Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
File: VYR5uCKzUywZue4BAvmaiYUN8SQ.mft (raw, json)
Hash identifier: /QT3nzR9mMgtyeYGhUHSPJIfwuGCNxPbq1GFeYQ8RIY=
Subject key identifier: 8F:93:A4:75:52:3E:16:4E:BD:63:0F:CC:47:E6:70:75:C3:A4:C6:9D
Authority key identifier: 55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24
Certificate issuer: /CN=558479b822b3532c19b9ee0102f99a89850df124
Certificate serial: 019A4EF4E6CB00E7AA58E0936333FB03CD46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
Manifest number: 0390
Signing time: Tue 04 Nov 2025 13:01:03 +0000
Manifest this update: Tue 04 Nov 2025 13:01:03 +0000
Manifest next update: Wed 05 Nov 2025 13:01:03 +0000
Files and hashes: 1: VYR5uCKzUywZue4BAvmaiYUN8SQ.crl (hash: ezqhwei2stpjIEt66GO1SuAkjPKVXbTNZIpnPZfKXFs=)
2: bjC_4YQHMbcokGPzsa1ChnLtyF8.roa (hash: QpyUIEtNVpERFh+Sv3RoMUpu/u6eaTM9vusxbG8G8kQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:e6:cb:00:e7:aa:58:e0:93:63:33:fb:03:cd:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=558479b822b3532c19b9ee0102f99a89850df124
Validity
Not Before: Nov 4 13:01:03 2025 GMT
Not After : Nov 5 13:01:03 2025 GMT
Subject: CN=8f93a475523e164ebd630fcc47e67075c3a4c69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:47:f6:c2:27:4c:9d:83:1c:96:48:17:bb:d8:
94:3b:57:ce:91:a9:72:b8:0e:b0:c4:bc:c7:1c:a6:
93:7f:4a:05:25:dc:d4:e1:23:32:9d:11:d7:78:55:
ac:6c:1c:96:d5:14:31:b1:1e:b4:f2:44:9a:8f:85:
64:fa:67:93:b9:48:ed:85:92:54:91:34:ac:45:94:
be:ad:bb:ea:7d:17:c2:a5:b7:7b:6a:95:8a:7e:8d:
39:b0:27:02:48:68:0f:96:b9:26:52:bb:13:0c:d7:
95:fe:98:2c:58:a1:2a:51:a8:f5:6b:dc:c9:17:64:
28:70:85:1a:80:63:06:ff:77:7e:98:1e:6f:82:c1:
42:61:2b:6d:3d:88:3d:02:00:9d:92:88:c6:93:4c:
5b:a8:0b:3e:bb:1b:f1:ab:e6:9d:30:cf:14:14:c7:
35:bd:7e:b1:8d:b6:7b:d6:34:9c:9d:fd:8f:dc:ed:
07:b7:cb:63:11:80:b0:81:2f:df:59:41:8e:ab:46:
52:65:8b:47:51:53:78:96:0d:b5:23:df:a8:2d:61:
82:30:1c:12:d9:47:bf:60:91:78:52:82:96:5b:0d:
38:96:9a:34:42:ab:54:f2:15:22:a7:89:4f:5a:3a:
dc:46:cb:b9:e5:1c:0f:8a:a6:e0:90:41:f9:08:91:
75:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:93:A4:75:52:3E:16:4E:BD:63:0F:CC:47:E6:70:75:C3:A4:C6:9D
X509v3 Authority Key Identifier:
keyid:55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6a:a0:bb:78:73:31:39:aa:de:0b:d7:c9:a5:26:96:f0:b5:
61:76:ec:51:8e:5d:a8:a4:74:c2:91:9c:e8:25:db:2d:b9:87:
88:c3:8a:28:69:a5:69:01:6e:e1:79:6e:79:a4:4a:5f:22:77:
b6:aa:7e:ab:a7:63:0c:68:9b:ba:5a:94:c0:48:54:d8:55:ad:
f7:54:04:c0:c3:f6:cc:f9:0a:bd:34:a0:58:d0:3c:e9:5e:16:
18:c7:a9:93:5c:98:1f:18:e3:67:22:7e:f0:23:9c:61:63:81:
bb:1b:69:0a:1b:c5:61:2f:9a:f6:3e:81:c7:26:eb:9c:fe:cb:
19:3e:66:9b:16:83:b2:6e:70:ca:1b:21:ee:97:bc:ca:3c:f8:
3f:5a:a4:f5:e8:b8:4f:6d:25:c7:ec:21:42:19:ee:35:6d:33:
ae:8d:47:a6:6e:df:bd:31:99:3e:dc:60:75:8b:32:21:63:a8:
5e:3a:1d:72:ec:d0:2d:ce:68:f6:71:e3:63:3b:55:9e:1a:f2:
06:1d:6c:98:3e:57:85:d2:f1:e0:6a:b4:74:4b:5f:f6:38:29:
97:37:d8:f1:85:4b:8e:9f:79:00:0b:93:16:7a:0b:99:0f:ee:
c8:57:5f:2c:b6:90:70:29:83:a4:d8:a0:7a:44:8e:d2:70:cf:
63:4a:e8:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9ObLAOeqWOCTYzP7A81GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODQ3OWI4MjJiMzUzMmMxOWI5ZWUwMTAyZjk5YTg5ODUw
ZGYxMjQwHhcNMjUxMTA0MTMwMTAzWhcNMjUxMTA1MTMwMTAzWjAzMTEwLwYDVQQD
Eyg4ZjkzYTQ3NTUyM2UxNjRlYmQ2MzBmY2M0N2U2NzA3NWMzYTRjNjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Uf2widMnYMclkgXu9iUO1fOkaly
uA6wxLzHHKaTf0oFJdzU4SMynRHXeFWsbByW1RQxsR608kSaj4Vk+meTuUjthZJU
kTSsRZS+rbvqfRfCpbd7apWKfo05sCcCSGgPlrkmUrsTDNeV/pgsWKEqUaj1a9zJ
F2QocIUagGMG/3d+mB5vgsFCYSttPYg9AgCdkojGk0xbqAs+uxvxq+adMM8UFMc1
vX6xjbZ71jScnf2P3O0Ht8tjEYCwgS/fWUGOq0ZSZYtHUVN4lg21I9+oLWGCMBwS
2Ue/YJF4UoKWWw04lpo0QqtU8hUip4lPWjrcRsu55RwPiqbgkEH5CJF1XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+TpHVSPhZOvWMPzEfmcHXDpMadMB8GA1UdIwQY
MBaAFFWEebgis1MsGbnuAQL5momFDfEkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllSNXVDS3pVeXdadWU0QkF2bWFpWVVOOFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8zNzk2MjUtNzFiZS00NGZhLTlkNjAt
MGI1OTFmM2ExYmYwLzEvVllSNXVDS3pVeXdadWU0QkF2bWFpWVVOOFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8zNzk2MjUtNzFiZS00NGZhLTlkNjAtMGI1OTFmM2ExYmYw
LzEvVllSNXVDS3pVeXdadWU0QkF2bWFpWVVOOFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmqgu3hz
MTmq3gvXyaUmlvC1YXbsUY5dqKR0wpGc6CXbLbmHiMOKKGmlaQFu4XlueaRKXyJ3
tqp+q6djDGibulqUwEhU2FWt91QEwMP2zPkKvTSgWNA86V4WGMepk1yYHxjjZyJ+
8COcYWOBuxtpChvFYS+a9j6BxybrnP7LGT5mmxaDsm5wyhsh7pe8yjz4P1qk9ei4
T20lx+whQhnuNW0zro1Hpm7fvTGZPtxgdYsyIWOoXjodcuzQLc5o9nHjYztVnhry
Bh1smD5XhdLx4Gq0dEtf9jgplzfY8YVLjp95AAuTFnoLmQ/uyFdfLLaQcCmDpNig
ekSO0nDPY0ro9g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:09:09 2025 by rpki-client