Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
File: VTq9CI9YVGJD8CJwIs20e80dfY4.mft (raw, json)
Hash identifier: PIq2gaJdsAF5NEJomyCTHbbvo0FnLwLm1TSXfJChw94=
Subject key identifier: B7:45:C4:9A:5D:4F:31:2E:16:3D:51:0F:7D:7F:DA:0D:51:BC:DD:66
Authority key identifier: 55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
Certificate issuer: /CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Certificate serial: 019A006C44570BFBFEE1DFA3CF8B41CC8019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
Manifest number: 14DD
Signing time: Mon 20 Oct 2025 07:01:26 +0000
Manifest this update: Mon 20 Oct 2025 07:01:26 +0000
Manifest next update: Tue 21 Oct 2025 07:01:26 +0000
Files and hashes: 1: VTq9CI9YVGJD8CJwIs20e80dfY4.crl (hash: GLgXnsRgAjYNMT9vOprNQwM8+LS6yExU/gfGbgNN29Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:44:57:0b:fb:fe:e1:df:a3:cf:8b:41:cc:80:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Validity
Not Before: Oct 20 07:01:26 2025 GMT
Not After : Oct 21 07:01:26 2025 GMT
Subject: CN=b745c49a5d4f312e163d510f7d7fda0d51bcdd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:ca:06:ff:d2:41:66:c6:17:1c:17:65:23:
81:0c:4c:93:ba:81:74:f7:69:b1:ea:2e:c3:ea:29:
d7:e2:f9:7e:ed:8c:b8:28:dd:63:57:bf:21:a4:9c:
be:d8:f4:21:33:b2:7f:6e:8c:f4:88:ed:00:c3:55:
11:59:98:a6:6a:ef:a4:50:6a:f5:46:28:3b:da:2f:
64:aa:d3:8f:28:74:ca:46:44:3f:a7:0a:81:89:2b:
0c:b2:91:b1:b5:58:7a:67:a6:1c:53:34:a3:bd:ae:
dc:bf:dd:8c:56:8c:d3:c9:9f:6f:d6:d0:90:89:4c:
94:d3:1e:b3:8b:73:e3:34:6d:30:63:87:79:72:02:
16:97:d5:c6:f1:cd:da:b4:03:ce:2b:a1:cb:a6:97:
3e:28:ac:57:b3:c0:13:db:b7:c8:4a:ee:80:ae:c8:
61:c9:b6:54:cf:d1:c7:65:64:f0:ca:ad:ad:6e:b5:
dc:5e:45:02:7a:de:06:dc:a9:50:77:ec:ee:db:94:
36:79:f4:c2:70:b3:c3:e9:27:fc:5f:25:ab:f1:92:
dd:03:31:d8:a9:37:96:78:84:ea:4b:8c:e1:32:e3:
c3:bc:b9:bb:2c:af:bb:20:13:ee:30:9a:92:74:39:
e4:3a:f8:4c:68:8f:16:31:63:cf:ed:77:e8:06:b5:
3c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:45:C4:9A:5D:4F:31:2E:16:3D:51:0F:7D:7F:DA:0D:51:BC:DD:66
X509v3 Authority Key Identifier:
keyid:55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:82:a7:c0:a0:93:37:63:07:ed:b9:e0:f1:30:7d:c3:3d:e2:
86:a7:d4:82:a9:67:ef:1c:dd:60:7a:b6:a5:a6:4e:8f:9d:4f:
6d:5f:54:45:f6:fa:e5:e8:28:45:ec:4a:65:74:7a:9f:32:f6:
66:ab:c1:cb:0b:d7:9b:24:1b:3c:73:de:8f:5f:27:b9:5e:7d:
03:2e:cf:73:51:fe:95:0e:bf:8d:68:92:be:c0:75:c9:f7:ab:
de:66:66:d8:31:63:d9:2b:b4:ff:de:c7:92:99:40:dc:0a:67:
62:f6:dd:b1:4e:b1:a5:f2:fb:7e:b5:56:b4:0d:0d:07:af:03:
d7:37:7d:3c:ee:e8:7a:2c:3d:42:74:88:82:78:ac:80:25:d9:
e9:1b:1c:05:6d:fd:b9:90:41:c1:28:59:24:7d:11:43:9e:2d:
b1:88:16:3c:93:e6:57:8a:14:7d:6e:49:a6:20:a9:99:6e:ce:
60:fa:12:db:6c:d7:e9:3f:20:ec:db:3c:d1:71:5d:5f:9f:24:
91:51:25:44:e7:63:77:16:7c:2e:33:9b:ec:6c:68:fc:bd:32:
fa:3c:48:5a:1f:20:31:fd:bc:bd:c2:e0:28:72:5b:d6:34:82:
5f:5e:fb:38:b8:20:03:8c:ed:b6:c1:44:91:5f:67:88:e6:c0:
ec:bb:ef:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAbERXC/v+4d+jz4tBzIAZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1M2FiZDA4OGY1ODU0NjI0M2YwMjI3MDIyY2RiNDdiY2Qx
ZDdkOGUwHhcNMjUxMDIwMDcwMTI2WhcNMjUxMDIxMDcwMTI2WjAzMTEwLwYDVQQD
EyhiNzQ1YzQ5YTVkNGYzMTJlMTYzZDUxMGY3ZDdmZGEwZDUxYmNkZDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucjKBv/SQWbGFxwXZSOBDEyTuoF0
92mx6i7D6inX4vl+7Yy4KN1jV78hpJy+2PQhM7J/boz0iO0Aw1URWZimau+kUGr1
Rig72i9kqtOPKHTKRkQ/pwqBiSsMspGxtVh6Z6YcUzSjva7cv92MVozTyZ9v1tCQ
iUyU0x6zi3PjNG0wY4d5cgIWl9XG8c3atAPOK6HLppc+KKxXs8AT27fISu6Arshh
ybZUz9HHZWTwyq2tbrXcXkUCet4G3KlQd+zu25Q2efTCcLPD6Sf8XyWr8ZLdAzHY
qTeWeITqS4zhMuPDvLm7LK+7IBPuMJqSdDnkOvhMaI8WMWPP7XfoBrU8nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdFxJpdTzEuFj1RD31/2g1RvN1mMB8GA1UdIwQY
MBaAFFU6vQiPWFRiQ/AicCLNtHvNHX2OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jMmRhZWMtODc0ZS00ZDIyLTk2NzQt
ZDU2NmY3M2QzZmIwLzEvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9jMmRhZWMtODc0ZS00ZDIyLTk2NzQtZDU2NmY3M2QzZmIw
LzEvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYKnwKCT
N2MH7bng8TB9wz3ihqfUgqln7xzdYHq2paZOj51PbV9URfb65egoRexKZXR6nzL2
ZqvBywvXmyQbPHPej18nuV59Ay7Pc1H+lQ6/jWiSvsB1yfer3mZm2DFj2Su0/97H
kplA3ApnYvbdsU6xpfL7frVWtA0NB68D1zd9PO7oeiw9QnSIgnisgCXZ6RscBW39
uZBBwShZJH0RQ54tsYgWPJPmV4oUfW5JpiCpmW7OYPoS22zX6T8g7Ns80XFdX58k
kVElROdjdxZ8LjOb7Gxo/L0y+jxIWh8gMf28vcLgKHJb1jSCX177OLggA4zttsFE
kV9niObA7LvvQg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:08:46 2025 by rpki-client