Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
File: VWyanGGYCpC10MUfhtfLrJ_xQto.mft (raw, json)
Hash identifier: SuORFQEKS/F4NBOzWl4/eJTFKF3zKXTko9G8jByIML4=
Subject key identifier: 8A:28:BC:35:00:5F:E9:08:B1:4A:C9:6E:E3:A4:2F:50:C2:B1:F6:9A
Authority key identifier: 55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA
Certificate issuer: /CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da
Certificate serial: 019A4DE1DD518D10B984A89CD084F614E76F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 08:00:39 +0000
Manifest this update: Tue 04 Nov 2025 08:00:39 +0000
Manifest next update: Wed 05 Nov 2025 08:00:39 +0000
Files and hashes: 1: VWyanGGYCpC10MUfhtfLrJ_xQto.crl (hash: +JHUs7SEXRMsXJE0t/YjGipg3ZCawqYZlm6OnT+lY8Y=)
2: haz-HdaagkevUDJWOKHcKbMpfs4.roa (hash: 4MYVAihmuy2VBnQslitsGPSQAlGwL1bJXLz/oBhLSUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:dd:51:8d:10:b9:84:a8:9c:d0:84:f6:14:e7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da
Validity
Not Before: Nov 4 08:00:39 2025 GMT
Not After : Nov 5 08:00:39 2025 GMT
Subject: CN=8a28bc35005fe908b14ac96ee3a42f50c2b1f69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:87:65:c9:e2:48:bd:b2:b1:da:8b:42:cf:
d3:cf:2f:a6:b7:6b:8d:38:7d:64:79:ea:3c:8e:24:
ff:70:c5:f5:0e:d8:f7:04:d9:c0:66:b1:84:59:89:
42:d6:54:8c:25:0d:3f:de:ae:dc:3d:89:bf:e2:9b:
de:86:13:2e:8f:d2:07:3f:83:01:a2:2d:3d:42:af:
f4:4c:f6:de:15:6b:4a:cc:bf:8b:42:32:ef:ec:62:
bb:43:49:f8:28:1a:9f:52:a9:e6:74:ce:b3:78:e8:
c5:06:3a:d8:32:14:45:3e:b8:70:95:df:f9:9c:2e:
32:a0:b7:58:e1:4b:86:b7:3f:bd:de:00:a4:d7:2f:
8c:df:fa:db:8b:98:9c:b5:b9:39:3c:50:fe:9f:a5:
3f:c5:9d:cc:b5:1e:df:29:b5:94:97:e8:4e:14:bd:
fe:07:0c:0c:da:66:62:b2:34:97:de:e0:6a:35:99:
a4:b6:65:37:01:a2:3e:ad:bf:3b:b6:fe:49:a8:92:
b3:78:bd:f6:de:ba:8b:86:f3:ee:f3:e9:ef:32:08:
35:6c:f8:03:03:7a:75:f4:de:a7:79:c2:99:20:8e:
4d:0d:4b:4d:50:36:42:d5:47:fb:5f:a5:6a:f2:24:
3f:05:03:fb:d2:05:8b:22:e0:34:75:8f:ee:59:f8:
74:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:28:BC:35:00:5F:E9:08:B1:4A:C9:6E:E3:A4:2F:50:C2:B1:F6:9A
X509v3 Authority Key Identifier:
keyid:55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6f:b4:2e:56:25:91:19:16:43:f5:87:46:56:51:30:14:e4:
8e:d9:a7:d2:33:99:cb:c2:97:a8:1f:84:dc:35:55:f8:84:9d:
f2:37:7f:b1:c8:25:25:97:e9:5c:83:d1:e9:93:e0:6c:40:cb:
3c:45:4f:20:55:61:35:2e:03:be:ac:a1:5b:d5:93:01:c2:1d:
28:a2:c1:1e:ec:51:f2:87:3a:bf:f8:14:d2:10:82:0a:63:8e:
ba:6e:40:a2:b9:d4:29:90:85:20:20:93:06:a3:64:b2:43:16:
9d:66:46:ab:d5:9c:5e:77:fc:b1:ad:9c:61:35:28:b6:c0:e5:
0d:e2:74:96:c5:e3:e6:54:a0:28:c7:c0:42:73:00:af:29:63:
4d:d0:ad:8d:a9:15:ae:fa:37:be:4a:8f:8a:b8:4e:dd:39:96:
25:b5:97:ce:76:65:73:a6:3a:ea:d7:17:31:34:62:d3:3b:0b:
a8:62:b7:3f:ef:03:ed:c5:f4:59:47:56:63:44:49:0b:ed:29:
3a:10:64:b8:5d:6d:e9:e0:d4:b6:35:3c:c1:30:46:e2:0e:38:
86:a7:1e:45:c4:89:7a:2c:c6:38:8d:36:df:2e:22:41:55:13:
28:ae:fc:c5:10:c2:55:b8:28:e4:71:40:f7:e8:78:85:1b:7b:
72:20:fe:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4d1RjRC5hKic0IT2FOdvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NmM5YTljNjE5ODBhOTBiNWQwYzUxZjg2ZDdjYmFjOWZm
MTQyZGEwHhcNMjUxMTA0MDgwMDM5WhcNMjUxMTA1MDgwMDM5WjAzMTEwLwYDVQQD
Eyg4YTI4YmMzNTAwNWZlOTA4YjE0YWM5NmVlM2E0MmY1MGMyYjFmNjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXKHZcniSL2ysdqLQs/Tzy+mt2uN
OH1keeo8jiT/cMX1Dtj3BNnAZrGEWYlC1lSMJQ0/3q7cPYm/4pvehhMuj9IHP4MB
oi09Qq/0TPbeFWtKzL+LQjLv7GK7Q0n4KBqfUqnmdM6zeOjFBjrYMhRFPrhwld/5
nC4yoLdY4UuGtz+93gCk1y+M3/rbi5ictbk5PFD+n6U/xZ3MtR7fKbWUl+hOFL3+
BwwM2mZisjSX3uBqNZmktmU3AaI+rb87tv5JqJKzeL323rqLhvPu8+nvMgg1bPgD
A3p19N6necKZII5NDUtNUDZC1Uf7X6Vq8iQ/BQP70gWLIuA0dY/uWfh0GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIoovDUAX+kIsUrJbuOkL1DCsfaaMB8GA1UdIwQY
MBaAFFVsmpxhmAqQtdDFH4bXy6yf8ULaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVld5YW5HR1lDcEMxME1VZmh0ZkxySl94UXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yNWE3NDctODQyNi00MzBhLTllMzAt
NDViMzQ0M2E3NmY5LzEvVld5YW5HR1lDcEMxME1VZmh0ZkxySl94UXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yNWE3NDctODQyNi00MzBhLTllMzAtNDViMzQ0M2E3NmY5
LzEvVld5YW5HR1lDcEMxME1VZmh0ZkxySl94UXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASm+0LlYl
kRkWQ/WHRlZRMBTkjtmn0jOZy8KXqB+E3DVV+ISd8jd/scglJZfpXIPR6ZPgbEDL
PEVPIFVhNS4DvqyhW9WTAcIdKKLBHuxR8oc6v/gU0hCCCmOOum5AornUKZCFICCT
BqNkskMWnWZGq9WcXnf8sa2cYTUotsDlDeJ0lsXj5lSgKMfAQnMAryljTdCtjakV
rvo3vkqPirhO3TmWJbWXznZlc6Y66tcXMTRi0zsLqGK3P+8D7cX0WUdWY0RJC+0p
OhBkuF1t6eDUtjU8wTBG4g44hqceRcSJeizGOI023y4iQVUTKK78xRDCVbgo5HFA
9+h4hRt7ciD+iw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:48 2025 by rpki-client