Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
File: VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft (raw, json)
Hash identifier: EcppKi5nrx99sADb2iVp1CqO+ww3MpA4eA/M6XNfiMY=
Subject key identifier: AA:23:AF:5D:E8:32:DC:E5:DE:88:24:68:4C:3F:01:DA:BB:3C:A8:CE
Authority key identifier: 54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
Certificate issuer: /CN=54158203da3a1e96318e85043411e7d4d03d4c44
Certificate serial: 019A02FEF491C2F8F97DEAEF56E066B6CB52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
Manifest number: 0216
Signing time: Mon 20 Oct 2025 19:00:54 +0000
Manifest this update: Mon 20 Oct 2025 19:00:54 +0000
Manifest next update: Tue 21 Oct 2025 19:00:54 +0000
Files and hashes: 1: VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl (hash: 0HfYD/XNGqTO3FNm9s5EolLkJxdefE0YIK41Z9T3IXw=)
2: vP7OBBy6Rc-iXCzpNtqqwwaR6pA.roa (hash: MbpCA8/2M3yt7Y/21BLSADPFYL3YqJ9PW3u4Q8kGOqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:fe:f4:91:c2:f8:f9:7d:ea:ef:56:e0:66:b6:cb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54158203da3a1e96318e85043411e7d4d03d4c44
Validity
Not Before: Oct 20 19:00:54 2025 GMT
Not After : Oct 21 19:00:54 2025 GMT
Subject: CN=aa23af5de832dce5de8824684c3f01dabb3ca8ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:93:29:8b:29:f1:0d:31:de:64:a9:79:04:d1:
20:01:11:c1:68:f7:27:82:26:4a:9e:5a:03:2f:93:
e7:2a:c7:b8:15:86:57:bb:a6:21:a3:1a:16:9e:1a:
02:c7:8a:91:66:77:70:c4:d0:75:39:c1:fa:ea:ff:
63:46:08:5e:60:25:f8:aa:0a:89:c3:58:bc:92:99:
57:92:9e:c2:82:7c:56:86:6a:02:10:85:ec:d8:ca:
35:d0:b8:37:af:2b:c7:51:dc:30:5c:ae:4c:92:44:
97:55:21:95:a9:6c:d7:3f:e7:45:21:ac:2a:7d:7f:
4b:21:d5:e3:b6:76:fa:95:47:4e:f6:a3:a4:db:20:
59:49:49:28:36:6c:bf:3b:87:36:41:8a:51:c0:6f:
20:3a:08:96:89:f4:35:92:5d:17:cc:db:71:f0:54:
0e:fd:86:d2:9b:f1:f1:7d:89:b7:f6:84:19:5c:b5:
48:81:87:87:55:7c:6b:2a:5f:0b:35:e9:d8:11:24:
77:05:67:5f:f0:47:64:b4:28:bf:37:cb:95:43:3a:
8e:e8:6d:74:a2:ee:c3:27:ab:a7:36:21:55:65:5e:
30:ac:c7:2d:1e:b0:d8:8f:46:f7:24:09:fa:a4:8c:
0c:d2:42:18:3f:b8:0a:9e:af:1a:09:41:c9:fc:07:
90:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:23:AF:5D:E8:32:DC:E5:DE:88:24:68:4C:3F:01:DA:BB:3C:A8:CE
X509v3 Authority Key Identifier:
keyid:54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:47:c2:43:cd:48:11:1c:1d:68:87:26:ab:6b:7f:b4:52:c1:
1f:49:32:54:ea:43:3e:ae:98:9e:f0:ff:fa:31:1a:e8:85:9a:
95:4e:d1:c9:a3:35:bb:0d:2f:97:15:b4:02:f5:a4:98:75:1d:
ab:50:72:c8:41:6e:76:22:e5:8a:53:d7:14:00:48:15:81:0d:
f5:f0:50:1e:4a:5d:e2:51:bd:83:13:b5:ee:00:12:f0:d8:a8:
22:71:e2:2f:4a:ce:42:55:8b:26:ed:fc:a5:5c:2e:f5:e2:99:
25:ae:6b:1f:f8:5f:34:5a:47:10:65:a0:da:ab:8a:b8:43:c2:
56:db:26:c2:00:34:2f:31:81:f2:be:6a:b6:e0:5c:43:e3:29:
64:91:9d:94:a2:ef:f2:0a:31:58:25:2d:26:c1:16:b8:f1:12:
33:d1:9c:c5:63:7a:da:4d:f8:49:95:2a:cd:0b:8f:18:d0:7d:
ef:b1:c3:ce:18:3f:4d:cf:98:3f:c0:e7:e9:75:1a:3b:be:fd:
33:60:42:79:4c:fb:a8:0b:d4:d5:b4:f8:0b:60:b8:0d:f9:be:
16:cd:69:79:19:75:aa:21:ba:11:c7:f3:73:8c:71:3e:fe:c1:
de:02:a5:00:5d:07:8d:8b:d7:7c:8d:b5:b0:99:da:3f:b6:a8:
81:db:31:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoC/vSRwvj5fervVuBmtstSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MTU4MjAzZGEzYTFlOTYzMThlODUwNDM0MTFlN2Q0ZDAz
ZDRjNDQwHhcNMjUxMDIwMTkwMDU0WhcNMjUxMDIxMTkwMDU0WjAzMTEwLwYDVQQD
EyhhYTIzYWY1ZGU4MzJkY2U1ZGU4ODI0Njg0YzNmMDFkYWJiM2NhOGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35MpiynxDTHeZKl5BNEgARHBaPcn
giZKnloDL5PnKse4FYZXu6YhoxoWnhoCx4qRZndwxNB1OcH66v9jRgheYCX4qgqJ
w1i8kplXkp7CgnxWhmoCEIXs2Mo10Lg3ryvHUdwwXK5MkkSXVSGVqWzXP+dFIawq
fX9LIdXjtnb6lUdO9qOk2yBZSUkoNmy/O4c2QYpRwG8gOgiWifQ1kl0XzNtx8FQO
/YbSm/HxfYm39oQZXLVIgYeHVXxrKl8LNenYESR3BWdf8EdktCi/N8uVQzqO6G10
ou7DJ6unNiFVZV4wrMctHrDYj0b3JAn6pIwM0kIYP7gKnq8aCUHJ/AeQzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKojr13oMtzl3ogkaEw/Adq7PKjOMB8GA1UdIwQY
MBaAFFQVggPaOh6WMY6FBDQR59TQPUxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkJXQ0E5bzZIcFl4am9VRU5CSG4xTkE5VEVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS85MWZkYjMtMTNlMi00MmIyLWFjNzMt
MWE1NWQxZTRjMjFjLzEvVkJXQ0E5bzZIcFl4am9VRU5CSG4xTkE5VEVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS85MWZkYjMtMTNlMi00MmIyLWFjNzMtMWE1NWQxZTRjMjFj
LzEvVkJXQ0E5bzZIcFl4am9VRU5CSG4xTkE5VEVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUfCQ81I
ERwdaIcmq2t/tFLBH0kyVOpDPq6YnvD/+jEa6IWalU7RyaM1uw0vlxW0AvWkmHUd
q1ByyEFudiLlilPXFABIFYEN9fBQHkpd4lG9gxO17gAS8NioInHiL0rOQlWLJu38
pVwu9eKZJa5rH/hfNFpHEGWg2quKuEPCVtsmwgA0LzGB8r5qtuBcQ+MpZJGdlKLv
8goxWCUtJsEWuPESM9GcxWN62k34SZUqzQuPGNB977HDzhg/Tc+YP8Dn6XUaO779
M2BCeUz7qAvU1bT4C2C4Dfm+Fs1peRl1qiG6Ecfzc4xxPv7B3gKlAF0HjYvXfI21
sJnaP7aogdsx5A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:09:43 2025 by rpki-client