Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
File: VRDNubrguTLHmin42XktMJ9617c.mft (raw, json)
Hash identifier: gf3WYfDWorWm+sjtilBN36uGbyNTtqupTh4w/8DC88M=
Subject key identifier: EA:6A:3B:10:E6:52:7B:7D:10:43:C1:E5:FF:23:0A:65:14:46:87:C4
Authority key identifier: 55:10:CD:B9:BA:E0:B9:32:C7:9A:29:F8:D9:79:2D:30:9F:7A:D7:B7
Certificate issuer: /CN=5510cdb9bae0b932c79a29f8d9792d309f7ad7b7
Certificate serial: 0199FC2151EF04C200CBDAEB65293A3F948F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
Manifest number: 0388
Signing time: Sun 19 Oct 2025 11:01:05 +0000
Manifest this update: Sun 19 Oct 2025 11:01:05 +0000
Manifest next update: Mon 20 Oct 2025 11:01:05 +0000
Files and hashes: 1: VRDNubrguTLHmin42XktMJ9617c.crl (hash: C+99rHnkZIDVYfFzWM1jYT/uu4Jjkasqp7Srm6Hp+rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:51:ef:04:c2:00:cb:da:eb:65:29:3a:3f:94:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5510cdb9bae0b932c79a29f8d9792d309f7ad7b7
Validity
Not Before: Oct 19 11:01:05 2025 GMT
Not After : Oct 20 11:01:05 2025 GMT
Subject: CN=ea6a3b10e6527b7d1043c1e5ff230a65144687c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:2d:08:f1:4f:c2:0f:ab:99:ec:66:a2:43:
e4:a0:8a:94:06:cb:b7:27:a1:77:92:df:2c:ea:86:
40:00:c8:fd:30:f7:54:76:2f:e6:0e:a0:28:ac:dc:
7b:30:38:57:4d:1c:ed:95:b7:c4:85:8a:f3:83:62:
04:a1:9c:0b:07:83:b5:10:ad:0b:c8:11:12:ad:18:
c9:1f:a5:9f:19:da:66:db:9b:28:52:85:34:9d:f7:
02:1e:0e:98:d4:3f:c0:1f:a2:f5:9a:21:fd:21:29:
6e:f8:1b:00:b7:77:1b:b4:87:c4:9b:04:a4:20:64:
90:aa:6a:c9:2a:22:56:f0:c3:11:4c:b4:dd:9e:29:
f4:41:c3:d1:0e:60:05:32:fd:62:80:70:af:b1:04:
7d:bc:11:de:34:06:3b:79:d9:51:81:38:f3:82:80:
6c:8a:ee:af:93:9b:69:28:e7:51:5c:97:51:d3:b3:
83:35:f7:ab:4d:fe:73:39:73:3e:f0:26:01:3c:6d:
b9:7b:e8:09:64:76:6c:c6:06:a3:1f:18:d8:9e:43:
9f:14:cb:15:41:f9:35:e5:1c:0f:fe:43:51:eb:d9:
6c:5e:af:f2:2f:fd:60:0a:78:57:1b:32:63:b1:f5:
4e:54:3e:61:e9:23:e8:c8:b8:22:bc:eb:9e:8c:97:
e4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6A:3B:10:E6:52:7B:7D:10:43:C1:E5:FF:23:0A:65:14:46:87:C4
X509v3 Authority Key Identifier:
keyid:55:10:CD:B9:BA:E0:B9:32:C7:9A:29:F8:D9:79:2D:30:9F:7A:D7:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:df:da:aa:36:fc:dd:7d:16:34:78:87:1c:e4:75:a0:4d:0a:
e9:10:8f:00:1f:96:4d:3e:2e:ea:ff:d0:44:91:2a:88:44:57:
e9:d4:a7:b4:ec:d5:64:3c:c1:99:1a:91:69:30:35:3e:61:73:
79:8e:57:12:66:c5:78:5f:69:a8:d7:4f:06:e4:80:92:0c:4a:
1e:f2:90:d2:71:48:08:d6:9b:cb:dd:c4:4f:66:19:a5:22:4c:
ca:c6:bf:b4:ec:f3:76:ba:86:4c:bd:a4:20:5d:8e:ed:7b:c0:
04:78:fb:19:e7:3b:29:10:03:7d:2d:5a:c5:6d:d2:f7:44:ef:
7d:36:1c:09:78:86:2b:0e:23:52:60:df:a5:73:57:af:95:58:
6b:3e:cb:82:8c:93:73:50:de:81:72:bc:f2:25:75:64:39:7b:
4b:b5:a6:94:6b:9e:6a:8b:06:e4:01:4b:07:d9:ff:a6:88:46:
85:d9:ec:ff:47:56:cc:d1:0c:3b:a1:9d:32:c0:ca:6d:c0:53:
55:f3:87:9e:4f:63:57:f4:c3:d8:d7:e6:32:7b:d7:ff:7e:f3:
59:9b:e8:87:cc:c7:99:91:39:ab:2f:e7:8c:e2:20:6f:5a:21:
2b:5c:de:d5:54:34:c9:99:de:65:3c:4c:bd:23:d1:54:28:50:
71:82:92:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IVHvBMIAy9rrZSk6P5SPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MTBjZGI5YmFlMGI5MzJjNzlhMjlmOGQ5NzkyZDMwOWY3
YWQ3YjcwHhcNMjUxMDE5MTEwMTA1WhcNMjUxMDIwMTEwMTA1WjAzMTEwLwYDVQQD
EyhlYTZhM2IxMGU2NTI3YjdkMTA0M2MxZTVmZjIzMGE2NTE0NDY4N2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIQtCPFPwg+rmexmokPkoIqUBsu3
J6F3kt8s6oZAAMj9MPdUdi/mDqAorNx7MDhXTRztlbfEhYrzg2IEoZwLB4O1EK0L
yBESrRjJH6WfGdpm25soUoU0nfcCHg6Y1D/AH6L1miH9ISlu+BsAt3cbtIfEmwSk
IGSQqmrJKiJW8MMRTLTdnin0QcPRDmAFMv1igHCvsQR9vBHeNAY7edlRgTjzgoBs
iu6vk5tpKOdRXJdR07ODNferTf5zOXM+8CYBPG25e+gJZHZsxgajHxjYnkOfFMsV
Qfk15RwP/kNR69lsXq/yL/1gCnhXGzJjsfVOVD5h6SPoyLgivOuejJfkAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpqOxDmUnt9EEPB5f8jCmUURofEMB8GA1UdIwQY
MBaAFFUQzbm64Lkyx5op+Nl5LTCfete3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlJETnVicmd1VExIbWluNDJYa3RNSjk2MTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83NzA5NjYtN2RhYy00ZTFjLWIzZWQt
ZGY1OTAyMDEzY2RmLzEvVlJETnVicmd1VExIbWluNDJYa3RNSjk2MTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83NzA5NjYtN2RhYy00ZTFjLWIzZWQtZGY1OTAyMDEzY2Rm
LzEvVlJETnVicmd1VExIbWluNDJYa3RNSjk2MTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsN/aqjb8
3X0WNHiHHOR1oE0K6RCPAB+WTT4u6v/QRJEqiERX6dSntOzVZDzBmRqRaTA1PmFz
eY5XEmbFeF9pqNdPBuSAkgxKHvKQ0nFICNaby93ET2YZpSJMysa/tOzzdrqGTL2k
IF2O7XvABHj7Gec7KRADfS1axW3S90TvfTYcCXiGKw4jUmDfpXNXr5VYaz7LgoyT
c1DegXK88iV1ZDl7S7WmlGueaosG5AFLB9n/pohGhdns/0dWzNEMO6GdMsDKbcBT
VfOHnk9jV/TD2NfmMnvX/37zWZvoh8zHmZE5qy/njOIgb1ohK1ze1VQ0yZneZTxM
vSPRVChQcYKSgg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:51 2025 by rpki-client