Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
File: VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft (raw, json)
Hash identifier: gD/puGZPOXLDI61CpX0pHDNKukqIrMYZYwqT/MhaXNg=
Subject key identifier: 08:5A:B1:23:DE:A7:00:95:99:4A:7C:F6:62:1E:1A:06:47:65:B8:04
Authority key identifier: 54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9
Certificate issuer: /CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
Certificate serial: 0199FE0FD87F9C85F12905F6C6EADA3A9209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
Manifest number: 1377
Signing time: Sun 19 Oct 2025 20:01:15 +0000
Manifest this update: Sun 19 Oct 2025 20:01:15 +0000
Manifest next update: Mon 20 Oct 2025 20:01:15 +0000
Files and hashes: 1: OUuP-6YCe14zgkfTQMdJLc2r9MQ.roa (hash: Aex7iaImK8VF1F7ddVhsOVcjsTFE1aBCNKfli39IJNE=)
2: VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl (hash: niH4ZbLLVQewN+bctcvypIdL+i/CiDdZaQS1DngqvR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:d8:7f:9c:85:f1:29:05:f6:c6:ea:da:3a:92:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
Validity
Not Before: Oct 19 20:01:15 2025 GMT
Not After : Oct 20 20:01:15 2025 GMT
Subject: CN=085ab123dea70095994a7cf6621e1a064765b804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:27:37:3d:1e:ba:c5:8d:03:7c:5d:5e:f9:e8:
c2:20:fe:db:17:7a:e8:e9:3e:21:87:91:47:ec:45:
af:5e:f1:75:7f:77:2d:e4:06:06:7c:86:66:30:f5:
40:3e:69:69:a0:31:6f:51:75:1e:db:0b:0d:1a:b2:
43:63:21:0b:34:38:b4:14:13:17:16:64:13:c4:42:
58:52:d4:a5:f3:c6:5f:38:29:ae:b7:03:a5:d9:f7:
17:95:98:90:83:5f:75:a2:c1:47:a0:e8:6b:9f:e0:
c1:2f:f1:5b:03:8c:a2:39:3f:79:f8:fd:94:21:ff:
29:ff:95:41:4c:5b:0e:cc:c9:61:fc:92:64:41:ae:
5e:57:ca:50:03:26:ee:4f:41:5e:a5:f1:71:0f:c0:
4e:99:a7:97:12:66:4c:cf:a1:9f:4a:3f:71:35:25:
b2:c4:42:20:d7:9d:f3:fd:0d:ae:55:d2:c4:16:07:
dc:0a:21:96:dc:78:28:aa:38:1a:21:15:fc:c0:0d:
4e:b3:65:61:b1:89:79:a6:ff:af:57:31:b0:46:33:
44:14:ae:e5:82:23:89:2d:1f:69:0c:76:e9:c8:48:
78:2e:e5:4a:4f:12:1e:ff:be:a5:13:8e:10:ea:f9:
09:df:b8:55:14:18:66:4a:9a:85:b0:ff:41:8b:5d:
46:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5A:B1:23:DE:A7:00:95:99:4A:7C:F6:62:1E:1A:06:47:65:B8:04
X509v3 Authority Key Identifier:
keyid:54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:08:55:d0:af:ba:00:04:0a:26:b0:e9:bc:2b:e0:eb:ab:ce:
55:57:9e:33:ed:a9:23:a5:f9:b5:86:84:79:d0:4b:eb:28:a6:
bd:86:eb:0e:25:73:e0:4e:c8:34:43:70:fd:29:2d:6f:3e:d4:
10:24:6a:86:e0:47:ca:a8:9c:a0:59:0c:80:6a:6d:5b:8b:16:
a6:24:d4:44:df:e9:96:36:46:38:4c:90:65:6d:c9:24:45:99:
d5:d2:2c:dd:9f:b9:54:dc:ba:81:d8:d9:62:74:35:7a:a7:06:
f4:bf:67:d6:6a:f3:0e:6b:f0:91:e4:48:f1:2d:10:d4:2a:20:
d9:00:96:8f:9a:1e:9e:ca:e2:a7:47:cb:3f:db:2f:57:73:1b:
5f:83:5a:cf:98:e5:d3:3b:2e:3e:f9:61:06:af:c8:aa:f2:f4:
e2:78:17:e0:c8:c1:34:e0:b4:6f:bc:dd:93:c2:50:03:73:0a:
56:8a:21:58:15:97:d6:fd:e6:b5:d0:f5:f2:ba:07:bf:cf:5c:
88:1a:c9:84:ff:58:f9:63:c4:cc:86:8b:b2:35:5b:39:05:c4:
d2:58:5e:8b:da:88:91:98:59:e8:be:06:1a:75:a3:be:88:45:
6c:a5:9e:fd:51:9a:3a:84:a1:a5:b8:fc:ea:1d:a4:b3:4e:7e:
b9:a1:78:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+D9h/nIXxKQX2xuraOpIJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZTY2MGI0OGM4ZjA0YzlhMzJkY2RlYTFjZmVlZTUxODA0
NDZiZDkwHhcNMjUxMDE5MjAwMTE1WhcNMjUxMDIwMjAwMTE1WjAzMTEwLwYDVQQD
EygwODVhYjEyM2RlYTcwMDk1OTk0YTdjZjY2MjFlMWEwNjQ3NjViODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yc3PR66xY0DfF1e+ejCIP7bF3ro
6T4hh5FH7EWvXvF1f3ct5AYGfIZmMPVAPmlpoDFvUXUe2wsNGrJDYyELNDi0FBMX
FmQTxEJYUtSl88ZfOCmutwOl2fcXlZiQg191osFHoOhrn+DBL/FbA4yiOT95+P2U
If8p/5VBTFsOzMlh/JJkQa5eV8pQAybuT0FepfFxD8BOmaeXEmZMz6GfSj9xNSWy
xEIg153z/Q2uVdLEFgfcCiGW3HgoqjgaIRX8wA1Os2VhsYl5pv+vVzGwRjNEFK7l
giOJLR9pDHbpyEh4LuVKTxIe/76lE44Q6vkJ37hVFBhmSpqFsP9Bi11GoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhasSPepwCVmUp89mIeGgZHZbgEMB8GA1UdIwQY
MBaAFFTmYLSMjwTJoy3N6hz+7lGARGvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk9aZ3RJeVBCTW1qTGMzcUhQN3VVWUJFYTlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85MmU3NmYtMTZjMy00NWQyLTg2NDct
YTg5YWJlNDVlZGY2LzEvVk9aZ3RJeVBCTW1qTGMzcUhQN3VVWUJFYTlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85MmU3NmYtMTZjMy00NWQyLTg2NDctYTg5YWJlNDVlZGY2
LzEvVk9aZ3RJeVBCTW1qTGMzcUhQN3VVWUJFYTlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQhV0K+6
AAQKJrDpvCvg66vOVVeeM+2pI6X5tYaEedBL6yimvYbrDiVz4E7INENw/Sktbz7U
ECRqhuBHyqicoFkMgGptW4sWpiTURN/pljZGOEyQZW3JJEWZ1dIs3Z+5VNy6gdjZ
YnQ1eqcG9L9n1mrzDmvwkeRI8S0Q1Cog2QCWj5oensrip0fLP9svV3MbX4Naz5jl
0zsuPvlhBq/IqvL04ngX4MjBNOC0b7zdk8JQA3MKVoohWBWX1v3mtdD18roHv89c
iBrJhP9Y+WPEzIaLsjVbOQXE0lhei9qIkZhZ6L4GGnWjvohFbKWe/VGaOoShpbj8
6h2ks05+uaF4Sw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:26:10 2025 by rpki-client