
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
File: VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft (raw, json)
Hash identifier: veoszPaQEGbFPT9z0WU0jUrEgklgDO7mtRgng0CIAg4=
Subject key identifier: B6:D8:5B:9A:B3:9B:93:2B:E5:6C:5E:58:78:C6:B4:92:6C:DF:84:2E
Authority key identifier: 54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3
Certificate issuer: /CN=54137c32249107f26b1741451cf10039380b8bc3
Certificate serial: 0199FC2195AC54D4408C4D1AFA145C333D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
Manifest number: 69
Signing time: Sun 19 Oct 2025 11:01:23 +0000
Manifest this update: Sun 19 Oct 2025 11:01:23 +0000
Manifest next update: Mon 20 Oct 2025 11:01:23 +0000
Files and hashes: 1: VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl (hash: mchzwxMOeKM+a/P7l8c9Uf3y6gRdshXAtTSytlF03VE=)
2: c5KTqi8Nppw4iBusDEEIOmLUG-E.roa (hash: P9QcxEVErHbCPZK93Fj+ercSMy5NY3qU2Mt1bLXX3+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:95:ac:54:d4:40:8c:4d:1a:fa:14:5c:33:3d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54137c32249107f26b1741451cf10039380b8bc3
Validity
Not Before: Oct 19 11:01:23 2025 GMT
Not After : Oct 20 11:01:23 2025 GMT
Subject: CN=b6d85b9ab39b932be56c5e5878c6b4926cdf842e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:08:f5:bc:5b:45:0d:ef:89:7f:f1:be:95:7a:
eb:58:ed:5f:24:ff:4b:89:b1:04:17:99:c9:8e:a1:
85:38:88:f0:e4:dc:bf:e5:ad:f0:f1:86:89:0c:2b:
ee:48:d5:3b:5a:f3:06:1e:06:aa:cc:c9:b8:8f:2e:
81:e9:ac:cf:1e:c3:7e:68:25:11:5e:df:ad:0c:1c:
a4:7a:49:e5:c4:0d:08:53:3d:f3:58:cd:ef:ec:e1:
5e:5f:1b:e1:e8:47:1a:dd:c1:f0:08:e9:19:0f:1f:
30:0c:61:89:87:b5:c9:55:42:92:0c:fc:e8:25:34:
7d:a2:36:47:7f:c8:15:79:c0:6b:11:86:3a:87:5a:
56:c1:00:38:95:a2:c6:d7:50:43:67:fd:e8:a6:75:
41:41:d2:c4:19:26:58:6a:35:2f:af:4b:29:2c:aa:
17:2d:ba:51:40:74:45:66:36:61:83:c0:a5:da:23:
e5:c4:09:cf:51:d8:a2:3c:24:93:28:a9:4c:a6:14:
5e:46:9b:0a:d3:a8:1e:d3:b7:b5:97:27:ed:72:ef:
57:82:5b:2c:1b:af:0c:c3:d8:34:ee:58:83:29:1d:
c4:8d:2e:62:bb:80:35:ef:4e:b5:ba:87:38:13:12:
5d:9d:8c:d1:cf:1f:86:5c:bc:68:f4:57:68:b1:05:
a0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D8:5B:9A:B3:9B:93:2B:E5:6C:5E:58:78:C6:B4:92:6C:DF:84:2E
X509v3 Authority Key Identifier:
keyid:54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:1c:2c:75:cb:6b:b5:02:26:52:a1:b3:a8:81:b7:fa:a6:a2:
94:65:5c:4c:4c:8e:d0:34:42:33:6d:67:66:a5:0a:ba:01:8c:
08:63:83:d1:db:9c:28:ea:c4:7f:e2:2a:0d:5d:ca:32:45:a7:
20:b2:4b:3a:f1:22:29:56:11:f4:28:ac:f8:36:0a:cb:9d:2c:
67:f5:26:fd:69:7a:df:79:a1:9c:4d:36:36:5f:60:80:c9:6e:
eb:97:37:9e:60:e9:b8:b4:74:d7:48:8d:4d:09:fa:fb:7a:06:
f9:6d:48:5e:f1:ec:4c:cc:c6:cd:85:41:68:13:bf:69:95:86:
67:2f:f5:17:43:44:0f:ba:c6:3b:02:1a:3d:8b:aa:12:2c:c2:
a0:65:81:09:29:69:a9:8e:63:67:fe:c4:19:bc:4f:5f:51:90:
6c:40:cd:4e:a2:18:75:69:6c:3d:ba:10:ef:76:d6:c7:ed:53:
e3:aa:a5:ee:4d:0c:cb:03:02:97:6d:02:05:42:cf:64:81:1d:
9e:39:6b:0c:58:1c:8f:bd:29:3a:72:cd:ab:0d:2e:9d:f9:8e:
db:36:54:29:da:69:ac:0a:2e:45:50:6f:c7:bc:f0:87:29:5a:
c1:ab:eb:e3:fd:23:94:bc:71:89:69:7b:e4:cd:35:fd:0a:e6:
a5:ba:5c:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IZWsVNRAjE0a+hRcMz1/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MTM3YzMyMjQ5MTA3ZjI2YjE3NDE0NTFjZjEwMDM5Mzgw
YjhiYzMwHhcNMjUxMDE5MTEwMTIzWhcNMjUxMDIwMTEwMTIzWjAzMTEwLwYDVQQD
EyhiNmQ4NWI5YWIzOWI5MzJiZTU2YzVlNTg3OGM2YjQ5MjZjZGY4NDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAj1vFtFDe+Jf/G+lXrrWO1fJP9L
ibEEF5nJjqGFOIjw5Ny/5a3w8YaJDCvuSNU7WvMGHgaqzMm4jy6B6azPHsN+aCUR
Xt+tDBykeknlxA0IUz3zWM3v7OFeXxvh6Eca3cHwCOkZDx8wDGGJh7XJVUKSDPzo
JTR9ojZHf8gVecBrEYY6h1pWwQA4laLG11BDZ/3opnVBQdLEGSZYajUvr0spLKoX
LbpRQHRFZjZhg8Cl2iPlxAnPUdiiPCSTKKlMphReRpsK06ge07e1lyftcu9Xglss
G68Mw9g07liDKR3EjS5iu4A17061uoc4ExJdnYzRzx+GXLxo9FdosQWgwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbYW5qzm5Mr5WxeWHjGtJJs34QuMB8GA1UdIwQY
MBaAFFQTfDIkkQfyaxdBRRzxADk4C4vDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkJOOE1pU1JCX0pyRjBGRkhQRUFPVGdMaThNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy84NWVlOGQtMWQyNS00NTNhLWJiYmQt
YzhlMTU1NDBjODA2LzEvVkJOOE1pU1JCX0pyRjBGRkhQRUFPVGdMaThNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy84NWVlOGQtMWQyNS00NTNhLWJiYmQtYzhlMTU1NDBjODA2
LzEvVkJOOE1pU1JCX0pyRjBGRkhQRUFPVGdMaThNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArxwsdctr
tQImUqGzqIG3+qailGVcTEyO0DRCM21nZqUKugGMCGOD0ducKOrEf+IqDV3KMkWn
ILJLOvEiKVYR9Cis+DYKy50sZ/Um/Wl633mhnE02Nl9ggMlu65c3nmDpuLR010iN
TQn6+3oG+W1IXvHsTMzGzYVBaBO/aZWGZy/1F0NED7rGOwIaPYuqEizCoGWBCSlp
qY5jZ/7EGbxPX1GQbEDNTqIYdWlsPboQ73bWx+1T46ql7k0MywMCl20CBULPZIEd
njlrDFgcj70pOnLNqw0unfmO2zZUKdpprAouRVBvx7zwhylawavr4/0jlLxxiWl7
5M01/QrmpbpcMg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:58 2025 by rpki-client