Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
File: VOYQwqvTZkwRIEWA90iZZVXCIiU.mft (raw, json)
Hash identifier: majUMeAPDQ0dYR4F9CS9qb+n4B/c0DJ4lahfuw16GXc=
Subject key identifier: 23:5C:74:7F:34:2B:63:1B:A9:2F:F0:8A:46:55:51:B1:2C:A4:60:88
Authority key identifier: 54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25
Certificate issuer: /CN=54e610c2abd3664c11204580f748996555c22225
Certificate serial: 019A54C03B2351FA3F9A1FC37ECE18931789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
Manifest number: 055B
Signing time: Wed 05 Nov 2025 16:01:15 +0000
Manifest this update: Wed 05 Nov 2025 16:01:15 +0000
Manifest next update: Thu 06 Nov 2025 16:01:15 +0000
Files and hashes: 1: 911mu2Suj6Dc73U5ClpiV6uw4no.roa (hash: qEURFtDeY+J3VwVWw/O3Pp8clugIYSrMPdnPar+j3OQ=)
2: VOYQwqvTZkwRIEWA90iZZVXCIiU.crl (hash: kDHmFuxubvxZKLqoOZ0oo3K3VH8gPKvybz78iIv2vKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:3b:23:51:fa:3f:9a:1f:c3:7e:ce:18:93:17:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e610c2abd3664c11204580f748996555c22225
Validity
Not Before: Nov 5 16:01:15 2025 GMT
Not After : Nov 6 16:01:15 2025 GMT
Subject: CN=235c747f342b631ba92ff08a465551b12ca46088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:9a:c7:31:e1:e0:31:ce:01:80:ec:e5:df:
48:9f:f3:44:ca:81:a0:fc:9e:ff:fb:a9:91:a1:48:
b4:b5:1d:ca:6c:20:7b:b3:b8:5c:83:af:c6:8f:53:
60:e2:cb:b8:c9:a7:00:29:fe:7f:29:40:68:98:4c:
d5:0e:98:b4:11:96:b6:34:5d:5c:42:7f:ee:71:e8:
7c:eb:29:2b:0c:28:37:ac:f5:1d:b4:54:f3:71:34:
d0:dc:96:b4:e5:c2:0b:df:67:a5:6f:59:93:26:c5:
48:2f:a2:1e:88:85:96:a8:7b:31:b8:cf:74:6b:f9:
ed:f8:f9:03:8a:96:28:19:ce:f9:9e:f6:1d:55:49:
cc:a9:4e:b5:3a:58:7d:ee:38:c6:c9:84:9e:31:f8:
9b:00:da:73:0a:ca:fb:c4:e7:99:ed:4b:47:de:fd:
24:77:f7:74:45:bd:6f:ab:b1:45:6e:65:78:ff:2e:
1d:c9:85:58:6b:e4:01:1b:fa:d2:a7:73:8a:99:5e:
d5:bb:7e:71:a9:e4:ea:30:85:28:9a:de:f7:f9:ce:
e1:ef:49:3c:89:89:fb:66:c3:ca:5d:47:5c:93:01:
e6:79:33:b7:c1:ad:cd:3f:1f:2e:14:86:69:d5:2c:
7c:95:68:38:ff:be:85:c0:44:89:01:78:7b:1f:6b:
e4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5C:74:7F:34:2B:63:1B:A9:2F:F0:8A:46:55:51:B1:2C:A4:60:88
X509v3 Authority Key Identifier:
keyid:54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:77:a3:a3:b7:9d:26:ea:e5:d6:15:25:c7:da:4c:1f:64:09:
55:82:be:99:7f:ba:95:50:16:a7:8e:dd:ac:ac:76:fb:d5:19:
73:6a:13:76:7d:20:eb:ed:eb:72:a4:bc:71:65:92:a8:0a:e0:
83:8d:ec:58:fb:fb:ad:d1:aa:c4:09:ad:5f:00:3f:f6:93:28:
b9:f4:c1:5c:da:d2:7e:81:ca:f0:49:44:3a:5c:37:76:cc:72:
50:b3:47:b4:bd:da:fa:5a:2b:64:40:ec:69:7f:53:81:7f:c9:
61:84:9b:f1:f0:03:52:af:a2:af:49:39:39:34:76:1c:8e:de:
71:4a:d6:d7:d7:90:41:c0:58:56:94:41:64:6e:4f:9e:53:ae:
51:8a:2e:d4:0f:81:88:c0:05:3d:83:47:c4:6b:3f:4d:e6:90:
e7:3d:81:0e:93:96:0a:6c:3c:d2:f3:aa:6f:0d:8d:37:ce:41:
f7:b2:36:2d:bb:5d:80:63:57:98:dc:f7:3b:c0:74:c4:3c:90:
3f:85:fe:f5:5d:a7:3f:80:e3:0d:8c:59:c0:4d:30:5a:65:7f:
9b:57:b4:cb:ef:88:46:7f:f9:d6:85:36:e3:6c:f6:2d:d0:63:
9a:e2:81:40:37:f6:72:6c:d7:87:b6:43:e0:ad:95:c2:ae:2b:
e9:61:02:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUwDsjUfo/mh/Dfs4YkxeJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZTYxMGMyYWJkMzY2NGMxMTIwNDU4MGY3NDg5OTY1NTVj
MjIyMjUwHhcNMjUxMTA1MTYwMTE1WhcNMjUxMTA2MTYwMTE1WjAzMTEwLwYDVQQD
EygyMzVjNzQ3ZjM0MmI2MzFiYTkyZmYwOGE0NjU1NTFiMTJjYTQ2MDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgWaxzHh4DHOAYDs5d9In/NEyoGg
/J7/+6mRoUi0tR3KbCB7s7hcg6/Gj1Ng4su4yacAKf5/KUBomEzVDpi0EZa2NF1c
Qn/uceh86ykrDCg3rPUdtFTzcTTQ3Ja05cIL32elb1mTJsVIL6IeiIWWqHsxuM90
a/nt+PkDipYoGc75nvYdVUnMqU61Olh97jjGyYSeMfibANpzCsr7xOeZ7UtH3v0k
d/d0Rb1vq7FFbmV4/y4dyYVYa+QBG/rSp3OKmV7Vu35xqeTqMIUomt73+c7h70k8
iYn7ZsPKXUdckwHmeTO3wa3NPx8uFIZp1Sx8lWg4/76FwESJAXh7H2vkLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNcdH80K2MbqS/wikZVUbEspGCIMB8GA1UdIwQY
MBaAFFTmEMKr02ZMESBFgPdImWVVwiIlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk9ZUXdxdlRaa3dSSUVXQTkwaVpaVlhDSWlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mMjAzM2EtMjBlNy00NjFlLWE1NmIt
NDg5ZWUwZjFlZTYzLzEvVk9ZUXdxdlRaa3dSSUVXQTkwaVpaVlhDSWlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9mMjAzM2EtMjBlNy00NjFlLWE1NmItNDg5ZWUwZjFlZTYz
LzEvVk9ZUXdxdlRaa3dSSUVXQTkwaVpaVlhDSWlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHejo7ed
Jurl1hUlx9pMH2QJVYK+mX+6lVAWp47drKx2+9UZc2oTdn0g6+3rcqS8cWWSqArg
g43sWPv7rdGqxAmtXwA/9pMoufTBXNrSfoHK8ElEOlw3dsxyULNHtL3a+lorZEDs
aX9TgX/JYYSb8fADUq+ir0k5OTR2HI7ecUrW19eQQcBYVpRBZG5PnlOuUYou1A+B
iMAFPYNHxGs/TeaQ5z2BDpOWCmw80vOqbw2NN85B97I2LbtdgGNXmNz3O8B0xDyQ
P4X+9V2nP4DjDYxZwE0wWmV/m1e0y++IRn/51oU242z2LdBjmuKBQDf2cmzXh7ZD
4K2Vwq4r6WECkA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:50:14 2025 by rpki-client