Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
File: VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft (raw, json)
Hash identifier: q0sSHpnWsy6Pi7MeaH4Is6YlKnOsn0OjV2kXmEXoDUg=
Subject key identifier: 1C:9C:51:12:09:F2:E0:A8:91:7B:E7:7D:87:F4:44:97:5E:B4:0C:D2
Authority key identifier: 54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
Certificate issuer: /CN=540f4a1b92338b49ca63021219059ce570ff5964
Certificate serial: 0199FB45ED00DDFD174CDA8432A08F9DC421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
Manifest number: 0517
Signing time: Sun 19 Oct 2025 07:01:27 +0000
Manifest this update: Sun 19 Oct 2025 07:01:27 +0000
Manifest next update: Mon 20 Oct 2025 07:01:27 +0000
Files and hashes: 1: VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl (hash: vBCZv72EG2sZe2sRpgUabsrZ2PUslJfqciDjqYu+z0g=)
2: _WaDfELTBc_dUmy6Cu013iGAFy4.roa (hash: 4Ui783wG8atURB8iqdX/TxaJyYCKy9S+Gr0JJXsrTgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:ed:00:dd:fd:17:4c:da:84:32:a0:8f:9d:c4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540f4a1b92338b49ca63021219059ce570ff5964
Validity
Not Before: Oct 19 07:01:27 2025 GMT
Not After : Oct 20 07:01:27 2025 GMT
Subject: CN=1c9c511209f2e0a8917be77d87f444975eb40cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:47:c8:cc:2d:07:93:d8:96:08:81:cb:f6:
a1:2a:85:53:4b:b9:93:93:33:b4:79:b2:f6:bd:ba:
0e:a9:d1:5c:67:81:05:03:de:82:35:75:a3:21:b2:
95:ae:cc:bd:c3:93:36:6f:82:1d:71:02:f8:b5:02:
f7:40:42:cd:8b:06:98:74:c2:f8:38:11:f4:ec:a7:
46:c7:7c:1a:2b:10:15:52:f9:8e:3f:f9:a0:e5:42:
e6:39:87:c2:e7:d0:e7:76:71:f2:0b:3d:42:e4:20:
b3:ff:72:33:d3:27:0d:b0:da:e2:c3:39:fd:f3:c9:
7e:91:5c:f7:32:2d:c7:53:3b:a8:bc:8c:19:aa:c2:
5e:4a:5b:db:0c:dd:1b:49:b8:1f:d1:6f:e2:19:b2:
05:12:1b:6f:a8:5e:57:52:6e:81:44:32:c8:e5:21:
25:d1:e5:80:71:58:e6:e8:2b:bf:a5:06:52:1c:e8:
6f:05:f3:19:c7:1e:05:e7:bd:47:4d:09:df:a7:06:
05:d2:95:c8:03:c2:a3:6d:06:eb:1d:2b:c7:fe:6c:
96:d1:93:4a:b2:8c:3b:ec:88:46:c6:1d:f6:32:66:
1b:1b:93:fd:26:87:cf:b4:72:54:ff:fa:1a:25:c7:
1d:18:34:cc:83:6d:6c:16:6b:8a:2d:4f:0a:d0:5f:
2a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9C:51:12:09:F2:E0:A8:91:7B:E7:7D:87:F4:44:97:5E:B4:0C:D2
X509v3 Authority Key Identifier:
keyid:54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c8:0e:22:9e:1e:90:d6:cf:e9:b9:dc:49:b5:6d:21:77:22:
b4:b4:45:d4:3b:89:c5:9c:6b:f7:03:a6:83:75:7a:cd:4c:2a:
97:1d:e8:5a:9a:f0:f0:c8:ea:78:25:84:6e:00:20:c4:19:18:
4c:08:c7:9d:36:75:53:8b:62:da:0e:dd:7f:12:9a:7a:55:72:
d0:73:fe:e8:30:a2:bf:30:24:a1:76:4d:a7:79:d8:0f:b4:bf:
0e:a6:e7:cb:6f:e5:c9:4d:6c:61:d0:5c:48:2b:1a:d1:b1:4e:
fc:2c:32:25:96:06:ba:e4:e8:8e:31:b2:8d:2b:89:f2:58:a0:
84:c4:c7:cf:26:13:63:79:36:79:4f:60:b7:1e:f6:a7:ea:d9:
a2:d8:67:f6:59:3c:e8:be:fa:60:6b:95:b4:9c:8a:d6:f4:ca:
74:0b:6b:f4:5e:7b:dc:02:11:48:4d:a4:61:85:f4:f6:c7:77:
22:91:a1:5d:02:03:43:f0:db:08:29:cd:2e:6d:9a:8b:ac:ab:
b7:be:5a:fa:59:4c:2e:cf:c9:91:1f:4d:44:45:0c:3a:df:f7:
88:2e:c2:52:28:6f:70:29:b3:d6:80:ce:27:f6:f0:5f:6f:eb:
09:9c:2e:4f:51:cc:97:6a:76:7f:69:71:b3:ed:69:03:09:45:
be:c3:d7:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Re0A3f0XTNqEMqCPncQhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MGY0YTFiOTIzMzhiNDljYTYzMDIxMjE5MDU5Y2U1NzBm
ZjU5NjQwHhcNMjUxMDE5MDcwMTI3WhcNMjUxMDIwMDcwMTI3WjAzMTEwLwYDVQQD
EygxYzljNTExMjA5ZjJlMGE4OTE3YmU3N2Q4N2Y0NDQ5NzVlYjQwY2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJNHyMwtB5PYlgiBy/ahKoVTS7mT
kzO0ebL2vboOqdFcZ4EFA96CNXWjIbKVrsy9w5M2b4IdcQL4tQL3QELNiwaYdML4
OBH07KdGx3waKxAVUvmOP/mg5ULmOYfC59DndnHyCz1C5CCz/3Iz0ycNsNriwzn9
88l+kVz3Mi3HUzuovIwZqsJeSlvbDN0bSbgf0W/iGbIFEhtvqF5XUm6BRDLI5SEl
0eWAcVjm6Cu/pQZSHOhvBfMZxx4F571HTQnfpwYF0pXIA8KjbQbrHSvH/myW0ZNK
sow77IhGxh32MmYbG5P9JofPtHJU//oaJccdGDTMg21sFmuKLU8K0F8q7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBycURIJ8uCokXvnfYf0RJdetAzSMB8GA1UdIwQY
MBaAFFQPShuSM4tJymMCEhkFnOVw/1lkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkE5S0c1SXppMG5LWXdJU0dRV2M1WERfV1dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84ZjZmMjYtODM1ZS00NTQ3LWI3NzAt
ZTA1MjkwMTZjYmEwLzEvVkE5S0c1SXppMG5LWXdJU0dRV2M1WERfV1dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My84ZjZmMjYtODM1ZS00NTQ3LWI3NzAtZTA1MjkwMTZjYmEw
LzEvVkE5S0c1SXppMG5LWXdJU0dRV2M1WERfV1dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcgOIp4e
kNbP6bncSbVtIXcitLRF1DuJxZxr9wOmg3V6zUwqlx3oWprw8MjqeCWEbgAgxBkY
TAjHnTZ1U4ti2g7dfxKaelVy0HP+6DCivzAkoXZNp3nYD7S/Dqbny2/lyU1sYdBc
SCsa0bFO/CwyJZYGuuTojjGyjSuJ8lighMTHzyYTY3k2eU9gtx72p+rZothn9lk8
6L76YGuVtJyK1vTKdAtr9F573AIRSE2kYYX09sd3IpGhXQIDQ/DbCCnNLm2ai6yr
t75a+llMLs/JkR9NREUMOt/3iC7CUihvcCmz1oDOJ/bwX2/rCZwuT1HMl2p2f2lx
s+1pAwlFvsPXlw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:00 2025 by rpki-client