Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
File: VFhKIZ9vUGbYSO0quWTaiWbUCio.mft (raw, json)
Hash identifier: ezWNJmIm1X6jqkYFgPgcQPVW4j3Z3sKiNna9Dc4xb9o=
Subject key identifier: F0:91:DC:29:E0:F2:C3:08:61:0E:ED:18:99:BF:91:BB:AC:13:36:00
Authority key identifier: 54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A
Certificate issuer: /CN=54584a219f6f5066d848ed2ab964da8966d40a2a
Certificate serial: 019848893709CC373EE7EE08531BC325F512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 21:00:08 +0000
Manifest this update: Sat 26 Jul 2025 21:00:08 +0000
Manifest next update: Sun 27 Jul 2025 21:00:08 +0000
Files and hashes: 1: VFhKIZ9vUGbYSO0quWTaiWbUCio.crl (hash: LPMcCUCotFMWvyMvgN0yp1Sxb+zUA5NB+KFhlCU+060=)
2: yO-xzrVzP9w-99d-1MgI3akuEEw.roa (hash: /wfJmKbrJk5HLRMl66b8UyeroQ01b/DROieeTJUHsw8=)
3: ykuZpqMlHSUIWtYa1mPsmyPe9Ho.roa (hash: yZcmu9TrDVEdaIS3LL1L046LUfG1VEvG/7HySIUseIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:37:09:cc:37:3e:e7:ee:08:53:1b:c3:25:f5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54584a219f6f5066d848ed2ab964da8966d40a2a
Validity
Not Before: Jul 26 21:00:08 2025 GMT
Not After : Jul 27 21:00:08 2025 GMT
Subject: CN=f091dc29e0f2c308610eed1899bf91bbac133600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a4:9d:73:f9:5a:19:be:6d:01:ca:f4:c3:61:
b7:0a:fe:08:34:a2:c8:75:92:1f:d1:c1:b9:74:40:
8e:7c:53:eb:8c:20:57:b1:de:47:61:69:99:ba:83:
43:62:3f:36:13:a2:b4:7c:67:9d:f7:da:a2:39:86:
2c:a7:c3:00:fc:82:73:9e:f4:c2:f9:12:55:34:65:
85:75:b2:88:68:65:14:23:95:2e:bd:d5:36:ae:25:
26:ea:e1:11:0f:f5:47:d2:12:55:42:b9:e2:bf:63:
cf:9d:20:c3:67:76:d0:f2:ec:4e:28:49:61:31:5f:
50:f9:b1:ba:d4:6d:ee:bf:9c:b3:fc:b2:55:2f:29:
ec:0e:3c:e9:1b:dd:c2:1d:46:f1:7b:cd:02:cc:10:
85:9b:46:44:ef:0f:fc:07:20:dc:fa:c4:3d:5e:87:
4b:fe:a6:09:df:59:3f:4c:ad:47:c5:da:90:e0:f5:
47:d1:a0:fd:ee:76:2b:e4:af:a1:fc:ed:a5:dd:58:
57:11:34:10:ef:d8:85:a4:f2:33:4f:d9:42:bb:06:
2b:ab:55:8c:4a:1f:e3:65:b2:fe:66:f7:4a:6a:d4:
85:6c:62:54:80:2d:49:ef:49:5e:3b:1f:9f:62:b1:
94:10:37:84:95:9e:f8:74:c6:54:6d:26:37:e8:5b:
9f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:91:DC:29:E0:F2:C3:08:61:0E:ED:18:99:BF:91:BB:AC:13:36:00
X509v3 Authority Key Identifier:
keyid:54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:61:c8:11:4e:a0:1f:82:c1:aa:e4:7b:57:8b:5e:3c:d8:2a:
7a:82:66:cc:f2:e1:35:28:88:b0:ef:fe:6a:91:03:71:12:c2:
d6:26:7c:ef:82:6c:6e:36:2c:12:bb:47:1c:a2:40:06:2f:c5:
9b:bf:5e:da:86:52:2c:93:a7:7f:84:41:98:87:ce:76:1f:f1:
c8:09:29:39:72:ce:b3:16:8a:bf:06:31:f8:78:c1:b7:8c:e2:
cf:fb:4b:eb:16:ac:39:64:02:e6:5e:93:49:2d:84:75:d4:bb:
1e:1b:b0:9c:a5:92:ba:16:b9:e3:ab:01:07:2f:f5:73:16:f2:
65:d1:f5:3e:ee:3f:d2:0d:89:25:9b:df:14:1e:1b:26:c4:c4:
4d:26:0b:9c:e2:08:6b:e7:ee:8c:b9:4d:52:96:d4:e0:4d:a8:
94:72:7f:cd:84:8e:8d:21:c7:ec:ce:06:0b:50:02:1c:eb:33:
06:0e:aa:9b:e2:63:e2:a2:44:83:7d:f7:5e:ea:cb:95:c8:00:
92:de:b6:ac:2a:a2:fb:41:51:6d:47:93:81:f5:54:69:83:b2:
d7:23:1d:f7:5a:85:36:7e:c3:91:8d:a4:ac:e3:35:db:f9:b3:
8f:63:10:ba:ea:88:a1:e6:88:49:30:bd:f6:43:ae:42:a6:da:
74:71:c4:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIiTcJzDc+5+4IUxvDJfUSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NTg0YTIxOWY2ZjUwNjZkODQ4ZWQyYWI5NjRkYTg5NjZk
NDBhMmEwHhcNMjUwNzI2MjEwMDA4WhcNMjUwNzI3MjEwMDA4WjAzMTEwLwYDVQQD
EyhmMDkxZGMyOWUwZjJjMzA4NjEwZWVkMTg5OWJmOTFiYmFjMTMzNjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qSdc/laGb5tAcr0w2G3Cv4INKLI
dZIf0cG5dECOfFPrjCBXsd5HYWmZuoNDYj82E6K0fGed99qiOYYsp8MA/IJznvTC
+RJVNGWFdbKIaGUUI5UuvdU2riUm6uERD/VH0hJVQrniv2PPnSDDZ3bQ8uxOKElh
MV9Q+bG61G3uv5yz/LJVLynsDjzpG93CHUbxe80CzBCFm0ZE7w/8ByDc+sQ9XodL
/qYJ31k/TK1HxdqQ4PVH0aD97nYr5K+h/O2l3VhXETQQ79iFpPIzT9lCuwYrq1WM
Sh/jZbL+ZvdKatSFbGJUgC1J70leOx+fYrGUEDeElZ74dMZUbSY36FufNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCR3Cng8sMIYQ7tGJm/kbusEzYAMB8GA1UdIwQY
MBaAFFRYSiGfb1Bm2EjtKrlk2olm1AoqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkZoS0laOXZVR2JZU08wcXVXVGFpV2JVQ2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kZDNkZDEtMDliNS00YWEyLWFlYzAt
OWZiMWNlNGQ3MjBiLzEvVkZoS0laOXZVR2JZU08wcXVXVGFpV2JVQ2lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9kZDNkZDEtMDliNS00YWEyLWFlYzAtOWZiMWNlNGQ3MjBi
LzEvVkZoS0laOXZVR2JZU08wcXVXVGFpV2JVQ2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGHIEU6g
H4LBquR7V4tePNgqeoJmzPLhNSiIsO/+apEDcRLC1iZ874JsbjYsErtHHKJABi/F
m79e2oZSLJOnf4RBmIfOdh/xyAkpOXLOsxaKvwYx+HjBt4ziz/tL6xasOWQC5l6T
SS2EddS7HhuwnKWSuha546sBBy/1cxbyZdH1Pu4/0g2JJZvfFB4bJsTETSYLnOII
a+fujLlNUpbU4E2olHJ/zYSOjSHH7M4GC1ACHOszBg6qm+Jj4qJEg333XurLlcgA
kt62rCqi+0FRbUeTgfVUaYOy1yMd91qFNn7DkY2krOM12/mzj2MQuuqIoeaISTC9
9kOuQqbadHHEEQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 23:13:50 2025 by rpki-client