Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
File: VxoPwBLvuJZQp35vvRLcq9pCjLA.mft (raw, json)
Hash identifier: 23osylyZaM2VYQGjgBdPiHgTGXrtSh5yWk9qGMWKGyI=
Subject key identifier: AD:FE:B5:FC:58:9E:1E:3D:4D:38:E1:E5:C2:46:D4:BF:6C:18:C3:CE
Authority key identifier: 57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
Certificate issuer: /CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Certificate serial: 0198409971DE95D9CF787297896932DC38A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
Manifest number: 158D
Signing time: Fri 25 Jul 2025 08:00:54 +0000
Manifest this update: Fri 25 Jul 2025 08:00:54 +0000
Manifest next update: Sat 26 Jul 2025 08:00:54 +0000
Files and hashes: 1: 5mIqDi-qSZMNQfzVabCDYIualIY.roa (hash: emChHnQclj1wViLAe/VRE5oA1OWGgrZwj1qbaE68eS4=)
2: VxoPwBLvuJZQp35vvRLcq9pCjLA.crl (hash: yWkywz3PmJh7hiYUvGgE9uVDqUjlKvmqEWwBX2DwnOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:99:71:de:95:d9:cf:78:72:97:89:69:32:dc:38:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Validity
Not Before: Jul 25 08:00:54 2025 GMT
Not After : Jul 26 08:00:54 2025 GMT
Subject: CN=adfeb5fc589e1e3d4d38e1e5c246d4bf6c18c3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:8d:ab:6a:d3:fe:d4:12:96:2a:65:e6:ca:
53:48:72:a3:0a:b3:2c:44:6f:d1:a7:58:dc:80:b2:
88:7e:f5:3a:83:cd:16:68:1b:1d:64:d6:f0:e7:bf:
e5:93:db:81:ff:a7:b3:6b:b5:15:af:ac:5d:a4:b8:
08:cd:67:8a:c8:bb:6b:7e:06:4c:03:36:ff:da:43:
bc:da:8b:bf:ee:f6:06:04:c5:2c:4e:72:3a:36:f6:
ff:e8:41:87:e8:3e:c7:ca:2c:6c:41:9c:fd:05:fb:
2c:e4:b3:34:79:ef:d5:7c:67:9f:f4:20:ac:bb:05:
7a:9c:e0:6c:f9:41:25:82:0f:bd:4b:91:44:a4:3e:
05:7a:cc:e6:62:a3:65:af:39:c1:b5:f6:a0:d0:4f:
ee:64:a2:f0:be:85:69:35:1d:db:d1:54:82:1a:a8:
1b:0d:9f:dd:97:ea:3d:6d:df:48:cc:89:4d:31:7c:
48:a2:5b:e5:9e:99:d2:27:a9:2a:d3:dd:8d:b5:32:
41:42:93:0e:af:ef:db:f6:96:50:56:72:90:9a:84:
0b:11:fe:d3:7d:d3:02:82:d0:54:7d:e4:73:bc:d0:
eb:74:86:e4:37:90:53:11:6e:0a:c3:6e:e3:4c:d7:
0b:43:96:48:86:f9:3b:b7:d8:03:7b:1e:33:69:c0:
4d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FE:B5:FC:58:9E:1E:3D:4D:38:E1:E5:C2:46:D4:BF:6C:18:C3:CE
X509v3 Authority Key Identifier:
keyid:57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:00:d6:65:45:c9:5e:13:a1:9b:54:b1:c0:6c:bd:17:c2:3a:
65:0a:3b:0a:d8:3c:e8:84:34:fb:64:8b:de:45:0f:d2:44:64:
e9:96:21:6d:77:04:c2:ea:b8:88:34:e1:00:5e:24:98:7d:48:
c2:30:3c:62:10:80:9d:be:92:92:07:a7:ad:55:b1:12:02:9a:
9e:dd:2e:71:86:c5:4e:7e:86:ee:d2:aa:ef:a8:73:a5:a9:0b:
6c:54:8b:0a:e0:58:88:ea:7d:d2:ee:59:b9:a4:ed:dc:27:a6:
e7:47:5c:90:6d:17:a5:ce:2b:e9:1d:17:60:28:1b:5f:4f:4f:
d2:58:24:72:17:8e:5a:7f:10:76:9c:9c:13:67:b0:60:c3:a4:
a9:a3:c7:10:55:10:be:f1:dc:5a:c5:1e:b3:a2:ec:5d:9a:ba:
26:de:da:21:21:6b:87:c9:97:8d:1c:5a:7a:87:d7:8e:d4:52:
5d:39:33:49:f4:90:30:e6:1f:78:75:2b:b9:bf:11:b0:4d:45:
1d:ea:32:ac:b7:d6:67:1e:80:da:65:f1:30:b7:52:f8:ec:60:
29:31:3c:e2:e8:8d:bf:ec:d2:50:4c:b0:7b:d2:8b:bb:5a:97:
b9:73:42:29:22:d7:fc:1e:c2:49:c6:e7:44:85:f4:d1:56:be:
c1:ad:8e:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhAmXHeldnPeHKXiWky3DinMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MWEwZmMwMTJlZmI4OTY1MGE3N2U2ZmJkMTJkY2FiZGE0
MjhjYjAwHhcNMjUwNzI1MDgwMDU0WhcNMjUwNzI2MDgwMDU0WjAzMTEwLwYDVQQD
EyhhZGZlYjVmYzU4OWUxZTNkNGQzOGUxZTVjMjQ2ZDRiZjZjMThjM2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLONq2rT/tQSlipl5spTSHKjCrMs
RG/Rp1jcgLKIfvU6g80WaBsdZNbw57/lk9uB/6eza7UVr6xdpLgIzWeKyLtrfgZM
Azb/2kO82ou/7vYGBMUsTnI6Nvb/6EGH6D7HyixsQZz9Bfss5LM0ee/VfGef9CCs
uwV6nOBs+UElgg+9S5FEpD4FeszmYqNlrznBtfag0E/uZKLwvoVpNR3b0VSCGqgb
DZ/dl+o9bd9IzIlNMXxIolvlnpnSJ6kq092NtTJBQpMOr+/b9pZQVnKQmoQLEf7T
fdMCgtBUfeRzvNDrdIbkN5BTEW4Kw27jTNcLQ5ZIhvk7t9gDex4zacBNewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3+tfxYnh49TTjh5cJG1L9sGMPOMB8GA1UdIwQY
MBaAFFcaD8AS77iWUKd+b70S3KvaQoywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnhvUHdCTHZ1SlpRcDM1dnZSTGNxOXBDakxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kNjc2NjEtNDMyNC00ZTdhLWFjNmUt
OGI0OWRhYjE2NmE0LzEvVnhvUHdCTHZ1SlpRcDM1dnZSTGNxOXBDakxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kNjc2NjEtNDMyNC00ZTdhLWFjNmUtOGI0OWRhYjE2NmE0
LzEvVnhvUHdCTHZ1SlpRcDM1dnZSTGNxOXBDakxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgADWZUXJ
XhOhm1SxwGy9F8I6ZQo7Ctg86IQ0+2SL3kUP0kRk6ZYhbXcEwuq4iDThAF4kmH1I
wjA8YhCAnb6SkgenrVWxEgKant0ucYbFTn6G7tKq76hzpakLbFSLCuBYiOp90u5Z
uaTt3Cem50dckG0Xpc4r6R0XYCgbX09P0lgkcheOWn8QdpycE2ewYMOkqaPHEFUQ
vvHcWsUes6LsXZq6Jt7aISFrh8mXjRxaeofXjtRSXTkzSfSQMOYfeHUrub8RsE1F
HeoyrLfWZx6A2mXxMLdS+OxgKTE84uiNv+zSUEywe9KLu1qXuXNCKSLX/B7CScbn
RIX00Va+wa2OcA==
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:45:35 2025 by rpki-client