Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
File: VmHZZN9KhtuP-5mqiVgtpoowkIw.mft (raw, json)
Hash identifier: OZUHurZrrsK2cIbGL9H6zjEbk0Ig0HJI+Eoth2JbjxM=
Subject key identifier: 69:43:D3:33:2B:0E:0E:03:45:D5:BC:C6:58:8F:FC:0F:F6:1E:47:55
Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
Certificate issuer: /CN=5661d964df4a86db8ffb99aa89582da68a30908c
Certificate serial: 019A00DA6AFED855B21E5D20B1F5BBF7AE8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
Manifest number: 027A
Signing time: Mon 20 Oct 2025 09:01:45 +0000
Manifest this update: Mon 20 Oct 2025 09:01:45 +0000
Manifest next update: Tue 21 Oct 2025 09:01:45 +0000
Files and hashes: 1: VmHZZN9KhtuP-5mqiVgtpoowkIw.crl (hash: ClUeb3CD84xSSZkJKzytHxxIkyYlg+uPLNLYLdFRQWY=)
2: xMdRmutHFokxkkQckhp-estBVrY.roa (hash: B+GeVyXFQ8LdKQlX7fXVWpcWBfpc+XAscpHvCnfEhnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:6a:fe:d8:55:b2:1e:5d:20:b1:f5:bb:f7:ae:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c
Validity
Not Before: Oct 20 09:01:45 2025 GMT
Not After : Oct 21 09:01:45 2025 GMT
Subject: CN=6943d3332b0e0e0345d5bcc6588ffc0ff61e4755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a2:55:3a:3d:f8:a6:b2:26:d3:5b:9c:19:61:
04:0d:08:85:ea:e5:51:33:fc:e0:d4:cc:bb:bd:8a:
17:1f:0d:59:18:13:a3:d9:98:cc:3d:16:79:1c:ca:
9d:b8:48:89:b7:ae:83:0e:67:b3:f7:0a:3f:ef:13:
2e:81:9a:f6:3e:81:5b:3e:f1:63:13:33:07:b8:3a:
b6:37:22:5e:49:cc:38:8f:eb:53:5e:09:4d:f7:bd:
1c:95:bc:da:12:2d:62:71:8c:ed:70:52:a9:e1:1b:
d4:c5:d6:5e:2e:84:9a:88:dd:28:b5:77:57:ed:a3:
60:44:3b:d7:a9:e7:0c:ed:86:b3:f4:8a:51:36:be:
13:c2:ce:16:12:2c:27:78:98:5c:03:b3:79:9d:f1:
fb:db:df:ae:2c:8b:8e:bc:d8:de:f7:e3:85:98:10:
cb:92:cf:25:9b:0f:70:ba:6f:ab:35:97:8c:de:21:
b5:98:42:42:17:f3:25:e1:f0:16:80:e4:a3:32:3a:
3f:fa:d3:8b:b6:12:7c:6e:c1:59:bc:31:2b:93:6e:
35:3d:ef:d0:75:6f:b9:e7:7a:74:69:99:35:e1:26:
6d:81:86:1f:26:d9:75:2a:a6:02:d1:09:2a:9c:b5:
cf:87:5a:0c:c8:bf:a7:87:4e:2e:98:44:01:26:7a:
42:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:43:D3:33:2B:0E:0E:03:45:D5:BC:C6:58:8F:FC:0F:F6:1E:47:55
X509v3 Authority Key Identifier:
keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:91:40:a7:90:ed:2f:fd:76:84:b5:bb:73:70:49:ab:dd:c7:
08:fb:3f:9d:40:5c:f7:a3:62:7a:2c:d7:1d:8e:c6:be:fc:04:
ec:03:56:33:c2:87:ec:67:80:81:84:ea:99:92:c4:36:ac:8f:
36:8f:be:ae:66:00:f3:b9:8d:bb:06:d1:d7:77:ad:b7:d0:24:
24:c8:f7:17:c5:8b:0b:86:97:f2:49:fb:68:04:35:25:d4:76:
fd:1d:a2:ec:e7:90:9e:1d:46:a2:81:79:2d:60:68:22:77:43:
c5:83:02:1e:23:89:88:13:5d:f3:e3:c9:27:00:73:52:ff:c8:
18:14:66:62:9f:de:7f:86:f5:6b:d9:c1:81:a1:ce:21:e6:d0:
09:17:d6:65:06:5e:ef:5e:84:ef:fb:07:16:0e:ac:aa:be:6a:
79:3e:e0:37:fb:56:1e:32:10:41:3f:16:e9:5a:22:86:17:81:
5a:6b:64:3a:44:5c:c4:5f:ce:83:cf:f7:9b:df:e7:46:a1:d0:
86:d6:77:de:e9:44:4f:b0:f3:4f:1e:f8:eb:67:2f:a1:0c:ee:
c9:00:0b:19:48:b7:55:a2:8b:4e:c8:c1:68:b9:7a:12:c8:05:
22:59:ba:e1:64:86:35:b7:eb:75:03:5f:18:14:e8:de:a1:94:
e9:bc:01:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoA2mr+2FWyHl0gsfW7966LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NjFkOTY0ZGY0YTg2ZGI4ZmZiOTlhYTg5NTgyZGE2OGEz
MDkwOGMwHhcNMjUxMDIwMDkwMTQ1WhcNMjUxMDIxMDkwMTQ1WjAzMTEwLwYDVQQD
Eyg2OTQzZDMzMzJiMGUwZTAzNDVkNWJjYzY1ODhmZmMwZmY2MWU0NzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6JVOj34prIm01ucGWEEDQiF6uVR
M/zg1My7vYoXHw1ZGBOj2ZjMPRZ5HMqduEiJt66DDmez9wo/7xMugZr2PoFbPvFj
EzMHuDq2NyJeScw4j+tTXglN970clbzaEi1icYztcFKp4RvUxdZeLoSaiN0otXdX
7aNgRDvXqecM7Yaz9IpRNr4Tws4WEiwneJhcA7N5nfH729+uLIuOvNje9+OFmBDL
ks8lmw9wum+rNZeM3iG1mEJCF/Ml4fAWgOSjMjo/+tOLthJ8bsFZvDErk241Pe/Q
dW+553p0aZk14SZtgYYfJtl1KqYC0QkqnLXPh1oMyL+nh04umEQBJnpCvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlD0zMrDg4DRdW8xliP/A/2HkdVMB8GA1UdIwQY
MBaAFFZh2WTfSobbj/uZqolYLaaKMJCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iMDNhMzYtMDgwNy00MWVmLWFmODYt
M2Q0MzliN2NkZTcyLzEvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iMDNhMzYtMDgwNy00MWVmLWFmODYtM2Q0MzliN2NkZTcy
LzEvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepFAp5Dt
L/12hLW7c3BJq93HCPs/nUBc96NieizXHY7GvvwE7ANWM8KH7GeAgYTqmZLENqyP
No++rmYA87mNuwbR13ett9AkJMj3F8WLC4aX8kn7aAQ1JdR2/R2i7OeQnh1GooF5
LWBoIndDxYMCHiOJiBNd8+PJJwBzUv/IGBRmYp/ef4b1a9nBgaHOIebQCRfWZQZe
716E7/sHFg6sqr5qeT7gN/tWHjIQQT8W6VoihheBWmtkOkRcxF/Og8/3m9/nRqHQ
htZ33ulET7DzTx7462cvoQzuyQALGUi3VaKLTsjBaLl6EsgFIlm64WSGNbfrdQNf
GBTo3qGU6bwBbg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:49:27 2025 by rpki-client