Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
File: vptUWMI322WEjLKsvsbblCP8s6Y.mft (raw, json)
Hash identifier: NjI/wQV0+15RUyFNBeBeCjykTo/AHhf6T2lKN3APWYI=
Subject key identifier: 69:BC:2B:56:78:85:F7:A9:CB:72:22:2D:F7:6C:7B:5E:55:CF:D8:87
Authority key identifier: BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
Certificate issuer: /CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Certificate serial: 019A4D3D0B92830F73EDBE84D6D831453DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
Manifest number: 12A6
Signing time: Tue 04 Nov 2025 05:00:37 +0000
Manifest this update: Tue 04 Nov 2025 05:00:37 +0000
Manifest next update: Wed 05 Nov 2025 05:00:37 +0000
Files and hashes: 1: SPOdZUKsCzIXgJOCF_UL7n1RilU.roa (hash: AvcsY0IcsdeApRna15WxWc9F7nJGA8l55JTs96Qf9tg=)
2: vptUWMI322WEjLKsvsbblCP8s6Y.crl (hash: WgcwC52frCyCvWwhcafLY/fp/TWN4Aeesvl4u7JAEIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:0b:92:83:0f:73:ed:be:84:d6:d8:31:45:3d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Validity
Not Before: Nov 4 05:00:37 2025 GMT
Not After : Nov 5 05:00:37 2025 GMT
Subject: CN=69bc2b567885f7a9cb72222df76c7b5e55cfd887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:28:9f:fc:c5:b2:e4:15:db:47:e1:66:77:6e:
60:6e:00:12:ae:3a:59:3c:ab:21:fe:b9:32:3e:d8:
cc:d4:14:44:fe:a6:26:37:1a:43:09:74:85:fd:d9:
65:32:ed:65:a3:71:1a:b8:81:cc:98:ca:3c:fa:88:
82:33:86:0b:28:93:14:08:28:f3:4f:97:fb:a1:3e:
ec:48:f1:76:40:fc:d3:1e:84:7c:8f:83:ed:2b:31:
99:ed:63:9f:98:6f:da:60:e4:7d:d1:4d:3f:59:c0:
a2:4e:1e:84:03:24:60:26:e7:9a:9e:93:bc:ba:61:
18:a4:84:67:5f:54:76:1f:b6:29:63:0f:6a:f3:d1:
df:a3:d2:85:27:78:76:af:ad:54:a0:c3:0d:a0:95:
cc:14:0f:3d:0f:54:a1:33:88:5c:ee:47:d8:71:a2:
16:7b:87:a8:72:e6:88:06:88:7a:1d:35:ae:a9:58:
af:8d:69:e7:97:81:35:1a:53:7e:34:29:03:57:2e:
af:21:47:17:bb:ed:d2:a6:47:45:4c:63:74:1c:a0:
ff:72:46:84:f1:19:a1:c4:25:c1:a6:84:e8:34:7f:
fd:a4:09:26:b3:b8:73:12:08:38:16:ad:ec:55:d9:
d1:56:aa:70:46:e2:e0:7d:65:67:93:64:95:74:03:
9f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BC:2B:56:78:85:F7:A9:CB:72:22:2D:F7:6C:7B:5E:55:CF:D8:87
X509v3 Authority Key Identifier:
keyid:BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:18:e6:aa:9c:c2:45:d7:f2:1f:e4:bb:d0:c8:ab:c5:04:86:
69:bb:d7:dc:c9:88:86:6d:5f:1e:a9:36:25:b9:19:7b:33:8e:
9b:e5:fa:e2:ca:15:8c:db:2b:ba:db:8c:14:b9:19:a2:4d:31:
13:dc:b3:81:26:01:0e:4e:f6:30:e5:6c:db:44:67:64:93:cd:
ae:96:55:11:e8:9e:56:12:90:48:b3:e8:ff:c3:19:69:0f:58:
0b:f0:13:7e:7e:34:58:ba:e4:08:0d:ba:4a:07:99:9f:41:26:
e9:08:40:00:8a:f7:45:f9:6d:41:d9:23:0f:da:f5:75:77:c0:
c8:b5:a0:65:fc:8a:d4:75:52:57:fd:e7:54:14:94:52:5d:da:
01:2d:1e:8e:70:3c:d4:f8:e9:86:db:17:03:e0:7c:7e:be:81:
cd:c6:0d:c6:e4:95:0b:a0:6a:f1:d5:3e:e8:f0:42:ff:86:69:
a8:8e:a8:59:6d:4d:6f:40:68:c6:e9:b8:22:45:1f:c4:85:84:
fd:25:42:ca:80:38:c4:b4:7e:49:19:d7:ea:29:5b:31:bb:b8:
ff:32:84:30:55:f6:bb:e7:86:6d:dd:d7:73:4f:86:c2:76:c0:
a1:55:4d:4d:61:54:4d:3c:2f:c5:e9:7e:a5:d1:98:51:08:01:
fa:f4:da:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPQuSgw9z7b6E1tgxRT2zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlOWI1NDU4YzIzN2RiNjU4NDhjYjJhY2JlYzZkYjk0MjNm
Y2IzYTYwHhcNMjUxMTA0MDUwMDM3WhcNMjUxMTA1MDUwMDM3WjAzMTEwLwYDVQQD
Eyg2OWJjMmI1Njc4ODVmN2E5Y2I3MjIyMmRmNzZjN2I1ZTU1Y2ZkODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiif/MWy5BXbR+Fmd25gbgASrjpZ
PKsh/rkyPtjM1BRE/qYmNxpDCXSF/dllMu1lo3EauIHMmMo8+oiCM4YLKJMUCCjz
T5f7oT7sSPF2QPzTHoR8j4PtKzGZ7WOfmG/aYOR90U0/WcCiTh6EAyRgJueanpO8
umEYpIRnX1R2H7YpYw9q89Hfo9KFJ3h2r61UoMMNoJXMFA89D1ShM4hc7kfYcaIW
e4eocuaIBoh6HTWuqVivjWnnl4E1GlN+NCkDVy6vIUcXu+3SpkdFTGN0HKD/ckaE
8RmhxCXBpoToNH/9pAkms7hzEgg4Fq3sVdnRVqpwRuLgfWVnk2SVdAOfuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGm8K1Z4hfepy3IiLfdse15Vz9iHMB8GA1UdIwQY
MBaAFL6bVFjCN9tlhIyyrL7G25Qj/LOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jZDFkYjMtMjg3Ny00ZjMyLTgzYzUt
MzcwYjgyZTlmOTBiLzEvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jZDFkYjMtMjg3Ny00ZjMyLTgzYzUtMzcwYjgyZTlmOTBi
LzEvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYhjmqpzC
RdfyH+S70MirxQSGabvX3MmIhm1fHqk2JbkZezOOm+X64soVjNsrutuMFLkZok0x
E9yzgSYBDk72MOVs20RnZJPNrpZVEeieVhKQSLPo/8MZaQ9YC/ATfn40WLrkCA26
SgeZn0Em6QhAAIr3RfltQdkjD9r1dXfAyLWgZfyK1HVSV/3nVBSUUl3aAS0ejnA8
1PjphtsXA+B8fr6BzcYNxuSVC6Bq8dU+6PBC/4ZpqI6oWW1Nb0Boxum4IkUfxIWE
/SVCyoA4xLR+SRnX6ilbMbu4/zKEMFX2u+eGbd3Xc0+GwnbAoVVNTWFUTTwvxel+
pdGYUQgB+vTaFw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:16 2025 by rpki-client