Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
File: VwhmHGruys2bcRdqct6WybRQlDk.mft (raw, json)
Hash identifier: aAOZ+U+ZG//NSLRy5KV7EQWnlVex4j+hODFU5deGPvk=
Subject key identifier: C2:18:57:3C:36:B8:1B:BF:43:74:2B:B2:BC:AD:4F:CC:A5:59:34:A1
Authority key identifier: 57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
Certificate issuer: /CN=5708661c6aeecacd9b71176a72de96c9b4509439
Certificate serial: 0199FC8FB8C37F40B86EE08F1BE241902668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
Manifest number: 100D
Signing time: Sun 19 Oct 2025 13:01:41 +0000
Manifest this update: Sun 19 Oct 2025 13:01:41 +0000
Manifest next update: Mon 20 Oct 2025 13:01:41 +0000
Files and hashes: 1: 0DRAcYwVU1wTPmKPUVZE-cIvVWk.roa (hash: SCcdCtXYPz3bfVKFsB8kMQkE3rKjzNyXJ29sazaODiU=)
2: VwhmHGruys2bcRdqct6WybRQlDk.crl (hash: V1e4z92C7X2DWBs9V4TwwAMwMu4N0GTX1ePDFfl1gQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b8:c3:7f:40:b8:6e:e0:8f:1b:e2:41:90:26:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5708661c6aeecacd9b71176a72de96c9b4509439
Validity
Not Before: Oct 19 13:01:41 2025 GMT
Not After : Oct 20 13:01:41 2025 GMT
Subject: CN=c218573c36b81bbf43742bb2bcad4fcca55934a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6d:75:81:34:1b:34:f5:39:f8:e0:a7:ea:3e:
b9:b6:3b:68:f4:e6:3b:f4:99:85:11:9e:06:63:b8:
39:af:7d:82:c3:6f:94:86:59:10:95:50:65:15:45:
dd:76:31:a9:6f:23:91:93:cf:e0:a6:44:54:1e:15:
e6:2d:0c:82:cb:9e:d7:d3:21:b8:7c:31:15:8a:08:
09:b1:29:3a:9d:b7:e8:96:21:21:00:21:3d:e2:a7:
9b:d6:fe:c2:42:68:df:44:ab:45:61:1b:0b:a6:0f:
e6:62:46:bc:d5:d2:59:be:c6:e8:df:fe:1f:58:a5:
21:e5:1f:03:82:1c:21:10:db:12:61:2f:14:4f:40:
2c:68:42:c0:4d:bf:7c:e3:5b:1d:05:ee:a1:cc:db:
87:4b:a1:40:78:06:c1:e6:25:8a:41:0d:a2:c0:ac:
c2:e3:74:e4:8c:77:31:46:38:08:f3:dd:e0:19:8b:
fb:9b:41:30:3c:1d:91:e2:63:f1:53:1f:09:71:2c:
eb:1b:f8:1f:bd:c4:18:54:0c:76:60:07:87:32:91:
70:73:4e:21:b9:bd:69:fd:1c:1d:3f:74:94:4e:19:
55:50:29:77:21:2d:a8:b9:fe:8f:81:05:97:23:a5:
6b:8e:d1:e4:77:e7:db:30:9f:8c:a4:9b:d7:4c:ff:
f7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:18:57:3C:36:B8:1B:BF:43:74:2B:B2:BC:AD:4F:CC:A5:59:34:A1
X509v3 Authority Key Identifier:
keyid:57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d3:bb:d3:04:b2:16:4b:a2:41:66:f0:75:d2:a0:c3:a4:07:
82:87:0f:4f:93:96:a5:91:49:be:5a:73:6f:ad:1e:45:e2:af:
57:a9:a5:0b:af:e6:27:51:72:0e:56:2b:54:b9:38:76:1a:c6:
2a:68:f7:ba:ac:9c:fa:1d:42:2f:1d:fd:d4:f0:0c:44:27:e8:
ec:07:43:97:05:0d:7f:3a:9c:ac:3a:36:0a:25:68:3c:a1:c5:
aa:58:c2:c7:8a:84:d1:a8:cd:57:1d:da:1c:4c:b4:77:8e:55:
1d:25:51:1a:d5:79:b3:87:9c:83:95:03:8a:b5:7b:b8:b0:87:
dd:fd:5a:ec:f0:68:04:4d:73:19:f2:c7:85:35:89:1e:44:c1:
7b:b7:b4:98:13:e2:70:fb:15:61:08:cc:7c:3f:11:f1:11:89:
3b:a3:0c:68:0d:4e:bf:b0:ca:33:33:e7:3c:a4:64:54:a4:9b:
39:74:e5:66:ff:a9:02:91:0e:b6:84:b1:dc:3b:40:21:22:51:
fc:2b:c2:c5:40:5a:46:0e:03:b3:ea:ec:06:ad:5a:43:65:c6:
f3:1a:2e:75:7c:7a:e0:29:15:c4:18:d5:49:42:9c:ae:52:20:
62:bd:57:d0:9d:87:38:47:9a:99:aa:ff:1f:d1:8e:54:4b:c1:
ec:4c:9c:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j7jDf0C4buCPG+JBkCZoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MDg2NjFjNmFlZWNhY2Q5YjcxMTc2YTcyZGU5NmM5YjQ1
MDk0MzkwHhcNMjUxMDE5MTMwMTQxWhcNMjUxMDIwMTMwMTQxWjAzMTEwLwYDVQQD
EyhjMjE4NTczYzM2YjgxYmJmNDM3NDJiYjJiY2FkNGZjY2E1NTkzNGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm11gTQbNPU5+OCn6j65tjto9OY7
9JmFEZ4GY7g5r32Cw2+UhlkQlVBlFUXddjGpbyORk8/gpkRUHhXmLQyCy57X0yG4
fDEViggJsSk6nbfoliEhACE94qeb1v7CQmjfRKtFYRsLpg/mYka81dJZvsbo3/4f
WKUh5R8DghwhENsSYS8UT0AsaELATb9841sdBe6hzNuHS6FAeAbB5iWKQQ2iwKzC
43TkjHcxRjgI893gGYv7m0EwPB2R4mPxUx8JcSzrG/gfvcQYVAx2YAeHMpFwc04h
ub1p/RwdP3SUThlVUCl3IS2ouf6PgQWXI6VrjtHkd+fbMJ+MpJvXTP/3AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIYVzw2uBu/Q3QrsrytT8ylWTShMB8GA1UdIwQY
MBaAFFcIZhxq7srNm3EXanLelsm0UJQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVndobUhHcnV5czJiY1JkcWN0Nld5YlJRbERrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS82NDdhNGEtZDJmZC00M2UwLThmM2It
NDQxMDgxNjJlNDkyLzEvVndobUhHcnV5czJiY1JkcWN0Nld5YlJRbERrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS82NDdhNGEtZDJmZC00M2UwLThmM2ItNDQxMDgxNjJlNDky
LzEvVndobUhHcnV5czJiY1JkcWN0Nld5YlJRbERrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdO70wSy
FkuiQWbwddKgw6QHgocPT5OWpZFJvlpzb60eReKvV6mlC6/mJ1FyDlYrVLk4dhrG
Kmj3uqyc+h1CLx391PAMRCfo7AdDlwUNfzqcrDo2CiVoPKHFqljCx4qE0ajNVx3a
HEy0d45VHSVRGtV5s4ecg5UDirV7uLCH3f1a7PBoBE1zGfLHhTWJHkTBe7e0mBPi
cPsVYQjMfD8R8RGJO6MMaA1Ov7DKMzPnPKRkVKSbOXTlZv+pApEOtoSx3DtAISJR
/CvCxUBaRg4Ds+rsBq1aQ2XG8xoudXx64CkVxBjVSUKcrlIgYr1X0J2HOEeamar/
H9GOVEvB7EycCw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:39 2025 by rpki-client