Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
File: VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft (raw, json)
Hash identifier: yos0bxBd2JQGwecAdXN1Z4vgRti9+TexCwptJxf8bcM=
Subject key identifier: 36:EC:54:18:CC:E3:4D:CA:5A:D2:90:A4:FC:51:49:67:A8:8B:00:87
Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Certificate serial: 0199FCFDA31BD4BC33B8826933363C95B8B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
Manifest number: 11C0
Signing time: Sun 19 Oct 2025 15:01:44 +0000
Manifest this update: Sun 19 Oct 2025 15:01:44 +0000
Manifest next update: Mon 20 Oct 2025 15:01:44 +0000
Files and hashes: 1: 8ywt7YsrRBMREchgHLgyKhwPgx4.roa (hash: aCuMcxrQC+7OXrTGuhaVav/hwtQSKlgeWzdcYZWQMpw=)
2: VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl (hash: H1xrlcI9vrbyOcKCeUCXuYGZXzeM1AUjV4Gb745U238=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a3:1b:d4:bc:33:b8:82:69:33:36:3c:95:b8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Validity
Not Before: Oct 19 15:01:44 2025 GMT
Not After : Oct 20 15:01:44 2025 GMT
Subject: CN=36ec5418cce34dca5ad290a4fc514967a88b0087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:73:93:af:d9:3a:51:09:3b:02:c1:4e:96:c5:
95:55:8c:f8:85:1b:d2:8f:0a:c2:b3:5c:3f:5e:3a:
54:98:5a:db:81:62:4b:d6:6a:28:c5:51:29:ab:4d:
14:16:a5:89:72:78:44:10:18:87:f3:a0:9d:73:16:
84:a1:7a:ab:61:ac:57:2d:69:b6:b6:b9:54:02:71:
98:b3:ca:40:01:f3:fe:af:e1:bd:e2:73:14:5e:39:
c6:cb:5b:0a:fe:c2:10:40:47:a6:c6:6f:0d:25:b0:
8f:0f:df:35:60:ef:04:08:eb:40:cc:e3:ca:d1:6d:
3d:84:ce:2d:5f:cf:bc:8d:48:7c:0b:27:e0:05:02:
ce:37:7a:9d:dc:f6:d6:a6:43:18:69:a1:a7:3a:bb:
69:ca:ec:62:94:81:45:79:c8:65:5b:1b:9c:d4:8e:
80:05:e5:f1:a5:b4:30:86:95:95:ad:ac:6a:1e:39:
03:f2:5f:9b:6a:e4:7c:75:0b:2d:b8:44:11:6b:fc:
7d:65:60:e9:4e:c2:dd:10:9c:66:1f:44:41:d5:34:
17:67:d1:d0:8e:22:2d:dc:6a:00:cb:f2:d6:a4:80:
b1:2d:00:29:5b:fa:35:94:77:8f:e9:ad:56:0e:a6:
78:1c:3e:1b:f4:bb:72:22:e2:42:68:f1:d2:f5:ff:
9a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EC:54:18:CC:E3:4D:CA:5A:D2:90:A4:FC:51:49:67:A8:8B:00:87
X509v3 Authority Key Identifier:
keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e2:e5:3e:5a:89:5c:22:0a:44:bd:09:42:77:cc:f8:ef:8f:
6a:ee:b2:c1:b8:c2:25:82:ad:43:e9:b0:d7:68:4e:ab:a8:98:
65:d7:01:37:b3:20:d3:dd:fc:2b:29:55:c3:a8:8d:7a:c7:8e:
71:25:2d:af:60:3e:03:0f:63:1c:37:77:55:a2:ac:c4:6d:42:
fb:bf:b3:19:5a:b6:ae:b3:3d:cd:7b:46:27:e8:85:17:41:66:
8b:fa:ac:de:d2:1f:4c:0d:8e:ad:e6:52:da:d9:7e:1f:17:75:
92:89:c7:f5:a4:3c:2f:47:3c:cd:fa:61:71:3c:d8:a1:65:61:
39:b2:64:5c:dd:d3:61:ed:39:b1:25:c0:a1:c6:8c:e4:ac:43:
eb:f9:44:86:e7:25:7d:25:18:55:88:0d:3a:03:ec:eb:d0:4f:
34:7e:f2:a5:cb:57:a5:80:57:32:fe:fd:02:05:46:98:ec:3a:
84:dc:45:c3:81:38:cc:8a:1f:ca:56:9e:41:e3:13:56:0d:9f:
29:63:85:67:fa:b4:93:85:b3:7f:e7:41:b6:18:28:7f:96:27:
7b:7f:bb:76:09:35:e0:a0:b1:9e:8b:3f:3a:d7:22:11:ca:a5:
18:02:0f:35:fd:99:6c:5d:ca:c1:53:2b:8c:ea:0c:07:03:d9:
dd:48:f6:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/aMb1LwzuIJpMzY8lbizMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0M2UyMGJmNWYyNTJiMWJkYmQyMWRjOTlkOTRjZDk3ZWE3
ZjBmZTYwHhcNMjUxMDE5MTUwMTQ0WhcNMjUxMDIwMTUwMTQ0WjAzMTEwLwYDVQQD
EygzNmVjNTQxOGNjZTM0ZGNhNWFkMjkwYTRmYzUxNDk2N2E4OGIwMDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3OTr9k6UQk7AsFOlsWVVYz4hRvS
jwrCs1w/XjpUmFrbgWJL1mooxVEpq00UFqWJcnhEEBiH86CdcxaEoXqrYaxXLWm2
trlUAnGYs8pAAfP+r+G94nMUXjnGy1sK/sIQQEemxm8NJbCPD981YO8ECOtAzOPK
0W09hM4tX8+8jUh8CyfgBQLON3qd3PbWpkMYaaGnOrtpyuxilIFFechlWxuc1I6A
BeXxpbQwhpWVraxqHjkD8l+bauR8dQstuEQRa/x9ZWDpTsLdEJxmH0RB1TQXZ9HQ
jiIt3GoAy/LWpICxLQApW/o1lHeP6a1WDqZ4HD4b9LtyIuJCaPHS9f+aowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbsVBjM403KWtKQpPxRSWeoiwCHMB8GA1UdIwQY
MBaAFFQ+IL9fJSsb29IdyZ2UzZfqfw/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZTg3YTYtNjUzNi00NTRhLWE1OWUt
ZDVhZDk5NmExYWM4LzEvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80ZTg3YTYtNjUzNi00NTRhLWE1OWUtZDVhZDk5NmExYWM4
LzEvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOLlPlqJ
XCIKRL0JQnfM+O+Pau6ywbjCJYKtQ+mw12hOq6iYZdcBN7Mg0938KylVw6iNeseO
cSUtr2A+Aw9jHDd3VaKsxG1C+7+zGVq2rrM9zXtGJ+iFF0Fmi/qs3tIfTA2OreZS
2tl+Hxd1konH9aQ8L0c8zfphcTzYoWVhObJkXN3TYe05sSXAocaM5KxD6/lEhucl
fSUYVYgNOgPs69BPNH7ypctXpYBXMv79AgVGmOw6hNxFw4E4zIofylaeQeMTVg2f
KWOFZ/q0k4Wzf+dBthgof5Yne3+7dgk14KCxnos/OtciEcqlGAIPNf2ZbF3KwVMr
jOoMBwPZ3Uj2Dw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:44 2025 by rpki-client