Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
File: VvciqIWr65qv-zLadk7wkbWyA0A.mft (raw, json)
Hash identifier: wye8Ay/kERQuS0eHbUpx3B43H/Lluo3YVq/O3cE9rI0=
Subject key identifier: 60:BD:02:E7:D8:AA:36:AB:CD:4C:F7:30:42:63:C7:2F:6D:AC:B3:D0
Authority key identifier: 56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40
Certificate issuer: /CN=56f722a885abeb9aaffb32da764ef091b5b20340
Certificate serial: 0199FC8FB40DB73CF8D75BFCC3B94A2E1D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
Manifest number: 0A04
Signing time: Sun 19 Oct 2025 13:01:40 +0000
Manifest this update: Sun 19 Oct 2025 13:01:40 +0000
Manifest next update: Mon 20 Oct 2025 13:01:40 +0000
Files and hashes: 1: VvciqIWr65qv-zLadk7wkbWyA0A.crl (hash: rlPS2oj4KDOF+uyaDdscLTIrL2oxcw8dIriKezqwCvg=)
2: vpimmj50rM3b693dSW6yAkLWvvA.roa (hash: 5VKPzqmzdczcoLOJtvbaVQfmAQ+1p8lObAjIuI3KfsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b4:0d:b7:3c:f8:d7:5b:fc:c3:b9:4a:2e:1d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f722a885abeb9aaffb32da764ef091b5b20340
Validity
Not Before: Oct 19 13:01:40 2025 GMT
Not After : Oct 20 13:01:40 2025 GMT
Subject: CN=60bd02e7d8aa36abcd4cf7304263c72f6dacb3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:13:18:d9:17:ab:4a:d1:1e:cc:60:69:2a:5e:
ab:96:ea:e1:0e:69:ed:93:1a:a6:d3:6b:c0:b0:23:
8a:f2:56:16:76:e1:d7:e8:03:2b:35:23:de:4e:55:
26:33:51:f8:ee:aa:69:82:f0:7c:71:d4:f0:40:e6:
89:f6:9a:00:13:53:1e:fe:6c:f9:0c:63:cf:68:aa:
e4:d8:b4:99:fa:cb:ec:4a:65:73:ec:bc:b8:7d:13:
b7:1d:cf:b6:42:42:d9:c2:73:96:cf:79:60:2a:97:
39:30:86:8b:21:a3:c7:af:81:77:e8:2d:52:2a:d8:
19:84:48:52:00:16:4e:10:d8:4f:df:b1:41:ef:51:
65:09:f5:a2:41:9d:5d:bf:a9:88:ec:71:ad:e0:72:
81:9b:38:e5:71:5f:e2:c7:3c:6f:09:46:64:1f:29:
5e:5a:d6:08:16:0d:ea:9e:bd:ad:68:ed:ee:97:29:
e0:77:03:94:1f:d7:02:f0:ed:4f:ae:8e:1f:f9:c2:
87:ee:9d:ca:de:e9:81:d2:3b:13:02:37:ef:08:8a:
02:00:f1:d4:a3:ea:d7:44:a2:60:e2:9c:cd:05:99:
20:15:7c:e3:2d:95:4c:82:7b:e7:2f:df:d1:2b:cf:
90:a7:a9:ba:3f:d2:a0:39:46:a1:a5:5b:3b:18:f9:
86:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BD:02:E7:D8:AA:36:AB:CD:4C:F7:30:42:63:C7:2F:6D:AC:B3:D0
X509v3 Authority Key Identifier:
keyid:56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:cb:dc:76:10:26:64:d4:6a:b6:11:74:1e:ea:59:89:9b:db:
19:4a:81:d8:44:37:64:82:0a:a1:50:f4:2f:db:d4:ff:b7:89:
dc:b7:f3:3c:3c:b6:b6:48:14:29:bd:f2:fb:e0:1a:f5:26:04:
ff:df:aa:7d:6b:73:2a:58:fa:a5:cf:69:cf:2b:21:d4:3f:d9:
46:53:af:a9:69:2c:69:fd:63:c5:0d:fc:f7:92:34:fa:d8:cf:
f9:44:7e:03:93:19:3c:7a:8b:de:6a:92:eb:60:0f:5a:f2:1c:
78:51:f5:1b:f5:35:72:4b:51:6b:5d:9c:82:f6:f0:4e:7d:03:
42:ba:02:17:8e:00:d2:1c:e5:6b:20:32:54:03:8e:02:dc:53:
84:46:2f:23:15:ca:17:1b:54:d0:f9:ec:d5:7d:2a:b8:76:d1:
38:7c:1d:45:fa:ef:1c:e1:77:14:49:70:0f:f5:37:7f:a3:1d:
5d:78:1c:86:e2:d2:bd:50:5e:d4:de:45:2e:da:8f:49:7c:a2:
43:11:68:0a:63:7c:da:a5:e1:74:7c:be:5b:5b:70:aa:29:98:
e4:36:05:34:11:38:69:37:4c:94:2b:38:13:81:c5:8f:f9:35:
bc:b9:ac:56:fc:62:ff:20:97:bb:e5:9c:66:b3:41:80:1f:4e:
e8:16:43:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j7QNtzz411v8w7lKLh1xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZjcyMmE4ODVhYmViOWFhZmZiMzJkYTc2NGVmMDkxYjVi
MjAzNDAwHhcNMjUxMDE5MTMwMTQwWhcNMjUxMDIwMTMwMTQwWjAzMTEwLwYDVQQD
Eyg2MGJkMDJlN2Q4YWEzNmFiY2Q0Y2Y3MzA0MjYzYzcyZjZkYWNiM2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBMY2RerStEezGBpKl6rlurhDmnt
kxqm02vAsCOK8lYWduHX6AMrNSPeTlUmM1H47qppgvB8cdTwQOaJ9poAE1Me/mz5
DGPPaKrk2LSZ+svsSmVz7Ly4fRO3Hc+2QkLZwnOWz3lgKpc5MIaLIaPHr4F36C1S
KtgZhEhSABZOENhP37FB71FlCfWiQZ1dv6mI7HGt4HKBmzjlcV/ixzxvCUZkHyle
WtYIFg3qnr2taO3ulyngdwOUH9cC8O1Pro4f+cKH7p3K3umB0jsTAjfvCIoCAPHU
o+rXRKJg4pzNBZkgFXzjLZVMgnvnL9/RK8+Qp6m6P9KgOUahpVs7GPmGRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGC9AufYqjarzUz3MEJjxy9trLPQMB8GA1UdIwQY
MBaAFFb3IqiFq+uar/sy2nZO8JG1sgNAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnZjaXFJV3I2NXF2LXpMYWRrN3drYld5QTBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84OTkyYjEtMTYwMC00YjkyLTk5YTUt
ODE0MGMxMTZmMGM4LzEvVnZjaXFJV3I2NXF2LXpMYWRrN3drYld5QTBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni84OTkyYjEtMTYwMC00YjkyLTk5YTUtODE0MGMxMTZmMGM4
LzEvVnZjaXFJV3I2NXF2LXpMYWRrN3drYld5QTBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcvcdhAm
ZNRqthF0HupZiZvbGUqB2EQ3ZIIKoVD0L9vU/7eJ3LfzPDy2tkgUKb3y++Aa9SYE
/9+qfWtzKlj6pc9pzysh1D/ZRlOvqWksaf1jxQ3895I0+tjP+UR+A5MZPHqL3mqS
62APWvIceFH1G/U1cktRa12cgvbwTn0DQroCF44A0hzlayAyVAOOAtxThEYvIxXK
FxtU0Pns1X0quHbROHwdRfrvHOF3FElwD/U3f6MdXXgchuLSvVBe1N5FLtqPSXyi
QxFoCmN82qXhdHy+W1twqimY5DYFNBE4aTdMlCs4E4HFj/k1vLmsVvxi/yCXu+Wc
ZrNBgB9O6BZDfQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:25 2025 by rpki-client