Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
File: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft (raw, json)
Hash identifier: r/mUUN5AdvjHrxPklxgFXAxmTFRj2No87OUo2ugcW1k=
Subject key identifier: 95:0F:0D:87:86:D5:5A:C4:C3:BC:53:F4:22:67:65:8A:7C:BC:43:6B
Authority key identifier: BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
Certificate issuer: /CN=bea7769343c691f675bb369253cb3f6fc304b01f
Certificate serial: 019A4D747EE8E24DD2992E4D08DB70828F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
Manifest number: 0AAF
Signing time: Tue 04 Nov 2025 06:01:11 +0000
Manifest this update: Tue 04 Nov 2025 06:01:11 +0000
Manifest next update: Wed 05 Nov 2025 06:01:11 +0000
Files and hashes: 1: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl (hash: Oaqu8BkE91WHHcoTxiwWM1IDUrCPrRta3OMJbGWnOxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:7e:e8:e2:4d:d2:99:2e:4d:08:db:70:82:8f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea7769343c691f675bb369253cb3f6fc304b01f
Validity
Not Before: Nov 4 06:01:11 2025 GMT
Not After : Nov 5 06:01:11 2025 GMT
Subject: CN=950f0d8786d55ac4c3bc53f42267658a7cbc436b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ae:03:0a:16:5a:b0:24:b1:dc:6f:6a:b1:df:
83:d8:ea:26:3c:cd:ba:bc:e8:7d:91:8c:6e:e5:fd:
eb:3e:f9:2b:34:04:51:af:41:d0:d2:8c:56:b8:93:
aa:ad:e0:bb:ff:42:4c:45:70:90:00:d2:1f:e6:e6:
1d:fc:ba:6e:ba:bc:18:a6:fa:21:f1:1f:8d:62:69:
d0:c8:13:67:64:fc:17:fe:ea:7d:98:2b:7a:7e:dc:
76:38:9b:34:6f:97:af:b2:26:70:92:38:a2:9d:54:
bf:ee:9d:f2:d6:61:6d:43:55:42:26:85:b0:11:5f:
85:88:39:23:c1:d7:48:c3:cc:c2:0e:4d:a7:4b:f4:
78:17:7b:00:19:a1:be:ad:99:e8:12:40:15:1f:0f:
5a:3b:8a:4d:71:a1:8f:f6:a4:16:90:e7:e6:32:d9:
70:20:83:4c:c3:63:e0:23:b2:2f:d2:5d:af:fc:f2:
9f:4d:64:4e:bb:80:07:f4:c1:cc:1b:b5:46:ea:80:
c4:45:4d:9c:4a:08:0a:50:1f:d8:74:e3:e9:a0:b8:
ab:70:71:42:6a:28:5c:31:9d:2b:ed:d9:49:e1:11:
6c:08:25:d5:34:db:73:20:d5:d7:85:02:59:bd:58:
c6:81:0f:97:70:19:50:df:bc:75:71:58:61:6b:92:
ec:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0F:0D:87:86:D5:5A:C4:C3:BC:53:F4:22:67:65:8A:7C:BC:43:6B
X509v3 Authority Key Identifier:
keyid:BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:19:3d:14:b4:00:2c:5b:42:c0:cd:0e:b8:58:c5:4f:65:22:
d7:65:75:a5:32:92:d6:f6:ba:7b:f5:8a:8e:af:bd:6f:83:97:
a5:7a:7a:fb:c0:45:7d:ef:b8:3d:3b:c8:fc:47:bb:b7:a1:d4:
78:89:84:f1:fb:6d:2c:2f:d9:38:77:32:27:f9:85:55:e8:f6:
4c:f8:0a:62:13:95:f1:5b:60:fb:92:27:57:77:31:f4:ab:40:
f0:ca:97:8a:fd:79:34:0b:46:f2:e1:06:09:92:68:ca:1a:74:
77:27:55:f8:91:c5:09:0f:d4:83:cd:3c:e7:bd:5c:9a:f5:1a:
59:73:6c:96:8c:79:c4:ab:53:e0:22:8a:c0:26:bc:6c:3e:10:
61:1e:c8:c8:37:59:81:5e:56:1c:56:8a:f7:20:07:d3:80:68:
62:5e:64:70:4b:b6:13:f9:cd:bb:e6:bc:84:11:cc:f1:40:6a:
40:d7:98:b8:ef:79:ef:5b:ea:5c:4d:26:26:46:90:d8:a0:d3:
68:72:d1:d8:75:46:2e:3b:78:07:74:93:90:56:fa:55:b4:b6:
2a:71:f2:36:90:e5:e7:d9:26:d7:86:bd:d9:c8:ba:8b:9c:d9:
10:03:db:ba:92:5c:61:5e:5a:5c:32:62:8c:ce:b3:d5:86:8c:
35:03:91:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdH7o4k3SmS5NCNtwgo8YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTc3NjkzNDNjNjkxZjY3NWJiMzY5MjUzY2IzZjZmYzMw
NGIwMWYwHhcNMjUxMTA0MDYwMTExWhcNMjUxMTA1MDYwMTExWjAzMTEwLwYDVQQD
Eyg5NTBmMGQ4Nzg2ZDU1YWM0YzNiYzUzZjQyMjY3NjU4YTdjYmM0MzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2K4DChZasCSx3G9qsd+D2OomPM26
vOh9kYxu5f3rPvkrNARRr0HQ0oxWuJOqreC7/0JMRXCQANIf5uYd/LpuurwYpvoh
8R+NYmnQyBNnZPwX/up9mCt6ftx2OJs0b5evsiZwkjiinVS/7p3y1mFtQ1VCJoWw
EV+FiDkjwddIw8zCDk2nS/R4F3sAGaG+rZnoEkAVHw9aO4pNcaGP9qQWkOfmMtlw
IINMw2PgI7Iv0l2v/PKfTWROu4AH9MHMG7VG6oDERU2cSggKUB/YdOPpoLircHFC
aihcMZ0r7dlJ4RFsCCXVNNtzINXXhQJZvVjGgQ+XcBlQ37x1cVhha5LsewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUPDYeG1VrEw7xT9CJnZYp8vENrMB8GA1UdIwQY
MBaAFL6ndpNDxpH2dbs2klPLP2/DBLAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni83ZDllYWEtZWM3NS00MjRlLTljNWUt
ZTI0ZDU4OGJiMDNmLzEvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni83ZDllYWEtZWM3NS00MjRlLTljNWUtZTI0ZDU4OGJiMDNm
LzEvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBk9FLQA
LFtCwM0OuFjFT2Ui12V1pTKS1va6e/WKjq+9b4OXpXp6+8BFfe+4PTvI/Ee7t6HU
eImE8fttLC/ZOHcyJ/mFVej2TPgKYhOV8Vtg+5InV3cx9KtA8MqXiv15NAtG8uEG
CZJoyhp0dydV+JHFCQ/Ug808571cmvUaWXNslox5xKtT4CKKwCa8bD4QYR7IyDdZ
gV5WHFaK9yAH04BoYl5kcEu2E/nNu+a8hBHM8UBqQNeYuO9571vqXE0mJkaQ2KDT
aHLR2HVGLjt4B3STkFb6VbS2KnHyNpDl59km14a92ci6i5zZEAPbupJcYV5aXDJi
jM6z1YaMNQORnQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:20 2025 by rpki-client