Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
File: VffKupvV-frB4BRadWfJtFmpXoY.mft (raw, json)
Hash identifier: 1iZlFLBcNbGgYBoFn8Yx8Qj6ZOZ/Fv8WQVYAKa3Wzlw=
Subject key identifier: 78:1D:D1:49:D1:11:8A:D5:EE:BC:22:E5:72:C7:12:53:41:3E:C3:0E
Authority key identifier: 55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86
Certificate issuer: /CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
Certificate serial: 0199FB7C9631295A04F3B27F5F9E77E06840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
Manifest number: 0869
Signing time: Sun 19 Oct 2025 08:01:09 +0000
Manifest this update: Sun 19 Oct 2025 08:01:09 +0000
Manifest next update: Mon 20 Oct 2025 08:01:09 +0000
Files and hashes: 1: VffKupvV-frB4BRadWfJtFmpXoY.crl (hash: XHCtfg+Fs7VfSMOoFK5jw23DqW6r3JtxhlP6mt67MLU=)
2: h9iKJvVZnfW0FXjotXiiLLyPbso.roa (hash: w8EgDiQ9haRr92gwy4BUjwQFbUX6Z1nbUCBqudVVAGE=)
3: tzSxEqbN9RPe7WLi6GpaqxSubiw.roa (hash: NQOfRB00StYv2rpk5RfPASO+YDaJlcYUJaTmyGg5oDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:96:31:29:5a:04:f3:b2:7f:5f:9e:77:e0:68:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
Validity
Not Before: Oct 19 08:01:09 2025 GMT
Not After : Oct 20 08:01:09 2025 GMT
Subject: CN=781dd149d1118ad5eebc22e572c71253413ec30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:14:5f:8c:9d:60:3b:3c:79:5c:31:a0:75:06:
9e:1a:1f:17:1c:d2:4b:5f:a4:fd:23:60:c4:89:58:
33:f9:40:20:37:65:e8:14:e1:1c:8f:70:f1:dc:d4:
1d:92:ab:dc:bf:36:0e:01:ee:ef:b8:65:9c:0d:96:
e7:a9:a0:c9:a5:f8:a3:b2:b1:e8:9d:99:92:75:09:
5b:16:72:dc:70:53:c4:a1:09:f3:ef:2d:23:13:87:
3c:ce:02:94:42:e5:3a:ee:a7:20:28:2c:d0:84:d0:
72:be:16:aa:50:db:03:7b:9a:ad:38:e5:6b:c0:c6:
17:1f:f4:69:b6:50:75:23:12:f6:d5:8c:64:bc:9b:
7a:4b:90:61:ca:bc:7d:06:6e:29:a9:53:16:6a:0b:
ac:e7:df:d1:ac:2a:7b:86:19:55:98:30:af:6f:98:
29:bc:00:30:e6:95:26:53:40:6d:53:e8:f8:44:a5:
42:ba:4e:4a:e9:73:4d:30:83:b5:cb:9b:32:a0:e5:
d2:9e:01:74:ae:91:6a:1b:59:03:96:8a:55:d6:95:
49:70:10:57:6b:29:1c:b3:87:0e:52:35:a9:a4:e7:
94:6f:19:25:7d:63:97:61:e4:e0:71:e2:02:38:fb:
44:cf:1f:50:22:92:20:81:4c:41:76:26:11:8b:0f:
18:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1D:D1:49:D1:11:8A:D5:EE:BC:22:E5:72:C7:12:53:41:3E:C3:0E
X509v3 Authority Key Identifier:
keyid:55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c5:07:bb:55:c5:b0:94:48:b1:63:ba:d1:17:8f:d4:2f:ad:
8b:28:7d:ec:a7:0c:6a:85:4e:28:4f:47:40:e0:9c:52:20:9f:
dc:31:c0:f6:28:19:fc:ba:97:88:0a:89:ea:44:1a:cc:7f:fb:
f1:02:ce:f7:0a:27:dc:3f:4a:b7:de:53:3e:a4:2e:0d:79:d8:
bf:f8:16:55:46:dd:73:73:f6:e3:cf:55:2b:49:81:01:61:8a:
b6:5f:43:8e:18:e5:e4:67:df:97:1f:44:f9:a4:72:57:43:66:
43:cb:7c:04:56:5f:53:19:55:e2:b8:b0:9a:10:71:85:6f:4e:
eb:1f:7c:41:e5:b8:eb:aa:87:78:c1:bd:b4:cc:ba:6d:57:3d:
8b:f3:e1:db:06:35:21:0d:73:e0:e1:be:b2:40:e3:53:58:97:
a6:c6:50:eb:9d:13:ac:f0:e7:f2:0a:af:95:e5:12:f9:ec:63:
4e:2c:af:be:bb:d6:32:0d:4c:e9:9c:f9:93:2d:f4:d0:5b:92:
ac:80:06:5f:fd:67:0c:2f:36:48:ee:df:ae:29:64:d1:65:78:
f4:f6:76:38:be:48:aa:2b:c9:8e:6d:3e:e1:d9:58:26:7d:74:
01:70:80:c5:32:32:c3:49:5e:d0:ba:d2:4f:6b:80:2d:11:ee:
db:17:17:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fJYxKVoE87J/X5534GhAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZjdjYWJhOWJkNWY5ZmFjMWUwMTQ1YTc1NjdjOWI0NTlh
OTVlODYwHhcNMjUxMDE5MDgwMTA5WhcNMjUxMDIwMDgwMTA5WjAzMTEwLwYDVQQD
Eyg3ODFkZDE0OWQxMTE4YWQ1ZWViYzIyZTU3MmM3MTI1MzQxM2VjMzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRRfjJ1gOzx5XDGgdQaeGh8XHNJL
X6T9I2DEiVgz+UAgN2XoFOEcj3Dx3NQdkqvcvzYOAe7vuGWcDZbnqaDJpfijsrHo
nZmSdQlbFnLccFPEoQnz7y0jE4c8zgKUQuU67qcgKCzQhNByvhaqUNsDe5qtOOVr
wMYXH/RptlB1IxL21YxkvJt6S5Bhyrx9Bm4pqVMWagus59/RrCp7hhlVmDCvb5gp
vAAw5pUmU0BtU+j4RKVCuk5K6XNNMIO1y5syoOXSngF0rpFqG1kDlopV1pVJcBBX
aykcs4cOUjWppOeUbxklfWOXYeTgceICOPtEzx9QIpIggUxBdiYRiw8YMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgd0UnREYrV7rwi5XLHElNBPsMOMB8GA1UdIwQY
MBaAFFX3yrqb1fn6weAUWnVnybRZqV6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmZmS3VwdlYtZnJCNEJSYWRXZkp0Rm1wWG9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mMGY2ZDMtYTkwNC00MjNiLThmOTUt
ZmMwN2NlNGEzN2U2LzEvVmZmS3VwdlYtZnJCNEJSYWRXZkp0Rm1wWG9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9mMGY2ZDMtYTkwNC00MjNiLThmOTUtZmMwN2NlNGEzN2U2
LzEvVmZmS3VwdlYtZnJCNEJSYWRXZkp0Rm1wWG9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXcUHu1XF
sJRIsWO60ReP1C+tiyh97KcMaoVOKE9HQOCcUiCf3DHA9igZ/LqXiAqJ6kQazH/7
8QLO9won3D9Kt95TPqQuDXnYv/gWVUbdc3P2489VK0mBAWGKtl9Djhjl5Gfflx9E
+aRyV0NmQ8t8BFZfUxlV4riwmhBxhW9O6x98QeW466qHeMG9tMy6bVc9i/Ph2wY1
IQ1z4OG+skDjU1iXpsZQ650TrPDn8gqvleUS+exjTiyvvrvWMg1M6Zz5ky300FuS
rIAGX/1nDC82SO7frilk0WV49PZ2OL5IqivJjm0+4dlYJn10AXCAxTIyw0le0LrS
T2uALRHu2xcX6Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:43 2025 by rpki-client