Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
File: Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft (raw, json)
Hash identifier: rhUYRnWf+CO7nGI6pWH19zxipYlLULr1VKmrCXSbTPM=
Subject key identifier: BF:48:95:43:CD:F7:49:0C:5D:44:89:36:C7:D4:99:D8:59:7A:14:39
Authority key identifier: 56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
Certificate issuer: /CN=56376def1224839a6113d1d0cdd398104faaf2fb
Certificate serial: 019A01B5F9EB9FDAA7C2CEAAC03191158375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
Manifest number: 055F
Signing time: Mon 20 Oct 2025 13:01:34 +0000
Manifest this update: Mon 20 Oct 2025 13:01:34 +0000
Manifest next update: Tue 21 Oct 2025 13:01:34 +0000
Files and hashes: 1: 8YyDmxndvd6azClM9JTsxIv2kz0.roa (hash: 0fvpyn3lFxp2N7HhgqqjnRwit9mrT13M79B8b6kGTr4=)
2: Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl (hash: 6x+YVZBlgbUIuO970/ZvFtinUwtQmUHUqCoXZBNbUWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:f9:eb:9f:da:a7:c2:ce:aa:c0:31:91:15:83:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56376def1224839a6113d1d0cdd398104faaf2fb
Validity
Not Before: Oct 20 13:01:34 2025 GMT
Not After : Oct 21 13:01:34 2025 GMT
Subject: CN=bf489543cdf7490c5d448936c7d499d8597a1439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0c:ca:15:ca:53:ac:15:d9:ab:9b:e0:ff:1c:
49:17:ab:5d:2f:62:5f:4a:a2:cd:16:07:d8:79:19:
65:1b:2b:1c:1e:88:ae:3a:e6:83:52:22:cb:cd:ac:
67:b7:e4:1f:51:09:74:9a:84:48:11:20:c8:50:44:
87:06:c1:32:41:bc:af:da:58:a8:df:09:56:8c:52:
59:48:d3:2f:16:13:94:87:ab:93:49:83:71:2c:b0:
f1:e8:8a:83:ff:2e:02:d0:79:3c:55:17:bb:94:81:
15:cc:70:24:99:e1:ed:61:58:b4:48:ad:76:2f:a3:
79:0f:33:31:10:51:fa:6d:5c:33:99:59:54:6f:f0:
b0:f4:63:75:28:85:50:ee:21:aa:03:6e:6f:4c:d2:
34:3b:ad:93:42:b6:1b:3d:a7:5e:e9:6d:bc:b6:a3:
53:56:bb:63:7b:6f:d4:c2:9f:75:e3:c7:bc:5c:35:
56:16:e0:1e:c9:6e:80:14:2f:50:6e:05:4d:f2:b4:
f6:ab:ee:dc:1e:4f:34:16:f6:5a:2a:9c:c5:cb:09:
f6:bc:a7:b1:85:cf:77:19:64:5b:45:09:94:da:24:
e1:36:31:83:6e:3a:86:c0:1a:59:42:53:f8:26:72:
89:2f:5a:dd:39:f8:b0:d1:fa:24:5c:98:53:4e:2f:
92:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:48:95:43:CD:F7:49:0C:5D:44:89:36:C7:D4:99:D8:59:7A:14:39
X509v3 Authority Key Identifier:
keyid:56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:88:cf:36:a3:d6:76:6d:40:5f:eb:a3:a7:7a:83:5d:24:f6:
2f:6a:fe:3a:9c:2a:13:ae:f5:00:b3:62:49:e5:c1:4c:ff:59:
36:6e:6a:70:4e:7a:9b:be:50:a5:32:78:b1:2c:e2:4b:7b:e1:
7e:ff:d0:65:73:e8:b9:25:f3:58:16:6a:8d:1d:89:05:1d:d0:
4c:6d:84:ba:1c:bf:5e:27:9f:70:40:58:4e:68:a6:a5:ba:1d:
94:e9:f3:03:78:f5:4a:7b:3f:9f:89:24:95:10:f1:59:d2:75:
13:08:5e:5a:0b:44:da:51:10:7f:a7:18:20:cc:6d:4d:75:e1:
95:0e:93:93:32:f7:e7:25:b2:85:b1:8e:84:d6:67:ef:b2:7a:
2e:30:0b:6f:c5:cc:21:15:55:6b:57:fa:9f:51:cc:ef:6b:a3:
c7:d4:85:a3:c8:b9:32:ea:5d:08:ab:b7:86:27:47:6c:ed:f6:
19:17:cd:a7:8e:b5:f6:76:08:f1:ff:ab:87:9a:f5:94:28:08:
90:c4:0e:7d:5c:4b:d7:30:e9:51:ed:91:45:5a:29:85:92:22:
bb:5e:77:0a:17:54:48:69:bf:17:7d:71:0d:cf:18:de:90:59:
f1:c6:b7:9a:a4:9e:15:b7:ef:55:69:e2:55:c5:53:dd:f4:d5:
f4:0b:a6:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBtfnrn9qnws6qwDGRFYN1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Mzc2ZGVmMTIyNDgzOWE2MTEzZDFkMGNkZDM5ODEwNGZh
YWYyZmIwHhcNMjUxMDIwMTMwMTM0WhcNMjUxMDIxMTMwMTM0WjAzMTEwLwYDVQQD
EyhiZjQ4OTU0M2NkZjc0OTBjNWQ0NDg5MzZjN2Q0OTlkODU5N2ExNDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QzKFcpTrBXZq5vg/xxJF6tdL2Jf
SqLNFgfYeRllGyscHoiuOuaDUiLLzaxnt+QfUQl0moRIESDIUESHBsEyQbyv2lio
3wlWjFJZSNMvFhOUh6uTSYNxLLDx6IqD/y4C0Hk8VRe7lIEVzHAkmeHtYVi0SK12
L6N5DzMxEFH6bVwzmVlUb/Cw9GN1KIVQ7iGqA25vTNI0O62TQrYbPade6W28tqNT
Vrtje2/Uwp9148e8XDVWFuAeyW6AFC9QbgVN8rT2q+7cHk80FvZaKpzFywn2vKex
hc93GWRbRQmU2iThNjGDbjqGwBpZQlP4JnKJL1rdOfiw0fokXJhTTi+SZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9IlUPN90kMXUSJNsfUmdhZehQ5MB8GA1UdIwQY
MBaAFFY3be8SJIOaYRPR0M3TmBBPqvL7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmpkdDd4SWtnNXBoRTlIUXpkT1lFRS1xOHZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS83MTRhOGQtOGNiYy00OGQwLTgxNTYt
ZDgwODQ3MzNlOTgwLzEvVmpkdDd4SWtnNXBoRTlIUXpkT1lFRS1xOHZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS83MTRhOGQtOGNiYy00OGQwLTgxNTYtZDgwODQ3MzNlOTgw
LzEvVmpkdDd4SWtnNXBoRTlIUXpkT1lFRS1xOHZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYjPNqPW
dm1AX+ujp3qDXST2L2r+OpwqE671ALNiSeXBTP9ZNm5qcE56m75QpTJ4sSziS3vh
fv/QZXPouSXzWBZqjR2JBR3QTG2Euhy/XiefcEBYTmimpbodlOnzA3j1Sns/n4kk
lRDxWdJ1EwheWgtE2lEQf6cYIMxtTXXhlQ6TkzL35yWyhbGOhNZn77J6LjALb8XM
IRVVa1f6n1HM72ujx9SFo8i5MupdCKu3hidHbO32GRfNp4619nYI8f+rh5r1lCgI
kMQOfVxL1zDpUe2RRVophZIiu153ChdUSGm/F31xDc8Y3pBZ8ca3mqSeFbfvVWni
VcVT3fTV9Aumbw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:47:01 2025 by rpki-client