Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
File: VVzAtghVz-FakevLDuWExhcRb7c.mft (raw, json)
Hash identifier: sDo3tHEhFL2nOImonvEiscOAuL5Ik0+6VQ5eYGJ1D+Q=
Subject key identifier: EB:FD:97:F0:FA:D7:04:F3:3F:D1:A7:8F:2F:57:CF:DD:90:57:53:85
Authority key identifier: 55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7
Certificate issuer: /CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
Certificate serial: 019A00A313F0E559F8AF207C510E77522ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
Manifest number: 04AA
Signing time: Mon 20 Oct 2025 08:01:18 +0000
Manifest this update: Mon 20 Oct 2025 08:01:18 +0000
Manifest next update: Tue 21 Oct 2025 08:01:18 +0000
Files and hashes: 1: VVzAtghVz-FakevLDuWExhcRb7c.crl (hash: f9xtz6aQwGe6G/8Vpn7imQKp9vYxmT5xouL+mnISfhM=)
2: WrVC9jX5kklKg1NrTkuGqJhi9ss.roa (hash: 1/eKwFnStb8NeVxzyi/3E+1woNkVGNqWnUzMqa1RbTs=)
3: zOxwHP9C2XU1qxc9gfabChAW270.roa (hash: pIK3P+kNzEGWKFk3LxEQ0gUxs9HATfITXq/XpRc4TCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:13:f0:e5:59:f8:af:20:7c:51:0e:77:52:2e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
Validity
Not Before: Oct 20 08:01:18 2025 GMT
Not After : Oct 21 08:01:18 2025 GMT
Subject: CN=ebfd97f0fad704f33fd1a78f2f57cfdd90575385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:61:1f:7f:46:64:31:be:5b:67:de:ab:03:
f9:4b:73:8b:ea:86:a9:f6:f3:48:36:60:63:f5:dc:
02:60:3e:ff:08:cc:b1:f2:45:4e:9d:11:40:58:6d:
eb:e6:28:35:c4:37:fa:1a:51:14:bd:ee:34:f4:b9:
af:b5:73:74:cb:a1:69:49:d2:26:47:af:7f:2c:32:
2b:2a:9d:b5:8d:ba:68:14:e1:f0:a4:c7:25:99:6f:
d1:ec:5a:d7:c7:e3:67:29:f3:5b:1e:db:eb:2c:b1:
f2:91:d6:df:01:91:21:95:23:81:52:d2:3a:cf:ae:
e2:13:c6:5d:8b:42:fc:6c:a6:b3:8c:0e:1d:0b:a5:
b8:1f:a7:9b:27:35:49:d3:3f:da:5b:8f:ac:5d:10:
83:8a:48:64:81:85:63:95:90:ad:c7:66:7b:39:38:
9d:35:0d:be:77:a2:3c:c7:02:d4:88:72:3b:a4:a4:
97:77:ca:9b:cf:03:3c:04:3d:ad:5f:a8:06:63:ec:
18:49:5e:35:f0:a9:75:b9:18:01:51:8c:16:c2:ed:
c0:71:d2:ed:38:ac:72:4f:39:9a:ee:bc:32:7d:1a:
87:00:dd:44:82:bc:f4:a0:b9:d0:48:04:6c:39:89:
7b:0f:6c:03:96:4a:94:e9:17:20:9a:1c:32:95:d6:
bb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FD:97:F0:FA:D7:04:F3:3F:D1:A7:8F:2F:57:CF:DD:90:57:53:85
X509v3 Authority Key Identifier:
keyid:55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:40:64:a8:3e:a9:73:8d:40:1e:a9:a1:0b:a7:ca:a6:b2:21:
1a:39:9d:bc:f0:c0:47:fb:ae:47:e4:ff:a3:e7:89:e0:e3:1d:
f0:eb:72:06:9d:aa:13:ab:5e:58:fe:82:c5:b2:82:93:e5:5a:
6d:f0:f9:38:53:84:d6:b3:58:04:92:1b:12:06:85:31:4e:16:
1f:28:f0:47:b3:56:3f:5d:40:0c:f9:ba:3f:f3:e1:f0:23:9d:
6f:a9:17:2f:22:e3:23:06:b6:46:1f:48:a7:a3:b3:65:04:3f:
6c:9f:fc:49:30:5b:49:d4:96:2d:7f:d5:30:80:8b:3c:9a:21:
e9:20:73:a0:b3:cc:89:21:f1:f0:a8:dd:d4:74:44:0e:eb:ec:
77:57:f8:23:81:aa:c4:50:09:93:27:b9:f7:96:38:61:fb:51:
27:36:83:b8:15:e2:64:77:ba:5a:22:f5:f2:7a:9e:0a:c9:24:
f1:bb:55:53:8c:dc:01:20:84:1b:89:82:c5:ca:da:74:cd:76:
94:fe:ba:04:4f:fe:22:70:64:2b:8f:2c:cc:fc:59:54:97:4d:
91:c9:6c:76:8e:10:df:4c:83:8d:4e:2a:24:36:57:db:fe:55:
36:44:9b:b5:17:07:13:3f:c6:fd:e9:10:7a:97:6f:f1:74:6c:
9f:6d:80:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAoxPw5Vn4ryB8UQ53Ui7RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NWNjMGI2MDg1NWNmZTE1YTkxZWJjYjBlZTU4NGM2MTcx
MTZmYjcwHhcNMjUxMDIwMDgwMTE4WhcNMjUxMDIxMDgwMTE4WjAzMTEwLwYDVQQD
EyhlYmZkOTdmMGZhZDcwNGYzM2ZkMWE3OGYyZjU3Y2ZkZDkwNTc1Mzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArylhH39GZDG+W2feqwP5S3OL6oap
9vNINmBj9dwCYD7/CMyx8kVOnRFAWG3r5ig1xDf6GlEUve409LmvtXN0y6FpSdIm
R69/LDIrKp21jbpoFOHwpMclmW/R7FrXx+NnKfNbHtvrLLHykdbfAZEhlSOBUtI6
z67iE8Zdi0L8bKazjA4dC6W4H6ebJzVJ0z/aW4+sXRCDikhkgYVjlZCtx2Z7OTid
NQ2+d6I8xwLUiHI7pKSXd8qbzwM8BD2tX6gGY+wYSV418Kl1uRgBUYwWwu3AcdLt
OKxyTzma7rwyfRqHAN1Egrz0oLnQSARsOYl7D2wDlkqU6Rcgmhwylda7MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOv9l/D61wTzP9Gnjy9Xz92QV1OFMB8GA1UdIwQY
MBaAFFVcwLYIVc/hWpHryw7lhMYXEW+3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlZ6QXRnaFZ6LUZha2V2TER1V0V4aGNSYjdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81ZTlhZDctYTVmNC00Y2I0LWEzMTkt
MmYzNTJkNjRhYWM4LzEvVlZ6QXRnaFZ6LUZha2V2TER1V0V4aGNSYjdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi81ZTlhZDctYTVmNC00Y2I0LWEzMTktMmYzNTJkNjRhYWM4
LzEvVlZ6QXRnaFZ6LUZha2V2TER1V0V4aGNSYjdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0BkqD6p
c41AHqmhC6fKprIhGjmdvPDAR/uuR+T/o+eJ4OMd8OtyBp2qE6teWP6CxbKCk+Va
bfD5OFOE1rNYBJIbEgaFMU4WHyjwR7NWP11ADPm6P/Ph8COdb6kXLyLjIwa2Rh9I
p6OzZQQ/bJ/8STBbSdSWLX/VMICLPJoh6SBzoLPMiSHx8Kjd1HREDuvsd1f4I4Gq
xFAJkye595Y4YftRJzaDuBXiZHe6WiL18nqeCskk8btVU4zcASCEG4mCxcradM12
lP66BE/+InBkK48szPxZVJdNkclsdo4Q30yDjU4qJDZX2/5VNkSbtRcHEz/G/ekQ
epdv8XRsn22A6g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:15:49 2025 by rpki-client