Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
File: vlJx8OFYfBRDTySA-RQQGFUHz6E.mft (raw, json)
Hash identifier: kFGJDMb4atMppCv+bppwSrxT2XUqWvGxn4YvfFvmjd8=
Subject key identifier: FA:77:AF:13:85:63:82:F2:AE:65:A2:25:ED:2D:97:16:6E:DA:21:1F
Authority key identifier: BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
Certificate issuer: /CN=be5271f0e1587c14434f2480f91410185507cfa1
Certificate serial: 019848F764A06ECB7F99ACAFB0E3B9139755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
Manifest number: 1591
Signing time: Sat 26 Jul 2025 23:00:29 +0000
Manifest this update: Sat 26 Jul 2025 23:00:29 +0000
Manifest next update: Sun 27 Jul 2025 23:00:29 +0000
Files and hashes: 1: bxyMDkypoYoPE36odgLUanwOaLY.roa (hash: /Tdt2l601ImlNiIyf1pfayzYn4s0xCETamIww0AgaGc=)
2: vlJx8OFYfBRDTySA-RQQGFUHz6E.crl (hash: NgN+WltxRa4owu5SNwZ9s5PQIBiWXDNuYNSsGdzBIsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:64:a0:6e:cb:7f:99:ac:af:b0:e3:b9:13:97:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5271f0e1587c14434f2480f91410185507cfa1
Validity
Not Before: Jul 26 23:00:29 2025 GMT
Not After : Jul 27 23:00:29 2025 GMT
Subject: CN=fa77af13856382f2ae65a225ed2d97166eda211f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:51:0b:c5:b5:06:5d:95:2e:83:bc:b3:9b:00:
11:08:3b:9e:02:32:c4:a5:07:15:a4:88:44:7d:64:
a0:ab:2d:38:c0:66:91:69:9a:e1:4a:b3:9d:c6:39:
95:2d:42:c5:32:11:00:10:60:e0:ba:b1:49:bf:94:
57:48:a5:de:9e:32:04:8c:98:bc:e2:29:d4:7d:89:
53:e4:a0:28:83:7b:f9:9e:24:7e:41:11:2b:57:e1:
77:e3:bc:48:97:65:53:10:31:1c:1c:8c:75:63:1f:
0d:38:30:8b:51:db:75:9b:f4:07:8b:f1:a5:30:14:
aa:3c:0a:36:72:26:69:12:fe:ff:fa:7a:43:81:60:
8f:0c:08:a8:b1:33:75:a7:8b:43:a8:8e:26:99:4a:
dd:f3:38:4d:f0:ae:31:f0:8f:14:15:4b:48:27:e9:
69:b5:9a:30:26:96:99:44:80:92:72:a3:03:2c:7d:
16:89:bd:59:6b:0f:93:5f:43:90:58:57:79:48:4b:
5a:e2:d3:0f:54:1d:e4:c6:c5:f3:14:45:5f:ee:ed:
83:74:84:95:fc:0e:85:fd:3b:1e:f4:f3:6a:9c:83:
1f:79:fc:27:fd:c1:9a:f5:a7:b2:9c:f4:8d:df:60:
66:5c:f0:bd:32:5b:7e:89:b5:0e:57:6f:d2:b9:8b:
77:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:77:AF:13:85:63:82:F2:AE:65:A2:25:ED:2D:97:16:6E:DA:21:1F
X509v3 Authority Key Identifier:
keyid:BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:33:49:ed:82:ac:60:60:e2:1f:c0:ce:12:3f:40:ae:4f:6d:
8f:1a:f0:85:4e:49:9d:54:f1:05:0f:4d:1f:04:3d:c2:a3:a9:
9e:d8:51:50:7a:78:60:1c:79:38:a6:99:e9:78:6c:63:9f:c4:
44:a0:21:2e:ad:f4:f4:da:ab:97:0f:7f:05:2b:5b:89:13:da:
e8:19:d4:b7:1e:94:8d:c4:20:5e:3a:b8:f3:d7:21:3d:9d:3e:
c0:13:58:eb:99:76:6b:02:dd:db:3d:29:d6:6c:cc:d6:dd:7b:
42:9f:77:44:b3:49:77:8b:c9:d2:9c:21:36:01:c2:a1:a2:be:
94:74:81:29:0b:9d:0b:1d:6a:af:a8:e4:1e:7f:09:36:97:61:
e0:37:2b:d5:73:ff:66:af:72:95:5d:b1:52:ac:d4:9a:84:7e:
04:21:53:60:44:5c:f9:a0:2a:59:36:7c:cc:ba:21:25:d9:22:
d1:be:47:8e:68:20:dd:41:9b:d8:3c:04:09:04:04:31:ba:c0:
0f:d3:99:d3:f6:71:ad:bc:87:fb:38:2b:04:3c:21:83:b2:98:
de:ce:db:6d:94:f9:04:80:40:91:55:e8:57:d4:3a:31:ab:a0:
3c:71:6c:39:80:30:be:c1:82:60:e0:fa:78:ba:d5:c1:aa:1e:
01:ce:7b:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI92Sgbst/mayvsOO5E5dVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNTI3MWYwZTE1ODdjMTQ0MzRmMjQ4MGY5MTQxMDE4NTUw
N2NmYTEwHhcNMjUwNzI2MjMwMDI5WhcNMjUwNzI3MjMwMDI5WjAzMTEwLwYDVQQD
EyhmYTc3YWYxMzg1NjM4MmYyYWU2NWEyMjVlZDJkOTcxNjZlZGEyMTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlELxbUGXZUug7yzmwARCDueAjLE
pQcVpIhEfWSgqy04wGaRaZrhSrOdxjmVLULFMhEAEGDgurFJv5RXSKXenjIEjJi8
4inUfYlT5KAog3v5niR+QRErV+F347xIl2VTEDEcHIx1Yx8NODCLUdt1m/QHi/Gl
MBSqPAo2ciZpEv7/+npDgWCPDAiosTN1p4tDqI4mmUrd8zhN8K4x8I8UFUtIJ+lp
tZowJpaZRICScqMDLH0Wib1Zaw+TX0OQWFd5SEta4tMPVB3kxsXzFEVf7u2DdISV
/A6F/Tse9PNqnIMfefwn/cGa9aeynPSN32BmXPC9Mlt+ibUOV2/SuYt3eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPp3rxOFY4LyrmWiJe0tlxZu2iEfMB8GA1UdIwQY
MBaAFL5ScfDhWHwUQ08kgPkUEBhVB8+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmxKeDhPRllmQlJEVHlTQS1SUVFHRlVIejZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83NmRiYTAtZDg2Yi00ZDg0LWIxNWEt
NGQ2ZDEyNTZiZjliLzEvdmxKeDhPRllmQlJEVHlTQS1SUVFHRlVIejZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny83NmRiYTAtZDg2Yi00ZDg0LWIxNWEtNGQ2ZDEyNTZiZjli
LzEvdmxKeDhPRllmQlJEVHlTQS1SUVFHRlVIejZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMTNJ7YKs
YGDiH8DOEj9Ark9tjxrwhU5JnVTxBQ9NHwQ9wqOpnthRUHp4YBx5OKaZ6XhsY5/E
RKAhLq309Nqrlw9/BStbiRPa6BnUtx6UjcQgXjq489chPZ0+wBNY65l2awLd2z0p
1mzM1t17Qp93RLNJd4vJ0pwhNgHCoaK+lHSBKQudCx1qr6jkHn8JNpdh4Dcr1XP/
Zq9ylV2xUqzUmoR+BCFTYERc+aAqWTZ8zLohJdki0b5Hjmgg3UGb2DwECQQEMbrA
D9OZ0/ZxrbyH+zgrBDwhg7KY3s7bbZT5BIBAkVXoV9Q6MaugPHFsOYAwvsGCYOD6
eLrVwaoeAc572g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:44:13 2025 by rpki-client