Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
File: VDxcNKYv--2PwPDsAbQsDFDufvc.mft (raw, json)
Hash identifier: fMeZllGat2ZssmBZgL819UCcREALs4aZZ8CLtGRIWwA=
Subject key identifier: 5C:4B:84:75:5E:7E:4E:AF:5E:AA:2E:13:BA:DF:E4:E5:EF:FD:AC:E1
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 019A4F99527890781793B59E7C51F526F27E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
Manifest number: 0927
Signing time: Tue 04 Nov 2025 16:00:39 +0000
Manifest this update: Tue 04 Nov 2025 16:00:39 +0000
Manifest next update: Wed 05 Nov 2025 16:00:39 +0000
Files and hashes: 1: 3OLIMizXOJwfjWRWiEBjpUKJwIU.roa (hash: QMFZT0i3XGS+MsKzCsZOmKPi7vfVCyuG5tTyqhdATNA=)
2: NPlJ_KhWtoEU85P6_bEw-JrQECw.roa (hash: +WKUN/INEKKaNIE4RDQgpQc6rCP9GRAzlztHhcY8Wc4=)
3: PVF7wnGzCTMj-DMi0Yh7tJoQV50.roa (hash: ifNzodbn64RIKDxyUKgvxQYTPT/TGzAFj9xlomWoMYM=)
4: VDxcNKYv--2PwPDsAbQsDFDufvc.crl (hash: 7toDMjUAiL3MrghGKFMX9bYe3nguzrJ7w4SEc2v1L/U=)
5: aP1xgGw8H7jCOI-VSZ01nj8-4CM.roa (hash: tc+u6WTs4frUnC9+3IttTv0/u7Rmmf/DRJCt109dDEg=)
6: egWiNnqY9Vl0Wup08EirG2JX11M.roa (hash: cdwWkaZBw0jnB5ddN/k9GlCFftOqTidrPnaELenZvX8=)
7: lSBrUQBEKuTSY6AdNT1ZVvcTRx8.roa (hash: G+WOXA6z8Ino3VGaelG9h3UW5mZBPuWh+ANhGCA7MB0=)
8: tRNUe3Kk3eWia8VX_dKXZILdgjE.roa (hash: JStwVDR6ukqM/F9+GpHeAO0i8HlEBKkQBbaoGUyV6eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:52:78:90:78:17:93:b5:9e:7c:51:f5:26:f2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Nov 4 16:00:39 2025 GMT
Not After : Nov 5 16:00:39 2025 GMT
Subject: CN=5c4b84755e7e4eaf5eaa2e13badfe4e5effdace1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:2f:05:55:99:3d:5e:df:00:8d:33:08:ee:
ba:54:f1:22:cb:7b:cc:fd:cf:fd:b0:e5:3e:8d:6e:
2a:a6:c1:5b:9f:bf:dd:ed:ba:ad:87:af:6d:3a:b3:
85:a0:4f:db:47:ea:ac:1d:9a:cc:9e:bb:10:70:49:
f2:f2:eb:f5:a9:9c:b5:ce:83:d0:f6:28:c3:4e:59:
ff:05:1d:9c:6e:8f:af:20:d6:0e:f1:19:30:cd:34:
9a:ec:84:58:97:b6:12:40:8e:68:29:2d:47:0d:04:
22:02:ea:3f:40:8c:a3:7a:86:87:20:fe:d0:37:72:
ad:ed:44:f2:1e:5b:3f:18:d4:a2:28:ed:f6:b9:86:
a1:ca:42:86:f8:70:da:5f:ac:2f:78:f1:e5:0d:dd:
bd:86:67:4d:c0:fb:8a:86:33:f9:ec:2c:41:cf:21:
80:d5:5e:42:59:44:42:65:f0:5e:af:8c:05:d1:9e:
7e:dc:dd:ce:7b:17:91:2f:3d:37:1a:b1:f0:e9:84:
49:e1:e4:c0:4e:19:10:4d:3a:b6:27:60:64:92:5d:
04:77:28:d4:6c:ea:dc:ce:9a:ab:1a:77:be:e9:08:
3e:64:86:f4:80:d4:78:6e:f2:8a:3c:88:e1:60:f6:
7c:2c:4f:97:68:19:d6:6e:e9:ea:59:f9:9d:66:8c:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4B:84:75:5E:7E:4E:AF:5E:AA:2E:13:BA:DF:E4:E5:EF:FD:AC:E1
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e5:1a:7c:d2:0f:fb:f1:a6:db:f3:ba:5e:a0:63:a4:a7:7a:
15:8d:ad:cc:c3:00:48:a3:2f:bd:3d:3e:19:5a:03:43:47:84:
97:95:eb:47:0f:3b:17:70:15:36:91:72:41:42:01:ec:55:67:
e7:50:ce:99:93:08:0e:7a:a9:6c:f6:2e:03:9d:ef:67:73:8b:
8a:e7:48:ee:9f:0d:7b:e1:af:17:3d:a7:62:58:66:2d:f6:92:
40:ba:4b:b5:dc:ce:db:e0:b5:1a:b7:bd:ed:ef:b0:1e:dc:f2:
e8:c4:4b:e6:03:d1:be:d2:ae:fe:65:90:a6:36:e2:0b:80:2c:
83:2b:0a:3e:ac:9e:e4:1d:8e:af:1c:4b:e9:b1:d6:dc:d4:ab:
f7:04:64:f7:6c:06:d4:cc:11:31:d1:b3:52:93:a4:98:6d:43:
aa:bc:fa:e6:1b:b4:19:38:c8:ee:33:95:2c:d8:52:f7:61:fd:
9a:e8:ee:37:9f:aa:f5:a7:16:bc:bc:4b:90:6a:84:b6:a5:b5:
db:6c:a7:2c:46:64:cd:54:27:58:74:6b:96:61:16:e1:97:23:
e6:3b:5d:9a:cf:5c:ab:db:bc:42:83:75:ad:05:01:ec:4c:e0:
9b:6f:9a:0d:49:e0:f1:6a:dd:98:b4:23:9f:8b:e7:54:50:8e:
c3:cb:45:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmVJ4kHgXk7WefFH1JvJ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0M2M1YzM0YTYyZmZiZWQ4ZmMwZjBlYzAxYjQyYzBjNTBl
ZTdlZjcwHhcNMjUxMTA0MTYwMDM5WhcNMjUxMTA1MTYwMDM5WjAzMTEwLwYDVQQD
Eyg1YzRiODQ3NTVlN2U0ZWFmNWVhYTJlMTNiYWRmZTRlNWVmZmRhY2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRAvBVWZPV7fAI0zCO66VPEiy3vM
/c/9sOU+jW4qpsFbn7/d7bqth69tOrOFoE/bR+qsHZrMnrsQcEny8uv1qZy1zoPQ
9ijDTln/BR2cbo+vINYO8RkwzTSa7IRYl7YSQI5oKS1HDQQiAuo/QIyjeoaHIP7Q
N3Kt7UTyHls/GNSiKO32uYahykKG+HDaX6wvePHlDd29hmdNwPuKhjP57CxBzyGA
1V5CWURCZfBer4wF0Z5+3N3OexeRLz03GrHw6YRJ4eTAThkQTTq2J2Bkkl0EdyjU
bOrczpqrGne+6Qg+ZIb0gNR4bvKKPIjhYPZ8LE+XaBnWbunqWfmdZoxywQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxLhHVefk6vXqouE7rf5OXv/azhMB8GA1UdIwQY
MBaAFFQ8XDSmL/vtj8Dw7AG0LAxQ7n73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYt
ZjRmMWY5M2UwNDY3LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYtZjRmMWY5M2UwNDY3
LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeeUafNIP
+/Gm2/O6XqBjpKd6FY2tzMMASKMvvT0+GVoDQ0eEl5XrRw87F3AVNpFyQUIB7FVn
51DOmZMIDnqpbPYuA53vZ3OLiudI7p8Ne+GvFz2nYlhmLfaSQLpLtdzO2+C1Gre9
7e+wHtzy6MRL5gPRvtKu/mWQpjbiC4AsgysKPqye5B2OrxxL6bHW3NSr9wRk92wG
1MwRMdGzUpOkmG1Dqrz65hu0GTjI7jOVLNhS92H9mujuN5+q9acWvLxLkGqEtqW1
22ynLEZkzVQnWHRrlmEW4Zcj5jtdms9cq9u8QoN1rQUB7Ezgm2+aDUng8WrdmLQj
n4vnVFCOw8tFAw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:37:45 2025 by rpki-client