Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
File: VfrLmru0yp4IZiqT0ucy5wsGwvI.mft (raw, json)
Hash identifier: 5Olqs5B0zPlTF40m4tidNdE04PZcyeDjOR1EWQG3JiM=
Subject key identifier: 3C:A7:A5:05:95:E7:00:35:C9:40:AC:27:EF:21:32:A9:63:B6:A7:FC
Authority key identifier: 55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2
Certificate issuer: /CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2
Certificate serial: 0199FFC728D8107578742FAAC4E96D0328AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
Manifest number: 16E0
Signing time: Mon 20 Oct 2025 04:01:06 +0000
Manifest this update: Mon 20 Oct 2025 04:01:06 +0000
Manifest next update: Tue 21 Oct 2025 04:01:06 +0000
Files and hashes: 1: VfrLmru0yp4IZiqT0ucy5wsGwvI.crl (hash: +drVsnezhx3uBbZj46Ib/TBRlRMOkaz9iidGPVYQzPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:28:d8:10:75:78:74:2f:aa:c4:e9:6d:03:28:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2
Validity
Not Before: Oct 20 04:01:06 2025 GMT
Not After : Oct 21 04:01:06 2025 GMT
Subject: CN=3ca7a50595e70035c940ac27ef2132a963b6a7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:fc:33:53:ca:e7:a4:6c:78:12:78:9a:d0:
25:7e:42:25:61:21:1b:43:ba:72:6c:60:b0:ef:6d:
14:a2:9a:14:06:34:c5:6b:18:9e:7b:bd:f3:df:fb:
50:23:4e:c6:17:9e:f5:78:90:f6:68:12:26:e4:98:
0c:2d:1a:22:dc:2d:8b:e1:81:6b:67:e7:60:c2:98:
69:ec:e5:52:57:d3:2f:d2:b3:4a:5a:5c:a4:90:f3:
49:72:97:76:28:c9:9a:f0:c7:0d:be:80:63:6c:61:
e0:6c:b6:dd:21:5e:2b:90:34:c6:f2:40:17:56:38:
5d:96:ee:75:01:64:ab:8d:5d:64:0f:55:2c:6f:2c:
a1:fd:15:4f:e6:e2:77:a1:59:48:d1:4b:ab:d7:04:
43:66:a4:a9:33:07:3b:e5:37:3d:8e:fe:72:6a:94:
f3:d8:5e:b3:7c:ed:ec:c5:64:c1:83:f5:7b:d7:48:
dc:57:fc:af:ef:37:6a:83:85:fe:d2:a2:8a:bc:10:
08:45:d5:3c:cb:cc:17:2d:37:a8:af:ab:6c:44:07:
54:db:a3:25:fd:ac:f5:12:4c:81:21:06:aa:22:c8:
e4:5f:ec:2f:00:b6:34:cd:5f:4c:09:e4:1e:29:51:
52:e7:bf:59:d8:87:1f:ee:43:e2:94:8b:ff:58:d7:
82:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A7:A5:05:95:E7:00:35:C9:40:AC:27:EF:21:32:A9:63:B6:A7:FC
X509v3 Authority Key Identifier:
keyid:55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f0:91:98:2f:f0:d2:52:1f:15:0b:df:77:c5:67:d3:4a:26:
57:85:e7:5a:10:29:3e:9a:76:97:3e:9a:58:90:f0:68:dc:c0:
4c:fc:d1:55:99:70:e1:b8:14:03:b4:11:ee:78:ee:3c:60:cc:
d2:cd:32:fb:51:0a:cd:fd:08:ed:16:5e:2b:34:25:cb:72:ab:
2f:55:c8:0f:e5:78:e9:9a:85:47:37:6c:48:61:39:67:ad:7b:
9f:e0:92:e2:61:c8:54:1b:b6:f1:cb:1d:50:2d:3a:23:51:b6:
bb:b1:e3:e7:c5:2e:c3:fa:ce:6f:36:5c:92:6c:61:f4:61:27:
85:07:1c:69:80:ca:f8:f1:7b:84:ea:2d:14:7f:3e:fd:6d:7d:
d9:29:1b:d4:e6:b9:6a:6c:39:b9:05:30:55:a8:cc:25:ee:b8:
ae:76:d2:0b:66:b8:5b:a0:84:80:64:98:31:2d:9d:96:1a:34:
17:01:58:c0:9c:78:4b:c0:33:1d:59:26:19:37:95:df:bf:a8:
c8:0a:35:07:e3:34:7c:f5:5e:7f:bb:3e:93:54:21:b1:5c:05:
42:cc:10:8d:67:2c:e0:aa:5e:01:6a:25:a5:b6:d6:a0:b5:84:
b9:98:02:6b:6c:23:02:7e:2f:e0:57:88:42:6b:81:62:74:f1:
08:44:bc:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/xyjYEHV4dC+qxOltAyivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZmFjYjlhYmJiNGNhOWUwODY2MmE5M2QyZTczMmU3MGIw
NmMyZjIwHhcNMjUxMDIwMDQwMTA2WhcNMjUxMDIxMDQwMTA2WjAzMTEwLwYDVQQD
EygzY2E3YTUwNTk1ZTcwMDM1Yzk0MGFjMjdlZjIxMzJhOTYzYjZhN2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu78M1PK56RseBJ4mtAlfkIlYSEb
Q7pybGCw720UopoUBjTFaxiee73z3/tQI07GF571eJD2aBIm5JgMLRoi3C2L4YFr
Z+dgwphp7OVSV9Mv0rNKWlykkPNJcpd2KMma8McNvoBjbGHgbLbdIV4rkDTG8kAX
Vjhdlu51AWSrjV1kD1Usbyyh/RVP5uJ3oVlI0Uur1wRDZqSpMwc75Tc9jv5yapTz
2F6zfO3sxWTBg/V710jcV/yv7zdqg4X+0qKKvBAIRdU8y8wXLTeor6tsRAdU26Ml
/az1EkyBIQaqIsjkX+wvALY0zV9MCeQeKVFS579Z2Icf7kPilIv/WNeC0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDynpQWV5wA1yUCsJ+8hMqljtqf8MB8GA1UdIwQY
MBaAFFX6y5q7tMqeCGYqk9LnMucLBsLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmZyTG1ydTB5cDRJWmlxVDB1Y3k1d3NHd3ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lMjMzMzgtMWYzZi00YWNkLWE4OGMt
MmVjY2ZjZTExMmRkLzEvVmZyTG1ydTB5cDRJWmlxVDB1Y3k1d3NHd3ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lMjMzMzgtMWYzZi00YWNkLWE4OGMtMmVjY2ZjZTExMmRk
LzEvVmZyTG1ydTB5cDRJWmlxVDB1Y3k1d3NHd3ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/CRmC/w
0lIfFQvfd8Vn00omV4XnWhApPpp2lz6aWJDwaNzATPzRVZlw4bgUA7QR7njuPGDM
0s0y+1EKzf0I7RZeKzQly3KrL1XID+V46ZqFRzdsSGE5Z617n+CS4mHIVBu28csd
UC06I1G2u7Hj58Uuw/rObzZckmxh9GEnhQccaYDK+PF7hOotFH8+/W192Skb1Oa5
amw5uQUwVajMJe64rnbSC2a4W6CEgGSYMS2dlho0FwFYwJx4S8AzHVkmGTeV37+o
yAo1B+M0fPVef7s+k1QhsVwFQswQjWcs4KpeAWolpbbWoLWEuZgCa2wjAn4v4FeI
QmuBYnTxCES8YQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:07:01 2025 by rpki-client