Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
File: 1-VA8B1ppBVa9RiEiskaZ4baxkng.mft (raw, json)
Hash identifier: LwY+440kwwjNpJ0KdZZ1FOOWVAhL9YJM3seMm7/DRsM=
Subject key identifier: 50:98:38:C2:4E:56:2F:1D:ED:E1:42:EE:E3:8E:51:0D:63:62:2D:18
Authority key identifier: F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
Certificate issuer: /CN=f9503c075a690556bd462122b24699e1b6b19278
Certificate serial: 0199FC217520B9338D139C9B8C84CBE0E20A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
Manifest number: 16EA
Signing time: Sun 19 Oct 2025 11:01:14 +0000
Manifest this update: Sun 19 Oct 2025 11:01:14 +0000
Manifest next update: Mon 20 Oct 2025 11:01:14 +0000
Files and hashes: 1: 1-VA8B1ppBVa9RiEiskaZ4baxkng.crl (hash: Uj0XSIWwtiz5E3uFZQ+LD7wo/ZbfXH4HJDQqFklQLZs=)
2: p2SVo4qsSiAegswh4Tt4B2CgnX0.roa (hash: ZR7WcDeaKIDHi9EqUsqBzkr/KcnAMrpHKscQ/Pybjlk=)
3: q2ZLX08w7-Dcrgr57h1hgcnfkXY.roa (hash: uFC0sIXPmgIMFYS0E5zDcKQoPca0pnQPm/3b/35uS2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:75:20:b9:33:8d:13:9c:9b:8c:84:cb:e0:e2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9503c075a690556bd462122b24699e1b6b19278
Validity
Not Before: Oct 19 11:01:14 2025 GMT
Not After : Oct 20 11:01:14 2025 GMT
Subject: CN=509838c24e562f1dede142eee38e510d63622d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:13:5e:87:c4:01:d9:25:45:8f:80:52:83:9a:
1d:0a:c8:fd:3b:11:87:51:8a:f8:a8:35:90:9c:01:
5c:0e:af:25:4f:2c:23:b6:3e:ca:aa:d4:74:fb:52:
64:04:c7:fc:bf:03:0f:f0:fe:b8:ba:dd:ea:f4:11:
08:53:c6:6f:2d:67:75:c0:3f:67:76:b0:f7:30:56:
bc:26:88:f6:0c:e7:68:70:b8:86:4b:cc:f1:11:29:
da:ec:cb:ac:d1:e8:67:de:b9:2a:08:88:4f:e8:6c:
8e:97:82:4b:b6:b9:b7:53:3a:e5:4a:f0:3c:90:7e:
22:2b:9a:55:8e:da:70:9b:f0:e5:10:79:8c:76:94:
08:68:bd:d7:5c:7d:a6:0e:d6:45:b7:67:6c:2a:2c:
72:ec:4d:89:cb:69:f0:42:ef:d5:ef:8a:2f:66:be:
2e:5b:e7:39:d9:fc:71:c3:66:09:4a:d1:e3:02:9e:
0d:12:48:b6:b0:99:33:ce:7b:19:d5:57:5b:19:82:
89:bb:08:99:19:e1:61:8a:7d:75:f1:18:6f:26:21:
b6:cc:14:9b:7b:cb:6a:ca:90:55:7a:cf:d3:1c:04:
d4:13:8e:12:a8:90:14:73:14:f8:59:4e:54:fb:a8:
f9:f9:52:30:2b:73:38:c7:91:92:41:a0:da:2f:f3:
20:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:98:38:C2:4E:56:2F:1D:ED:E1:42:EE:E3:8E:51:0D:63:62:2D:18
X509v3 Authority Key Identifier:
keyid:F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2f:59:82:14:d3:f6:ed:95:fc:25:4a:54:97:37:04:b0:2f:
89:36:af:80:27:5d:4d:d9:2b:73:75:5f:ad:5a:87:f5:1c:9f:
d6:f7:95:e2:40:ce:bf:34:63:83:7f:2b:e8:23:07:3b:76:45:
c9:a8:a7:b7:ab:10:83:7d:47:da:4c:e9:e2:40:31:a6:5b:d3:
a8:d9:8e:44:e7:7b:83:62:46:4b:b7:97:29:ea:fc:f4:c2:67:
3f:d7:9b:57:5c:b4:f4:55:3f:10:03:88:a4:ac:0e:8c:cb:91:
ae:8e:67:7d:bb:dd:9a:cb:7b:8d:00:7b:b1:89:dd:2d:e3:8f:
8a:4b:f0:a6:3c:bd:01:44:e8:65:30:58:e1:b3:73:0c:04:2f:
4b:82:d7:e9:7d:d6:4c:24:b4:26:64:9d:06:51:37:00:8a:f4:
8f:07:f1:98:38:2b:14:31:0a:16:99:d6:ea:af:7a:64:1e:3c:
eb:3f:ee:4e:df:ea:42:1c:1d:66:2f:b3:d7:da:7c:70:8f:28:
50:ec:69:69:43:2b:24:dc:bf:8a:57:4e:d5:ec:f3:b4:8c:5d:
55:c1:5b:60:40:a8:bc:44:d0:54:74:f7:14:6a:f2:74:89:58:
22:1b:7b:fc:ce:c5:35:fc:96:48:23:38:1b:16:b7:12:cb:2b:
30:ac:2b:08
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn8IXUguTONE5ybjITL4OIKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NTAzYzA3NWE2OTA1NTZiZDQ2MjEyMmIyNDY5OWUxYjZi
MTkyNzgwHhcNMjUxMDE5MTEwMTE0WhcNMjUxMDIwMTEwMTE0WjAzMTEwLwYDVQQD
Eyg1MDk4MzhjMjRlNTYyZjFkZWRlMTQyZWVlMzhlNTEwZDYzNjIyZDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BNeh8QB2SVFj4BSg5odCsj9OxGH
UYr4qDWQnAFcDq8lTywjtj7KqtR0+1JkBMf8vwMP8P64ut3q9BEIU8ZvLWd1wD9n
drD3MFa8Joj2DOdocLiGS8zxESna7Mus0ehn3rkqCIhP6GyOl4JLtrm3UzrlSvA8
kH4iK5pVjtpwm/DlEHmMdpQIaL3XXH2mDtZFt2dsKixy7E2Jy2nwQu/V74ovZr4u
W+c52fxxw2YJStHjAp4NEki2sJkzznsZ1VdbGYKJuwiZGeFhin118RhvJiG2zBSb
e8tqypBVes/THATUE44SqJAUcxT4WU5U+6j5+VIwK3M4x5GSQaDaL/MgGQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFCYOMJOVi8d7eFC7uOOUQ1jYi0YMB8GA1UdIwQY
MBaAFPlQPAdaaQVWvUYhIrJGmeG2sZJ4MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1WQThCMXBwQlZhOVJpRWlza2FaNGJheGtuZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvNGZhNGI0LTdjOTYtNGViNy05OTQw
LTNmMjMxNmI1NTNmNS8xLzEtVkE4QjFwcEJWYTlSaUVpc2thWjRiYXhrbmcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzc1LzRmYTRiNC03Yzk2LTRlYjctOTk0MC0zZjIzMTZiNTUz
ZjUvMS8xLVZBOEIxcHBCVmE5UmlFaXNrYVo0YmF4a25nLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApC9Z
ghTT9u2V/CVKVJc3BLAviTavgCddTdkrc3VfrVqH9Ryf1veV4kDOvzRjg38r6CMH
O3ZFyaint6sQg31H2kzp4kAxplvTqNmOROd7g2JGS7eXKer89MJnP9ebV1y09FU/
EAOIpKwOjMuRro5nfbvdmst7jQB7sYndLeOPikvwpjy9AUToZTBY4bNzDAQvS4LX
6X3WTCS0JmSdBlE3AIr0jwfxmDgrFDEKFpnW6q96ZB486z/uTt/qQhwdZi+z19p8
cI8oUOxpaUMrJNy/ildO1ezztIxdVcFbYECovETQVHT3FGrydIlYIht7/M7FNfyW
SCM4Gxa3EssrMKwrCA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:38 2025 by rpki-client