Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
File: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft (raw, json)
Hash identifier: hoA5VSOHe6ZG3hp9UHOAJQlg4lwO9FMjO8xJOW6CV4w=
Subject key identifier: 5A:0F:31:86:86:60:B3:21:56:81:22:8E:AB:AC:F6:81:D7:5D:D5:7E
Authority key identifier: 55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
Certificate issuer: /CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
Certificate serial: 019A00A309B31786F4FE2685CD7DF329E92A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
Manifest number: 1333
Signing time: Mon 20 Oct 2025 08:01:16 +0000
Manifest this update: Mon 20 Oct 2025 08:01:16 +0000
Manifest next update: Tue 21 Oct 2025 08:01:16 +0000
Files and hashes: 1: N4kdXs6oJ2OgpmlrmSJfyNKzdiQ.roa (hash: 4gywf4SeDVtAzz5fsjo6F/Rz+kjvjVxtwZB0jmDDSZU=)
2: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl (hash: 05+s1Hr6nhTitS4OZ3YxLf9kz1snHPY9NWsJ/goIj28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:09:b3:17:86:f4:fe:26:85:cd:7d:f3:29:e9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
Validity
Not Before: Oct 20 08:01:16 2025 GMT
Not After : Oct 21 08:01:16 2025 GMT
Subject: CN=5a0f31868660b3215681228eabacf681d75dd57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:33:c4:df:74:f1:2a:22:94:00:83:76:66:
cd:03:39:52:a4:07:34:5c:ed:d1:d3:aa:10:f8:63:
21:3f:e2:f0:0f:46:47:68:0e:94:32:3e:88:e8:0c:
43:ee:a2:4a:68:6b:84:5e:d2:07:2f:b6:56:8d:ee:
b8:40:fe:31:83:10:66:00:0b:6e:c9:d1:cf:60:a5:
6a:19:ff:2d:44:29:22:6a:f0:94:bd:12:87:03:bf:
a8:ff:be:ab:04:4b:42:86:ef:c4:7f:c7:02:dc:ae:
b7:f8:11:97:e9:8e:e6:41:0f:ce:7e:0e:80:35:00:
fa:05:cd:11:64:f0:f3:cc:1c:2d:34:9e:7e:58:53:
5c:7e:a9:17:d1:12:26:79:66:2b:70:d5:2e:91:04:
15:99:01:ab:f9:71:c3:66:ae:ef:01:f9:6c:03:04:
8b:51:c5:e3:b1:2c:f6:14:90:cf:e5:86:62:63:6f:
f5:cd:16:24:e9:a9:59:c8:c8:61:4a:0e:91:8c:d7:
b5:24:b8:c1:c0:43:35:11:6b:8a:7f:bd:2d:56:4d:
0b:55:c9:69:5e:d4:45:05:b7:7c:06:95:d3:08:43:
cb:17:31:a6:82:ad:ff:c5:e8:47:28:b9:3d:7a:fa:
e3:8c:d8:25:a8:17:31:ab:db:47:9c:ee:d6:9c:d0:
68:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0F:31:86:86:60:B3:21:56:81:22:8E:AB:AC:F6:81:D7:5D:D5:7E
X509v3 Authority Key Identifier:
keyid:55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:90:64:b0:1c:8e:e0:2d:91:ea:74:79:61:98:43:b1:97:e6:
5f:88:4c:7c:25:72:3a:0d:27:52:02:63:b9:d0:38:c7:6a:5a:
5b:32:3a:93:20:b6:08:6c:80:24:24:69:78:41:c1:b6:b8:cf:
ba:32:2b:08:bb:af:28:02:46:07:1c:e0:e5:54:b1:80:f9:17:
b2:e8:98:57:2e:c0:1f:0c:4b:0d:06:52:7c:d4:03:b1:60:33:
76:bf:fe:36:a7:db:5d:23:3c:66:e9:00:49:c9:7f:0c:78:40:
f9:51:fe:17:8e:c6:30:fe:91:03:7d:41:37:bb:ec:21:fc:da:
c2:f4:73:e3:c5:7e:56:f8:81:ec:83:40:23:2a:25:49:73:b3:
ff:bd:af:55:84:6d:25:b6:b4:d2:b6:25:8a:df:96:bb:59:80:
b6:95:35:b3:14:b7:4c:2d:18:30:97:e5:16:b1:21:ad:80:20:
3f:62:ae:ea:75:da:f9:b8:59:7b:06:ce:d0:49:db:02:8a:19:
42:94:f8:15:f1:c5:e7:37:09:29:f0:7f:d5:b8:95:5e:f7:b4:
b3:9c:b8:6b:03:7c:eb:97:e5:66:05:e6:27:13:f8:08:46:5c:
89:4e:4c:3f:c9:cd:fa:58:73:d4:a0:a0:d7:0d:fa:5e:ff:63:
74:98:25:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAowmzF4b0/iaFzX3zKekqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MGQ0YzU3MWQ4YmZiZmRkOGZhM2ExNzBmOTlmYjNhZmFi
NDExZDEwHhcNMjUxMDIwMDgwMTE2WhcNMjUxMDIxMDgwMTE2WjAzMTEwLwYDVQQD
Eyg1YTBmMzE4Njg2NjBiMzIxNTY4MTIyOGVhYmFjZjY4MWQ3NWRkNTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWMzxN908SoilACDdmbNAzlSpAc0
XO3R06oQ+GMhP+LwD0ZHaA6UMj6I6AxD7qJKaGuEXtIHL7ZWje64QP4xgxBmAAtu
ydHPYKVqGf8tRCkiavCUvRKHA7+o/76rBEtChu/Ef8cC3K63+BGX6Y7mQQ/Ofg6A
NQD6Bc0RZPDzzBwtNJ5+WFNcfqkX0RImeWYrcNUukQQVmQGr+XHDZq7vAflsAwSL
UcXjsSz2FJDP5YZiY2/1zRYk6alZyMhhSg6RjNe1JLjBwEM1EWuKf70tVk0LVclp
XtRFBbd8BpXTCEPLFzGmgq3/xehHKLk9evrjjNglqBcxq9tHnO7WnNBoQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFoPMYaGYLMhVoEijqus9oHXXdV+MB8GA1UdIwQY
MBaAFFUNTFcdi/v92Po6Fw+Z+zr6tBHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81N2NkNTYtN2JlYy00MGYxLWJmNzIt
M2Q0NmNhZjU1NzM4LzEvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81N2NkNTYtN2JlYy00MGYxLWJmNzItM2Q0NmNhZjU1NzM4
LzEvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZBksByO
4C2R6nR5YZhDsZfmX4hMfCVyOg0nUgJjudA4x2paWzI6kyC2CGyAJCRpeEHBtrjP
ujIrCLuvKAJGBxzg5VSxgPkXsuiYVy7AHwxLDQZSfNQDsWAzdr/+NqfbXSM8ZukA
Scl/DHhA+VH+F47GMP6RA31BN7vsIfzawvRz48V+VviB7INAIyolSXOz/72vVYRt
Jba00rYlit+Wu1mAtpU1sxS3TC0YMJflFrEhrYAgP2Ku6nXa+bhZewbO0EnbAooZ
QpT4FfHF5zcJKfB/1biVXve0s5y4awN865flZgXmJxP4CEZciU5MP8nN+lhz1KCg
1w36Xv9jdJglCA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:07 2025 by rpki-client