Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
File: VPK5p1k1doKsQZtcAhHMDkICUro.mft (raw, json)
Hash identifier: 3SnYGqOLCW0uMB/K6hgC43qNGGMrgn6lQ/soVKE5Y50=
Subject key identifier: 0F:6E:88:1F:C9:EB:73:3F:41:55:60:74:CD:8A:75:E4:A2:63:8C:62
Authority key identifier: 54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
Certificate issuer: /CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Certificate serial: 019A0147DA3C667F5C6C0261F2C5714B7AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
Manifest number: 1506
Signing time: Mon 20 Oct 2025 11:01:17 +0000
Manifest this update: Mon 20 Oct 2025 11:01:17 +0000
Manifest next update: Tue 21 Oct 2025 11:01:17 +0000
Files and hashes: 1: AqRcwBOoELP7sO7G2ArRpdIIf-8.roa (hash: Y1QC1/53Sd9JtcwMQ3kWoyldjEFlmNNOZ3rUXpglWPs=)
2: SPcGIGkkzQDmSeZ7dKXkZX_TMgQ.roa (hash: rHVmlh8TGkwEc4idYqR8fskh8r3CxSQPC0McskOxXCc=)
3: VPK5p1k1doKsQZtcAhHMDkICUro.crl (hash: 5g00wjsIMRxLC84eMISwLBWiBEQCvpMl15lODp4cdkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:da:3c:66:7f:5c:6c:02:61:f2:c5:71:4b:7a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Validity
Not Before: Oct 20 11:01:17 2025 GMT
Not After : Oct 21 11:01:17 2025 GMT
Subject: CN=0f6e881fc9eb733f41556074cd8a75e4a2638c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9c:17:fb:ea:74:b7:9a:ca:db:22:bd:3c:ce:
10:b6:eb:cf:7a:92:23:02:10:07:06:49:ae:f8:0c:
a1:7a:ba:f7:cb:b8:30:6b:be:1b:0e:28:19:dc:07:
60:4d:9e:0a:c2:7d:cd:36:88:53:3d:fb:c8:c5:90:
ee:74:b8:74:1d:d1:63:6c:0a:7b:ee:97:4b:70:98:
bd:4b:fe:d1:ee:7f:fd:81:5c:85:d8:70:55:38:94:
b1:74:2f:17:dc:5c:fa:01:10:5a:3d:6e:fb:14:a1:
c7:cd:89:5d:2d:b6:46:a1:c9:92:11:2f:27:40:30:
68:89:3a:2e:98:ed:36:c6:a3:a5:a7:a6:3c:c7:a9:
a2:a7:27:2a:4d:51:5a:e7:57:8c:1e:a7:8a:73:52:
da:6e:5f:9b:ad:31:1e:de:6e:4f:12:8e:52:81:c5:
fe:fb:c6:92:30:69:d1:a0:f0:35:5d:d6:6f:ed:4d:
d8:9f:73:91:08:f9:3e:52:03:8e:81:3c:9e:e4:39:
b9:9f:c2:d9:3b:d1:81:c7:91:a9:0e:8b:66:d1:b5:
b2:9c:ed:8a:1e:48:78:15:66:a4:81:07:84:5e:19:
8f:b0:c5:97:f4:11:c5:3a:d8:bc:35:9e:60:10:80:
69:ea:f3:77:77:35:52:4d:db:a7:54:73:21:dc:2a:
6b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6E:88:1F:C9:EB:73:3F:41:55:60:74:CD:8A:75:E4:A2:63:8C:62
X509v3 Authority Key Identifier:
keyid:54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:21:e5:3f:db:7d:db:63:11:23:da:ce:fd:15:92:8c:9e:99:
b0:fe:09:be:00:b4:7e:b4:ba:3d:d3:f1:5f:b3:46:39:60:7c:
33:bd:b2:c4:f8:18:d4:4f:41:bc:8d:87:c2:7f:b3:1a:8d:25:
29:ee:a0:a9:b9:44:37:fa:fe:16:b1:49:f3:97:ed:06:2a:ec:
fa:4b:da:e7:73:3c:60:b7:da:94:39:69:e7:1d:ae:66:ae:db:
74:18:f5:8f:b9:f2:8b:70:b9:1b:44:9c:33:fb:d3:43:82:92:
25:b6:e9:96:ff:5d:70:1a:3a:25:38:49:d6:21:be:81:67:ee:
e4:78:80:50:25:48:84:58:8f:86:5f:63:c0:e7:37:e4:fb:0f:
9e:b3:17:8e:37:ea:08:a0:cb:4f:4e:58:95:f2:c3:26:e5:13:
31:84:36:7d:66:f0:64:1e:f2:75:ce:9f:14:4b:d9:02:f9:14:
7b:f2:eb:40:19:ea:3a:9b:58:ac:16:9f:f9:36:5f:69:d3:59:
5a:57:bc:0c:59:21:3b:92:1a:aa:67:15:09:9d:33:33:d3:26:
bc:41:38:0c:2b:2e:58:38:c5:b8:82:8f:1a:4c:7f:9a:75:3f:
5c:de:91:15:49:4c:d4:71:18:bd:3e:4e:62:bc:6b:30:a1:8f:
1b:16:fb:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBR9o8Zn9cbAJh8sVxS3rRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZjJiOWE3NTkzNTc2ODJhYzQxOWI1YzAyMTFjYzBlNDIw
MjUyYmEwHhcNMjUxMDIwMTEwMTE3WhcNMjUxMDIxMTEwMTE3WjAzMTEwLwYDVQQD
EygwZjZlODgxZmM5ZWI3MzNmNDE1NTYwNzRjZDhhNzVlNGEyNjM4YzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJwX++p0t5rK2yK9PM4QtuvPepIj
AhAHBkmu+Ayherr3y7gwa74bDigZ3AdgTZ4Kwn3NNohTPfvIxZDudLh0HdFjbAp7
7pdLcJi9S/7R7n/9gVyF2HBVOJSxdC8X3Fz6ARBaPW77FKHHzYldLbZGocmSES8n
QDBoiToumO02xqOlp6Y8x6mipycqTVFa51eMHqeKc1Labl+brTEe3m5PEo5SgcX+
+8aSMGnRoPA1XdZv7U3Yn3ORCPk+UgOOgTye5Dm5n8LZO9GBx5GpDotm0bWynO2K
Hkh4FWakgQeEXhmPsMWX9BHFOti8NZ5gEIBp6vN3dzVSTdunVHMh3Cpr1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9uiB/J63M/QVVgdM2KdeSiY4xiMB8GA1UdIwQY
MBaAFFTyuadZNXaCrEGbXAIRzA5CAlK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlBLNXAxazFkb0tzUVp0Y0FoSE1Ea0lDVXJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wNzQ4OWEtODA1ZS00MzM5LWI0M2Et
NTM5ZGE2OTc3NGM4LzEvVlBLNXAxazFkb0tzUVp0Y0FoSE1Ea0lDVXJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8wNzQ4OWEtODA1ZS00MzM5LWI0M2EtNTM5ZGE2OTc3NGM4
LzEvVlBLNXAxazFkb0tzUVp0Y0FoSE1Ea0lDVXJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFSHlP9t9
22MRI9rO/RWSjJ6ZsP4JvgC0frS6PdPxX7NGOWB8M72yxPgY1E9BvI2Hwn+zGo0l
Ke6gqblEN/r+FrFJ85ftBirs+kva53M8YLfalDlp5x2uZq7bdBj1j7nyi3C5G0Sc
M/vTQ4KSJbbplv9dcBo6JThJ1iG+gWfu5HiAUCVIhFiPhl9jwOc35PsPnrMXjjfq
CKDLT05YlfLDJuUTMYQ2fWbwZB7ydc6fFEvZAvkUe/LrQBnqOptYrBaf+TZfadNZ
Wle8DFkhO5IaqmcVCZ0zM9MmvEE4DCsuWDjFuIKPGkx/mnU/XN6RFUlM1HEYvT5O
YrxrMKGPGxb79A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:59:37 2025 by rpki-client