Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft
File: VKzhXkXvtaAGDAZeJ06o46-wJes.mft (raw, json)
Hash identifier: f5gN0ESYhEYOp3tPQdRGrfYz9aPqJ53NKRFhPN7LtB0=
Subject key identifier: 36:F8:C9:D4:6B:2C:3C:58:91:43:92:31:AE:74:F7:E1:DE:14:87:4F
Authority key identifier: 54:AC:E1:5E:45:EF:B5:A0:06:0C:06:5E:27:4E:A8:E3:AF:B0:25:EB
Certificate issuer: /CN=54ace15e45efb5a0060c065e274ea8e3afb025eb
Certificate serial: 019A003513ABD570B7E3F4CDCB1C9E6DDD01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 06:01:09 +0000
Manifest this update: Mon 20 Oct 2025 06:01:09 +0000
Manifest next update: Tue 21 Oct 2025 06:01:09 +0000
Files and hashes: 1: VKzhXkXvtaAGDAZeJ06o46-wJes.crl (hash: H+S1P+jIAZ3ek/fwikgTFohDo5+Zl0YIQW3JHt+K3EM=)
2: agadNAkdL8gZSJjhebbq78b-GQQ.roa (hash: AWs3/nEl7KZJPMZNEu10pqsOCcoVUqcD7DcXZsQJMg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:13:ab:d5:70:b7:e3:f4:cd:cb:1c:9e:6d:dd:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ace15e45efb5a0060c065e274ea8e3afb025eb
Validity
Not Before: Oct 20 06:01:09 2025 GMT
Not After : Oct 21 06:01:09 2025 GMT
Subject: CN=36f8c9d46b2c3c5891439231ae74f7e1de14874f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:4a:35:ab:32:f0:8f:d9:9b:e4:db:75:9b:
c0:6e:ab:cb:84:a2:60:ac:62:2c:d3:22:91:24:37:
2a:c7:ff:28:e3:d4:0c:74:c9:65:a9:f0:0e:71:68:
e5:de:f0:84:b5:bf:e3:34:63:a1:74:24:90:d3:47:
cf:b4:f0:43:29:18:01:ba:c0:92:44:67:a0:23:90:
24:85:df:d7:b5:f6:af:2f:40:ec:13:ef:e6:44:dd:
f9:6e:89:d7:1a:4a:cb:52:41:5d:c8:87:dd:4a:f7:
06:b0:df:05:c4:d5:18:c8:8e:7d:68:cd:35:43:d7:
95:3c:38:d1:ab:6a:a4:0a:a5:63:aa:0e:70:18:42:
d8:20:34:fd:9a:21:08:87:72:4b:7e:c9:0c:d5:b7:
73:42:8b:37:8d:84:2d:4d:43:77:b7:ef:37:f0:27:
0a:3b:d2:9b:44:d9:39:02:64:59:94:1a:7a:51:d9:
bf:ea:56:4e:0d:68:0c:3b:71:33:e5:82:c0:87:11:
1f:66:89:fb:93:ed:45:b5:75:32:ca:f2:96:1b:7a:
df:cf:81:d9:70:a0:7a:f9:e8:59:a4:c4:95:67:66:
bc:21:49:dc:15:19:1a:9b:8c:ff:bc:fc:ca:59:2c:
38:bd:51:e3:69:cd:de:68:08:99:23:f8:c1:2c:9e:
2b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F8:C9:D4:6B:2C:3C:58:91:43:92:31:AE:74:F7:E1:DE:14:87:4F
X509v3 Authority Key Identifier:
keyid:54:AC:E1:5E:45:EF:B5:A0:06:0C:06:5E:27:4E:A8:E3:AF:B0:25:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:06:3d:7b:a4:c9:9e:b4:15:84:de:49:6b:43:75:77:d8:ff:
89:b3:15:0f:d4:2f:b2:11:7b:ab:f9:27:79:29:02:41:8a:48:
8c:dc:d7:a6:df:ac:e1:57:3f:77:8f:87:4b:cc:c3:84:b1:5b:
87:f9:06:01:db:c3:64:ef:d8:33:3b:1d:20:96:1c:e0:ea:b2:
9d:27:db:33:e3:80:f3:88:02:b3:ec:c8:4e:68:a1:a8:a0:c9:
bc:6e:31:a1:67:69:33:59:7a:f3:01:5f:ea:c1:c7:b3:45:5c:
b7:47:c0:66:9d:01:54:d7:a8:65:a1:d4:53:05:eb:1a:f4:06:
9e:a0:20:84:31:5e:4f:d8:c2:ea:f4:4d:be:07:f5:61:33:ab:
53:f5:1d:50:bb:37:a0:d6:b8:ab:97:68:a0:2a:40:59:d6:84:
12:5c:18:51:ef:0d:70:b0:6b:e8:cd:60:8e:98:ff:39:33:44:
f8:d3:e3:d3:1c:a9:09:38:79:fa:6b:dc:a8:a7:03:6d:29:5b:
b3:61:f1:e5:26:fe:ac:33:d6:15:71:28:15:65:7c:a5:22:dd:
62:50:e4:0e:5b:7b:84:22:b9:15:47:9f:8a:ea:32:af:bc:f3:
e6:51:03:7e:36:30:4e:60:b2:75:4a:2c:d7:5c:e4:e8:fb:26:
32:9a:bc:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANROr1XC34/TNyxyebd0BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YWNlMTVlNDVlZmI1YTAwNjBjMDY1ZTI3NGVhOGUzYWZi
MDI1ZWIwHhcNMjUxMDIwMDYwMTA5WhcNMjUxMDIxMDYwMTA5WjAzMTEwLwYDVQQD
EygzNmY4YzlkNDZiMmMzYzU4OTE0MzkyMzFhZTc0ZjdlMWRlMTQ4NzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshdKNasy8I/Zm+TbdZvAbqvLhKJg
rGIs0yKRJDcqx/8o49QMdMllqfAOcWjl3vCEtb/jNGOhdCSQ00fPtPBDKRgBusCS
RGegI5Akhd/XtfavL0DsE+/mRN35bonXGkrLUkFdyIfdSvcGsN8FxNUYyI59aM01
Q9eVPDjRq2qkCqVjqg5wGELYIDT9miEIh3JLfskM1bdzQos3jYQtTUN3t+838CcK
O9KbRNk5AmRZlBp6Udm/6lZODWgMO3Ez5YLAhxEfZon7k+1FtXUyyvKWG3rfz4HZ
cKB6+ehZpMSVZ2a8IUncFRkam4z/vPzKWSw4vVHjac3eaAiZI/jBLJ4r8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDb4ydRrLDxYkUOSMa509+HeFIdPMB8GA1UdIwQY
MBaAFFSs4V5F77WgBgwGXidOqOOvsCXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkt6aFhrWHZ0YUFHREFaZUowNm80Ni13SmVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny84ZWZhNDUtOTJhOC00NTEzLTlmOWEt
YWQyYjYxMzgwYmUxLzEvVkt6aFhrWHZ0YUFHREFaZUowNm80Ni13SmVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny84ZWZhNDUtOTJhOC00NTEzLTlmOWEtYWQyYjYxMzgwYmUx
LzEvVkt6aFhrWHZ0YUFHREFaZUowNm80Ni13SmVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQY9e6TJ
nrQVhN5Ja0N1d9j/ibMVD9QvshF7q/kneSkCQYpIjNzXpt+s4Vc/d4+HS8zDhLFb
h/kGAdvDZO/YMzsdIJYc4OqynSfbM+OA84gCs+zITmihqKDJvG4xoWdpM1l68wFf
6sHHs0Vct0fAZp0BVNeoZaHUUwXrGvQGnqAghDFeT9jC6vRNvgf1YTOrU/UdULs3
oNa4q5dooCpAWdaEElwYUe8NcLBr6M1gjpj/OTNE+NPj0xypCTh5+mvcqKcDbSlb
s2Hx5Sb+rDPWFXEoFWV8pSLdYlDkDlt7hCK5FUefiuoyr7zz5lEDfjYwTmCydUos
11zk6PsmMpq8GA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:33 2025 by rpki-client