Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
File: VAavgE71pjb0ZOcajUHo1AGn9pc.mft (raw, json)
Hash identifier: rOryUdCdWN0QZL4WfrpXh+NPnp/OG5qHOH1IvGQov/U=
Subject key identifier: A5:63:57:B7:9A:90:FE:F9:3B:7C:F6:0D:A0:0F:6C:0B:31:62:58:44
Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
Certificate issuer: /CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Certificate serial: 01984250B5B6D150D1E7AF15D49774BE3D09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
Manifest number: 1590
Signing time: Fri 25 Jul 2025 16:00:42 +0000
Manifest this update: Fri 25 Jul 2025 16:00:42 +0000
Manifest next update: Sat 26 Jul 2025 16:00:42 +0000
Files and hashes: 1: IxyW73OMckCNett38gRruShmhsE.roa (hash: kwXxrh4BlKqwqWrrFQAbZ+7ZY9nBQf7G/9/mLoszBNE=)
2: VAavgE71pjb0ZOcajUHo1AGn9pc.crl (hash: ol2V7NDPbCGiE/8jWYfrXHXQjqVRU7PGfnIwoAEXujA=)
3: _FNz_oG2zcFLeFpovQJ_R2vg-vc.roa (hash: SUqY4ZQvD6jvXvZ8JF1d/vGljIMHXNiGDX2pW4O5ywc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:50:b5:b6:d1:50:d1:e7:af:15:d4:97:74:be:3d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Validity
Not Before: Jul 25 16:00:42 2025 GMT
Not After : Jul 26 16:00:42 2025 GMT
Subject: CN=a56357b79a90fef93b7cf60da00f6c0b31625844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:77:42:c3:04:45:29:a5:a7:9f:77:6c:45:
e1:c1:a3:ea:f7:0a:65:6b:3a:d8:7b:ea:e4:0b:f2:
9e:ac:e7:5b:6c:41:9c:f7:82:a3:8a:67:f6:60:60:
f7:0c:13:fd:48:12:48:b3:d5:6d:29:28:10:68:47:
dc:53:41:25:a6:14:af:e4:63:d2:5c:ec:e1:27:a0:
59:0e:ca:f2:a1:f4:19:ea:8a:c2:5c:4f:2e:2e:32:
86:9d:05:52:e2:67:f7:b1:8f:89:4b:66:71:5c:6b:
31:c2:33:ba:e7:ba:d9:c0:51:e5:a1:c9:03:36:e4:
44:14:4a:11:76:de:71:10:f2:49:c2:7f:40:dc:c1:
77:51:dd:df:fc:da:63:35:43:2b:e6:76:6d:32:48:
fa:6b:38:b4:aa:04:c2:90:b9:5a:c5:ca:64:dd:b5:
43:d9:2b:f4:6c:71:6a:7e:fa:ea:fb:1d:1f:5f:79:
db:b6:3e:44:6e:0a:3b:74:51:82:f2:55:42:c2:e1:
c8:a0:68:96:36:00:15:7c:6f:d9:9f:22:83:e6:f0:
0d:f6:31:34:38:ac:e1:1f:4a:68:f5:9b:46:f5:7e:
7c:7b:69:86:85:21:b2:6d:65:04:1f:26:02:17:50:
c3:0f:6c:c3:70:2c:7b:34:e1:41:80:70:a0:f4:29:
78:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:63:57:B7:9A:90:FE:F9:3B:7C:F6:0D:A0:0F:6C:0B:31:62:58:44
X509v3 Authority Key Identifier:
keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:84:2b:4a:9d:87:85:aa:70:ae:98:2f:bb:70:df:d9:ee:42:
06:f8:36:17:bd:81:0c:29:c6:ae:40:17:a8:76:2b:70:b8:1e:
24:ac:5f:09:60:21:55:a6:3f:ef:86:88:1c:b6:8e:4f:9c:a9:
81:7c:00:52:d3:ab:a4:7c:8e:15:c2:bf:76:6a:83:48:44:77:
11:cb:33:5c:85:5a:4b:9a:da:77:4e:2c:39:dc:bc:a6:30:48:
bf:d9:50:54:7e:68:0a:b3:1b:b5:66:81:03:4f:0d:9a:9a:e5:
62:0a:22:48:ca:4d:20:9a:06:4c:31:f6:ee:d7:96:52:3d:99:
4a:bb:b2:62:4f:d8:09:14:ae:8d:f1:54:01:ce:0c:21:37:45:
69:a2:72:07:3e:79:a1:75:5c:ec:07:89:f5:d1:8c:9f:aa:93:
fb:68:fb:42:62:21:d8:98:6f:87:ce:e0:8f:c7:3c:c3:b5:65:
55:6c:20:c9:a1:1a:47:dd:91:20:7a:eb:f0:67:5a:b7:5e:c3:
f5:92:56:3a:62:52:2b:5d:5f:43:03:5d:c2:b3:05:2d:20:8f:
d1:b5:7f:bc:0b:de:2f:8a:24:c6:91:4c:b4:d5:fd:2a:dd:8a:
42:87:4d:82:12:d1:8a:cc:1c:86:13:7a:74:78:f5:a0:f5:bf:
9e:9c:5e:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhCULW20VDR568V1Jd0vj0JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MDZhZjgwNGVmNWE2MzZmNDY0ZTcxYThkNDFlOGQ0MDFh
N2Y2OTcwHhcNMjUwNzI1MTYwMDQyWhcNMjUwNzI2MTYwMDQyWjAzMTEwLwYDVQQD
EyhhNTYzNTdiNzlhOTBmZWY5M2I3Y2Y2MGRhMDBmNmMwYjMxNjI1ODQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIF3QsMERSmlp593bEXhwaPq9wpl
azrYe+rkC/KerOdbbEGc94Kjimf2YGD3DBP9SBJIs9VtKSgQaEfcU0ElphSv5GPS
XOzhJ6BZDsryofQZ6orCXE8uLjKGnQVS4mf3sY+JS2ZxXGsxwjO657rZwFHlockD
NuREFEoRdt5xEPJJwn9A3MF3Ud3f/NpjNUMr5nZtMkj6azi0qgTCkLlaxcpk3bVD
2Sv0bHFqfvrq+x0fX3nbtj5Ebgo7dFGC8lVCwuHIoGiWNgAVfG/ZnyKD5vAN9jE0
OKzhH0po9ZtG9X58e2mGhSGybWUEHyYCF1DDD2zDcCx7NOFBgHCg9Cl4FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVjV7eakP75O3z2DaAPbAsxYlhEMB8GA1UdIwQY
MBaAFFQGr4BO9aY29GTnGo1B6NQBp/aXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkFhdmdFNzFwamIwWk9jYWpVSG8xQUduOXBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zNWNiNWMtOTNhNS00YmYxLWJhMWQt
MWNhOWQyNTllMmFkLzEvVkFhdmdFNzFwamIwWk9jYWpVSG8xQUduOXBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zNWNiNWMtOTNhNS00YmYxLWJhMWQtMWNhOWQyNTllMmFk
LzEvVkFhdmdFNzFwamIwWk9jYWpVSG8xQUduOXBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZIQrSp2H
hapwrpgvu3Df2e5CBvg2F72BDCnGrkAXqHYrcLgeJKxfCWAhVaY/74aIHLaOT5yp
gXwAUtOrpHyOFcK/dmqDSER3EcszXIVaS5rad04sOdy8pjBIv9lQVH5oCrMbtWaB
A08NmprlYgoiSMpNIJoGTDH27teWUj2ZSruyYk/YCRSujfFUAc4MITdFaaJyBz55
oXVc7AeJ9dGMn6qT+2j7QmIh2Jhvh87gj8c8w7VlVWwgyaEaR92RIHrr8Gdat17D
9ZJWOmJSK11fQwNdwrMFLSCP0bV/vAveL4okxpFMtNX9Kt2KQodNghLRiswchhN6
dHj1oPW/npxebw==
-----END CERTIFICATE-----
Generated at Fri Jul 25 17:20:33 2025 by rpki-client