Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
File: VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft (raw, json)
Hash identifier: +vUcr/cOjp7+jhEKluVuFtQwJdIekLhsAQLFye4C+vs=
Subject key identifier: 7C:19:CC:AA:FA:2B:63:D0:3A:C3:A8:72:7B:83:30:EE:03:B4:29:F3
Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Certificate serial: 019A51F53CD8229ADEEA7550D08346330698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
Manifest number: 11EC
Signing time: Wed 05 Nov 2025 03:00:17 +0000
Manifest this update: Wed 05 Nov 2025 03:00:17 +0000
Manifest next update: Thu 06 Nov 2025 03:00:17 +0000
Files and hashes: 1: 8ywt7YsrRBMREchgHLgyKhwPgx4.roa (hash: aCuMcxrQC+7OXrTGuhaVav/hwtQSKlgeWzdcYZWQMpw=)
2: VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl (hash: +UReAN4M9CPYcvRcEe1o07cDoydumWq9ViV9QHpu1cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:3c:d8:22:9a:de:ea:75:50:d0:83:46:33:06:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Validity
Not Before: Nov 5 03:00:17 2025 GMT
Not After : Nov 6 03:00:17 2025 GMT
Subject: CN=7c19ccaafa2b63d03ac3a8727b8330ee03b429f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:3b:d1:e3:55:ce:f2:6a:a0:2c:a8:21:d8:
b9:96:e1:53:ee:0e:92:75:85:cc:c4:1a:52:de:96:
7c:da:71:0a:5a:cd:e9:df:15:14:39:f1:d6:43:aa:
ae:9c:18:c5:22:b1:95:2a:b4:a8:46:2a:78:a6:6d:
72:45:cd:a6:24:fe:0d:fa:3a:b5:f1:89:ce:26:b4:
9b:04:90:bc:e0:6e:63:db:01:27:2b:0c:07:67:24:
78:f4:da:f7:ed:bc:bb:b6:49:a4:e8:5e:4f:82:50:
64:40:cd:8b:a3:d3:da:9c:5c:70:ec:d9:79:82:4b:
3e:68:6f:55:9e:d6:2b:83:77:66:ce:b5:2b:b4:cb:
0f:8e:eb:9c:15:1d:c1:77:bf:92:c7:f3:9d:fe:c1:
39:3a:d6:e5:1d:b4:1d:af:e5:df:f9:b6:c7:73:d5:
b4:b8:22:39:b8:0a:41:73:29:98:70:b7:cb:a7:9d:
5b:71:f0:b2:73:88:e2:b5:3b:b6:01:63:d0:b2:8f:
ea:7f:54:3e:21:7b:8f:1c:5a:14:10:81:47:67:2b:
01:a1:da:1e:38:fc:9f:8b:b0:27:f9:14:be:ac:09:
ba:9c:da:78:43:e5:31:f6:02:f7:56:da:47:70:41:
01:30:eb:9c:97:71:c6:ec:cf:50:45:a8:d4:c3:b0:
63:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:19:CC:AA:FA:2B:63:D0:3A:C3:A8:72:7B:83:30:EE:03:B4:29:F3
X509v3 Authority Key Identifier:
keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d2:d7:0a:27:ea:5f:8b:bb:20:e2:00:e7:29:00:29:ea:5d:
9a:92:3d:42:b3:19:62:10:32:9a:13:0b:51:d8:c5:7b:6c:b5:
b6:48:2c:40:9b:86:9b:28:0d:4a:2a:18:7c:a9:e1:dd:b6:80:
6a:0c:36:9a:81:12:20:22:93:ab:39:2e:f9:09:88:69:bb:b2:
6c:ed:44:64:9e:a2:15:b3:60:ec:75:b2:ba:01:3f:de:97:cb:
f7:9c:f0:51:97:c8:ee:78:86:79:3a:4b:3f:0c:db:e0:aa:8a:
dc:29:de:f6:c2:2d:be:ed:7a:43:41:24:fc:89:85:cb:6a:1d:
21:1c:44:06:ca:77:fd:09:0f:35:0f:46:29:4c:5e:17:0e:82:
c8:ae:38:91:bb:0f:19:10:b5:56:46:4b:60:7e:2e:bb:93:cc:
11:5e:44:60:ae:37:52:9d:ce:9d:2b:c2:ed:b3:12:2e:6c:69:
f1:76:06:79:f1:44:a2:37:18:db:92:b5:c4:be:95:81:5b:a5:
7a:9b:90:96:fb:9e:5a:35:23:9b:ff:3b:b4:1d:52:2b:08:0b:
07:c6:c9:88:6c:54:cb:3b:85:ee:be:0b:8f:a6:c7:f2:d2:20:
53:cd:f5:43:ff:cf:c2:b5:ff:d9:14:92:0b:c9:30:5a:93:5a:
aa:a5:ef:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9TzYIpre6nVQ0INGMwaYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0M2UyMGJmNWYyNTJiMWJkYmQyMWRjOTlkOTRjZDk3ZWE3
ZjBmZTYwHhcNMjUxMTA1MDMwMDE3WhcNMjUxMTA2MDMwMDE3WjAzMTEwLwYDVQQD
Eyg3YzE5Y2NhYWZhMmI2M2QwM2FjM2E4NzI3YjgzMzBlZTAzYjQyOWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKY70eNVzvJqoCyoIdi5luFT7g6S
dYXMxBpS3pZ82nEKWs3p3xUUOfHWQ6qunBjFIrGVKrSoRip4pm1yRc2mJP4N+jq1
8YnOJrSbBJC84G5j2wEnKwwHZyR49Nr37by7tkmk6F5PglBkQM2Lo9PanFxw7Nl5
gks+aG9VntYrg3dmzrUrtMsPjuucFR3Bd7+Sx/Od/sE5OtblHbQdr+Xf+bbHc9W0
uCI5uApBcymYcLfLp51bcfCyc4jitTu2AWPQso/qf1Q+IXuPHFoUEIFHZysBodoe
OPyfi7An+RS+rAm6nNp4Q+Ux9gL3VtpHcEEBMOucl3HG7M9QRajUw7Bj6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwZzKr6K2PQOsOocnuDMO4DtCnzMB8GA1UdIwQY
MBaAFFQ+IL9fJSsb29IdyZ2UzZfqfw/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZTg3YTYtNjUzNi00NTRhLWE1OWUt
ZDVhZDk5NmExYWM4LzEvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80ZTg3YTYtNjUzNi00NTRhLWE1OWUtZDVhZDk5NmExYWM4
LzEvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArNLXCifq
X4u7IOIA5ykAKepdmpI9QrMZYhAymhMLUdjFe2y1tkgsQJuGmygNSioYfKnh3baA
agw2moESICKTqzku+QmIabuybO1EZJ6iFbNg7HWyugE/3pfL95zwUZfI7niGeTpL
Pwzb4KqK3Cne9sItvu16Q0Ek/ImFy2odIRxEBsp3/QkPNQ9GKUxeFw6CyK44kbsP
GRC1VkZLYH4uu5PMEV5EYK43Up3OnSvC7bMSLmxp8XYGefFEojcY25K1xL6VgVul
epuQlvueWjUjm/87tB1SKwgLB8bJiGxUyzuF7r4Lj6bH8tIgU831Q//PwrX/2RSS
C8kwWpNaqqXvdQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:28:15 2025 by rpki-client