:cc:d8:a2:c6:57:6a:13:79:68:c0:
87:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2A:14:9B:C8:5B:46:66:E9:51:B1:E9:BA:0E:39:F7:90:A0:D3:09
X509v3 Authority Key Identifier:
keyid:BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:11:1b:cc:68:81:46:70:3c:9a:24:d8:6c:81:64:bd:c4:78:
dd:3c:79:f1:21:a0:a2:32:89:b9:0e:8a:b6:2b:ed:60:2c:36:
ff:c9:f2:17:55:78:cf:3b:a8:62:9e:7d:b0:af:7f:ea:9f:2d:
5e:dc:80:b9:df:71:94:6d:7c:15:69:fc:3b:a1:bb:d2:4f:fb:
21:aa:7e:c0:b3:e5:2c:db:38:ae:24:06:59:d6:b7:27:3b:af:
14:16:21:d7:ec:d9:39:4c:9c:95:83:75:ed:54:82:64:74:31:
6f:e8:2b:89:23:0d:d5:1d:ef:9c:10:e0:a4:bd:75:7e:e4:95:
25:54:6a:3b:66:4b:bc:68:c8:e6:2d:f9:d1:99:0a:7e:a0:b2:
bb:1e:19:66:dd:07:11:0e:dc:2e:8b:6a:02:f6:c2:8a:a6:09:
aa:2f:0d:8d:7c:ff:15:7a:56:ab:b4:34:a4:b8:c1:e1:4a:b1:
3f:13:9c:e3:de:96:6e:0b:6b:f6:ba:49:41:91:36:05:6b:8d:
4d:91:04:75:cd:67:40:4c:28:ed:e7:99:7d:0b:0e:51:ce:66:
e1:ad:bd:84:7a:01:89:14:b6:d3:c1:85:ff:1a:93:4f:8e:cf:
75:82:19:d3:d3:7e:cf:6d:35:88:5f:b2:61:15:86:fe:9c:5b:
41:f4:8b:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9NepCIaQ7dIfsWuRrleAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMWE4ODdlNzY1M2EyZGU0NGYxMzE2M2UxODcwMzczMjZh
MjlhMDMwHhcNMjUxMTA0MTMwMTAwWhcNMjUxMTA1MTMwMTAwWjAzMTEwLwYDVQQD
Eyg4NDJhMTQ5YmM4NWI0NjY2ZTk1MWIxZTliYTBlMzlmNzkwYTBkMzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy75okvgdwofhdWON+MQu45ONX8W+
+nkbxvswfS2vgczU7ZtrcjkENeajDD8VIBSng8TCvbC0dPuih647T0UMdd3H1UMV
UlcFjEQ3BDpSVHrtbpTMlkySeQA8A7sM9moDok2Hv1Vlhvp9DjkTfbUlH48+BvW4
PVkcJREXedAJByNKJcxsXKKjssodamm13CiCTpvetnyscWiFeyn11QbVWGLvtOzF
Uo/R4K/t7txbAiK7jHBK+A3vTGvobN8yirgzGFdJV6xE1BTiRw4jvJoYxP5zBHyr
paSUflQU0dZfKQ1rOuYlrp6pUEKwWI2IJt7apMqFl8zYosZXahN5aMCHhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQqFJvIW0Zm6VGx6boOOfeQoNMJMB8GA1UdIwQY
MBaAFL4aiH52U6LeRPExY+GHA3MmopoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmhxSWZuWlRvdDVFOFRGajRZY0RjeWFpbWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84YjQ0M2UtZjNjOC00YmEwLTllOTYt
ODZjNTQxY2E5ZDcxLzEvdmhxSWZuWlRvdDVFOFRGajRZY0RjeWFpbWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC84YjQ0M2UtZjNjOC00YmEwLTllOTYtODZjNTQxY2E5ZDcx
LzEvdmhxSWZuWlRvdDVFOFRGajRZY0RjeWFpbWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBEbzGiB
RnA8miTYbIFkvcR43Tx58SGgojKJuQ6KtivtYCw2/8nyF1V4zzuoYp59sK9/6p8t
XtyAud9xlG18FWn8O6G70k/7Iap+wLPlLNs4riQGWda3JzuvFBYh1+zZOUyclYN1
7VSCZHQxb+griSMN1R3vnBDgpL11fuSVJVRqO2ZLvGjI5i350ZkKfqCyux4ZZt0H
EQ7cLotqAvbCiqYJqi8NjXz/FXpWq7Q0pLjB4UqxPxOc496Wbgtr9rpJQZE2BWuN
TZEEdc1nQEwo7eeZfQsOUc5m4a29hHoBiRS208GF/xqTT47PdYIZ09N+z201iF+y
YRWG/pxbQfSLEw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:48 2025 by rpki-client