Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
File: VutqX6PSF6LufUpi2EYaZ5PtXLM.mft (raw, json)
Hash identifier: XVejdnBKcPPDG2d+hLp39ii0y6klmZWmwYuahn3wYkY=
Subject key identifier: 26:C8:A5:75:A9:7B:E6:C3:05:C6:5B:D8:24:CB:E9:A6:F6:EE:C5:ED
Authority key identifier: 56:EB:6A:5F:A3:D2:17:A2:EE:7D:4A:62:D8:46:1A:67:93:ED:5C:B3
Certificate issuer: /CN=56eb6a5fa3d217a2ee7d4a62d8461a6793ed5cb3
Certificate serial: 019A503DB50A1D374751A542B6C6E5CE29C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
Manifest number: 0AD2
Signing time: Tue 04 Nov 2025 19:00:12 +0000
Manifest this update: Tue 04 Nov 2025 19:00:12 +0000
Manifest next update: Wed 05 Nov 2025 19:00:12 +0000
Files and hashes: 1: C1sfui3_F27EORD1FFTIF_PXuck.roa (hash: L6fwO735NsCUbgUMMTGbvgV3NoYMTpTeYzX/vL5LjfM=)
2: VutqX6PSF6LufUpi2EYaZ5PtXLM.crl (hash: LijHhwl1SBGW0D4IueGuDpoxm7oCpjf6a1HoirpOJmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:b5:0a:1d:37:47:51:a5:42:b6:c6:e5:ce:29:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56eb6a5fa3d217a2ee7d4a62d8461a6793ed5cb3
Validity
Not Before: Nov 4 19:00:12 2025 GMT
Not After : Nov 5 19:00:12 2025 GMT
Subject: CN=26c8a575a97be6c305c65bd824cbe9a6f6eec5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6e:46:e3:69:53:6f:bb:d6:56:be:40:8c:a5:
c2:3e:1b:dc:13:12:88:20:a6:26:dd:3c:30:c0:42:
99:89:b0:29:35:21:22:13:8c:ae:2b:d3:68:38:d4:
a9:a0:41:8c:42:b0:d8:a3:13:1e:60:96:05:b4:76:
e3:84:c3:17:39:11:11:b1:4a:65:b2:3c:2c:10:c7:
cc:29:b4:a7:31:a4:30:16:38:96:dd:84:4f:1a:0c:
2d:a8:e9:39:65:c2:f1:99:9b:9b:8d:a1:be:7e:53:
91:5c:57:02:d6:c5:fc:33:93:80:ea:6b:5f:30:7a:
95:3c:f4:af:76:4d:d6:d8:dc:f1:a8:68:c5:00:b7:
af:33:7b:bd:66:ec:e3:02:03:7c:d6:bd:30:26:34:
15:33:5b:bf:43:d7:d2:5e:c4:c3:ed:d8:d9:7c:4e:
ba:dc:c3:dd:e1:42:d1:c1:97:87:51:63:3a:e1:27:
d6:5a:67:3e:27:7f:c5:83:c0:cf:a8:58:e3:5e:09:
31:52:06:44:b8:9d:34:b3:9a:e9:96:29:0b:21:1c:
af:dd:2c:bf:80:18:98:ad:f3:f3:20:3c:c1:de:ae:
cf:c8:c9:a0:56:f6:5d:9c:50:23:6f:44:7c:60:c8:
39:c4:9c:cb:3b:d9:22:a0:5f:87:69:f1:24:73:0b:
8c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C8:A5:75:A9:7B:E6:C3:05:C6:5B:D8:24:CB:E9:A6:F6:EE:C5:ED
X509v3 Authority Key Identifier:
keyid:56:EB:6A:5F:A3:D2:17:A2:EE:7D:4A:62:D8:46:1A:67:93:ED:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8f:96:02:e8:d7:69:3a:75:0b:60:9c:d0:50:40:66:f0:d2:
2c:b6:d2:ea:93:69:4b:c4:60:04:c5:4b:23:9b:2e:02:56:1a:
2e:95:65:82:79:6d:8b:18:31:6a:74:95:9a:92:4d:41:83:33:
30:5b:5d:70:16:67:f1:8d:cf:c7:fd:7b:53:f3:24:dd:2c:9e:
2d:e4:52:6b:29:f8:03:a5:be:a8:42:ae:68:c9:d8:e6:29:8a:
49:b8:3e:22:07:73:09:46:88:ce:cb:da:1e:a0:b3:64:51:dd:
88:4e:bf:ab:e3:e2:11:ca:e3:33:7c:ee:80:bf:ba:0f:77:33:
5a:2a:11:81:2e:43:31:15:83:48:37:a8:ff:d1:07:61:08:86:
97:8f:75:66:7d:87:70:f9:8b:04:82:9f:ae:13:ca:dc:7a:d3:
a0:ef:cd:56:e3:ca:c7:e2:fb:10:3b:f2:d3:36:f6:da:90:4c:
34:b1:db:96:2b:f4:01:fc:eb:37:61:74:bc:dc:8e:77:da:52:
25:5c:ea:1d:90:d7:f5:1b:fc:3e:c4:1b:36:92:12:50:3e:5c:
4e:6e:80:58:d8:07:6c:c5:45:08:63:da:ad:1e:c7:58:3e:ab:
1d:15:19:e4:3b:ce:ac:63:30:1a:43:55:8a:63:15:a0:48:25:
79:3e:6f:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPbUKHTdHUaVCtsblzinDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZWI2YTVmYTNkMjE3YTJlZTdkNGE2MmQ4NDYxYTY3OTNl
ZDVjYjMwHhcNMjUxMTA0MTkwMDEyWhcNMjUxMTA1MTkwMDEyWjAzMTEwLwYDVQQD
EygyNmM4YTU3NWE5N2JlNmMzMDVjNjViZDgyNGNiZTlhNmY2ZWVjNWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG5G42lTb7vWVr5AjKXCPhvcExKI
IKYm3TwwwEKZibApNSEiE4yuK9NoONSpoEGMQrDYoxMeYJYFtHbjhMMXORERsUpl
sjwsEMfMKbSnMaQwFjiW3YRPGgwtqOk5ZcLxmZubjaG+flORXFcC1sX8M5OA6mtf
MHqVPPSvdk3W2NzxqGjFALevM3u9ZuzjAgN81r0wJjQVM1u/Q9fSXsTD7djZfE66
3MPd4ULRwZeHUWM64SfWWmc+J3/Fg8DPqFjjXgkxUgZEuJ00s5rplikLIRyv3Sy/
gBiYrfPzIDzB3q7PyMmgVvZdnFAjb0R8YMg5xJzLO9kioF+HafEkcwuMIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbIpXWpe+bDBcZb2CTL6ab27sXtMB8GA1UdIwQY
MBaAFFbral+j0hei7n1KYthGGmeT7VyzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnV0cVg2UFNGNkx1ZlVwaTJFWWFaNVB0WExNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jMjU0MzUtZDIzYS00MWEzLWJjNWUt
NTNlY2M2NjU1ZjZiLzEvVnV0cVg2UFNGNkx1ZlVwaTJFWWFaNVB0WExNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jMjU0MzUtZDIzYS00MWEzLWJjNWUtNTNlY2M2NjU1ZjZi
LzEvVnV0cVg2UFNGNkx1ZlVwaTJFWWFaNVB0WExNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4+WAujX
aTp1C2Cc0FBAZvDSLLbS6pNpS8RgBMVLI5suAlYaLpVlgnltixgxanSVmpJNQYMz
MFtdcBZn8Y3Px/17U/Mk3SyeLeRSayn4A6W+qEKuaMnY5imKSbg+IgdzCUaIzsva
HqCzZFHdiE6/q+PiEcrjM3zugL+6D3czWioRgS5DMRWDSDeo/9EHYQiGl491Zn2H
cPmLBIKfrhPK3HrToO/NVuPKx+L7EDvy0zb22pBMNLHbliv0AfzrN2F0vNyOd9pS
JVzqHZDX9Rv8PsQbNpISUD5cTm6AWNgHbMVFCGParR7HWD6rHRUZ5DvOrGMwGkNV
imMVoEgleT5vFw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:56:35 2025 by rpki-client