Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
File: VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft (raw, json)
Hash identifier: pR0lXFnrtFIDiw2/xC/iFh4WlTuS7H+o9GRwm6RzayE=
Subject key identifier: B9:22:86:D3:50:09:E1:ED:BE:E6:EE:9F:2F:59:B9:07:AB:29:48:78
Authority key identifier: 55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB
Certificate issuer: /CN=556828d62a5b893e22d5867f1a142d198e85e1ab
Certificate serial: 019A533F62460EF795A251108BE803EA9203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
Manifest number: 017A
Signing time: Wed 05 Nov 2025 09:00:54 +0000
Manifest this update: Wed 05 Nov 2025 09:00:54 +0000
Manifest next update: Thu 06 Nov 2025 09:00:54 +0000
Files and hashes: 1: VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl (hash: ozR5hWRbg1cXN3ET8+wH+KoxBPBfDplM9W1UcHoiY0M=)
2: w9nvjOWk8C3C6okM2fJbltiz6Ts.roa (hash: cpGlnXUiTmun4rJ5XWY0h3JOGdRAWAFOUtSEsrbjwUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:62:46:0e:f7:95:a2:51:10:8b:e8:03:ea:92:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556828d62a5b893e22d5867f1a142d198e85e1ab
Validity
Not Before: Nov 5 09:00:54 2025 GMT
Not After : Nov 6 09:00:54 2025 GMT
Subject: CN=b92286d35009e1edbee6ee9f2f59b907ab294878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:9c:89:9f:1e:66:c0:b7:af:20:7a:f0:0c:
78:48:6a:ae:32:12:4b:77:cb:7d:5a:c6:34:c7:aa:
f7:9f:50:00:0b:57:3d:9d:d3:ec:c9:58:b3:9b:2d:
95:af:f7:9e:93:fb:ca:9b:2e:2c:b1:dd:7a:a7:72:
bd:88:58:9a:ac:0b:c7:cd:ad:6a:c8:ae:86:9d:fc:
6f:ff:89:78:01:6a:18:d9:6e:52:08:d0:3f:ef:50:
79:f4:4b:76:ff:9d:45:ae:de:6c:b7:d6:7b:69:63:
84:bb:6a:3a:33:7d:4c:0b:a2:16:21:ce:46:90:c6:
b4:d6:c7:bb:d1:9d:7e:e3:b5:9b:cb:f8:a1:55:7f:
eb:a0:c1:0c:83:bc:0b:f1:12:51:cc:b9:b9:d5:0d:
99:48:33:3b:7a:49:cd:d3:64:6e:26:2d:d4:6f:23:
5a:49:e7:e5:7b:30:a6:78:76:4d:49:46:0e:4a:d7:
f4:d7:f4:74:ee:f7:a7:7e:46:7a:2c:6d:ed:69:ab:
1b:21:c4:72:0d:44:46:bd:2e:ca:4f:6a:a6:8d:d1:
1d:dd:73:e8:82:27:b5:c9:38:29:eb:27:a4:9b:04:
16:22:46:ad:dd:5c:3d:9a:5a:b3:f2:4d:bd:84:3f:
5b:8f:e3:1e:c3:84:66:ed:97:d9:88:3f:ef:9a:a4:
98:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:22:86:D3:50:09:E1:ED:BE:E6:EE:9F:2F:59:B9:07:AB:29:48:78
X509v3 Authority Key Identifier:
keyid:55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f2:39:6c:89:a1:c4:96:2b:da:da:5b:15:3b:1c:49:8b:b2:
0e:17:60:34:87:e3:4a:d2:8f:2f:44:18:55:a6:5d:68:d3:70:
3c:44:cb:a0:b4:a9:b7:4f:d3:75:43:3b:3f:fb:c0:f5:40:d1:
c3:b7:92:d3:6d:b5:b1:df:c3:41:fd:23:52:bf:f1:79:bf:ed:
63:b1:47:98:19:ad:70:6b:16:f6:62:e9:c6:7f:00:40:79:6c:
6e:69:68:40:09:5d:2e:b2:7a:5a:77:d0:1d:0d:e6:59:65:39:
8d:4e:bf:2a:7d:c8:90:4a:d7:b7:7e:b7:31:7b:70:46:d8:b7:
69:ad:9a:2d:e8:9c:01:eb:19:73:0d:f5:c8:0e:28:d3:3e:ac:
b8:73:bf:0c:8e:5f:bd:dd:59:40:cc:22:20:29:57:8d:09:30:
1a:92:2d:ab:12:5b:42:96:ed:6a:fd:47:69:d0:cb:13:03:5c:
6d:f9:be:2e:9d:56:d0:b9:08:fd:d0:ac:9a:0e:9a:63:f0:c0:
b4:26:f0:9a:99:60:4b:8e:23:94:2b:62:25:30:47:45:be:fa:
51:1f:da:4e:88:7f:4c:c8:3c:8b:ba:8e:e3:dd:9a:c3:5b:2b:
ab:a8:31:8b:f1:f6:40:6f:cc:c5:21:85:fd:e9:27:91:2a:24:
31:a7:dd:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTP2JGDveVolEQi+gD6pIDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NjgyOGQ2MmE1Yjg5M2UyMmQ1ODY3ZjFhMTQyZDE5OGU4
NWUxYWIwHhcNMjUxMTA1MDkwMDU0WhcNMjUxMTA2MDkwMDU0WjAzMTEwLwYDVQQD
EyhiOTIyODZkMzUwMDllMWVkYmVlNmVlOWYyZjU5YjkwN2FiMjk0ODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtyciZ8eZsC3ryB68Ax4SGquMhJL
d8t9WsY0x6r3n1AAC1c9ndPsyVizmy2Vr/eek/vKmy4ssd16p3K9iFiarAvHza1q
yK6Gnfxv/4l4AWoY2W5SCNA/71B59Et2/51Frt5st9Z7aWOEu2o6M31MC6IWIc5G
kMa01se70Z1+47Wby/ihVX/roMEMg7wL8RJRzLm51Q2ZSDM7eknN02RuJi3UbyNa
SeflezCmeHZNSUYOStf01/R07venfkZ6LG3taasbIcRyDURGvS7KT2qmjdEd3XPo
gie1yTgp6yekmwQWIkat3Vw9mlqz8k29hD9bj+Mew4Rm7ZfZiD/vmqSYhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkihtNQCeHtvubuny9ZuQerKUh4MB8GA1UdIwQY
MBaAFFVoKNYqW4k+ItWGfxoULRmOheGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVldnbzFpcGJpVDRpMVlaX0doUXRHWTZGNGFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82M2I4NzUtMDY0My00NzI0LTkyOGUt
M2Q3NDM5ODBiNmUyLzEvVldnbzFpcGJpVDRpMVlaX0doUXRHWTZGNGFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82M2I4NzUtMDY0My00NzI0LTkyOGUtM2Q3NDM5ODBiNmUy
LzEvVldnbzFpcGJpVDRpMVlaX0doUXRHWTZGNGFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPI5bImh
xJYr2tpbFTscSYuyDhdgNIfjStKPL0QYVaZdaNNwPETLoLSpt0/TdUM7P/vA9UDR
w7eS0221sd/DQf0jUr/xeb/tY7FHmBmtcGsW9mLpxn8AQHlsbmloQAldLrJ6WnfQ
HQ3mWWU5jU6/Kn3IkErXt363MXtwRti3aa2aLeicAesZcw31yA4o0z6suHO/DI5f
vd1ZQMwiIClXjQkwGpItqxJbQpbtav1HadDLEwNcbfm+Lp1W0LkI/dCsmg6aY/DA
tCbwmplgS44jlCtiJTBHRb76UR/aToh/TMg8i7qO492aw1srq6gxi/H2QG/MxSGF
/eknkSokMafdgw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:37:58 2025 by rpki-client