Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
File: VbnN-LflPvzZeZsR50D1Vf1T9MY.mft (raw, json)
Hash identifier: gr3horcN/iyWi+9+ApUbGsCRNDSJURrMr5IisSqeRIM=
Subject key identifier: 5C:C9:3A:DC:DB:52:94:0A:0E:C6:B9:A1:22:7B:B2:7E:87:9E:46:9F
Authority key identifier: 55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6
Certificate issuer: /CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
Certificate serial: 01984A7812D41EAD3D31BC6A37C67E2342C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
Manifest number: 139D
Signing time: Sun 27 Jul 2025 06:00:39 +0000
Manifest this update: Sun 27 Jul 2025 06:00:39 +0000
Manifest next update: Mon 28 Jul 2025 06:00:39 +0000
Files and hashes: 1: OEIiPrXdFUp5YXOck7o4s4rBGO0.roa (hash: zsHFam+CXLhObsumxLE2+jbhXix4p0SFjtst5VLxGeE=)
2: VbnN-LflPvzZeZsR50D1Vf1T9MY.crl (hash: bfAzB+P4xiynDFBxdRphHfSH+9sJmsQbgjgnk5Ciyns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:12:d4:1e:ad:3d:31:bc:6a:37:c6:7e:23:42:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
Validity
Not Before: Jul 27 06:00:39 2025 GMT
Not After : Jul 28 06:00:39 2025 GMT
Subject: CN=5cc93adcdb52940a0ec6b9a1227bb27e879e469f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:df:94:77:85:09:93:86:f7:35:7c:5c:d1:53:
b3:46:1a:49:a1:bb:c7:ff:15:3a:05:47:db:01:82:
09:69:bf:b4:18:d5:6b:68:4b:ef:77:68:00:e3:ae:
ca:ac:7a:8f:a4:a5:b9:5c:a1:bc:87:66:91:42:8b:
18:df:14:53:21:f3:ee:d3:09:f5:99:2e:45:19:49:
e3:dd:eb:da:97:3b:90:1d:e3:64:e8:4d:b1:7c:82:
16:f4:fe:6c:bb:08:26:3a:36:65:f8:1b:97:d4:7b:
f8:de:e5:08:b9:77:64:79:af:1c:db:be:f1:ee:ca:
57:87:17:cf:eb:db:ce:52:3f:7e:34:97:9c:07:4b:
da:57:c2:c7:3f:5b:43:8f:18:8d:51:de:be:77:f2:
1b:b4:6f:b9:a0:75:90:b2:1b:19:78:4f:25:f6:a3:
11:33:28:0a:5d:3e:87:89:23:85:e2:25:b7:2a:b6:
9e:c7:78:31:81:39:c5:f0:e5:9d:29:be:28:97:f1:
c8:c8:bc:63:8e:6d:1b:91:06:a6:97:d6:ed:90:9f:
93:c5:fb:44:bb:5a:4a:8d:d4:d3:41:14:c1:02:a1:
74:36:4b:a2:9a:e8:a5:ce:d0:cf:a3:4e:c0:70:07:
ab:ff:20:05:fd:68:eb:54:b0:03:36:7e:9e:b0:2a:
96:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C9:3A:DC:DB:52:94:0A:0E:C6:B9:A1:22:7B:B2:7E:87:9E:46:9F
X509v3 Authority Key Identifier:
keyid:55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f5:19:03:93:24:38:4c:43:be:a7:52:c4:1c:28:57:5f:a7:
9c:8a:4d:d8:d7:57:9e:b2:44:10:81:f2:32:5a:5e:ad:61:93:
a1:da:87:57:03:98:88:65:c6:d6:6c:bd:65:a9:8f:a7:18:7c:
d7:6e:c9:1c:11:b9:0d:f4:7e:52:b5:11:88:7e:91:f5:1b:91:
44:02:cf:8a:f1:5c:1d:ca:63:91:90:ce:da:70:18:8a:02:ac:
a0:49:c6:51:62:2a:6e:5b:84:df:e5:f9:24:1b:3f:0f:86:95:
6b:17:41:bf:63:fe:11:c1:66:df:15:9a:0b:05:c8:69:e7:80:
68:b6:0b:2e:03:3e:30:57:92:c5:03:8c:e6:33:12:38:f8:2a:
b4:83:fd:3f:03:75:9e:6a:34:c0:ed:f8:18:f5:bb:f6:ca:f6:
86:18:b0:69:83:1d:b8:31:99:dd:cc:27:d9:dd:20:92:0f:73:
ff:e9:8e:f3:e6:3d:57:f7:2c:96:55:a5:be:e1:07:4c:e0:3f:
86:b4:5d:f6:0f:13:fb:36:38:91:a0:01:cf:43:de:e7:52:c1:
1e:7d:72:99:0d:b7:0a:fb:9f:f1:17:1a:70:ac:9f:8c:34:23:
56:10:e1:84:6a:de:54:41:8c:6e:f7:89:3e:56:8b:36:1e:4e:
b4:c2:a2:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKeBLUHq09MbxqN8Z+I0LJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YjljZGY4YjdlNTNlZmNkOTc5OWIxMWU3NDBmNTU1ZmQ1
M2Y0YzYwHhcNMjUwNzI3MDYwMDM5WhcNMjUwNzI4MDYwMDM5WjAzMTEwLwYDVQQD
Eyg1Y2M5M2FkY2RiNTI5NDBhMGVjNmI5YTEyMjdiYjI3ZTg3OWU0NjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2d+Ud4UJk4b3NXxc0VOzRhpJobvH
/xU6BUfbAYIJab+0GNVraEvvd2gA467KrHqPpKW5XKG8h2aRQosY3xRTIfPu0wn1
mS5FGUnj3evalzuQHeNk6E2xfIIW9P5suwgmOjZl+BuX1Hv43uUIuXdkea8c277x
7spXhxfP69vOUj9+NJecB0vaV8LHP1tDjxiNUd6+d/IbtG+5oHWQshsZeE8l9qMR
MygKXT6HiSOF4iW3Kraex3gxgTnF8OWdKb4ol/HIyLxjjm0bkQaml9btkJ+TxftE
u1pKjdTTQRTBAqF0NkuimuilztDPo07AcAer/yAF/WjrVLADNn6esCqWzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzJOtzbUpQKDsa5oSJ7sn6HnkafMB8GA1UdIwQY
MBaAFFW5zfi35T782XmbEedA9VX9U/TGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJuTi1MZmxQdnpaZVpzUjUwRDFWZjFUOU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83N2U5MmEtZWFlMS00OGMwLThkOWMt
NmZjNGNkY2IzZjE3LzEvVmJuTi1MZmxQdnpaZVpzUjUwRDFWZjFUOU1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS83N2U5MmEtZWFlMS00OGMwLThkOWMtNmZjNGNkY2IzZjE3
LzEvVmJuTi1MZmxQdnpaZVpzUjUwRDFWZjFUOU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfUZA5Mk
OExDvqdSxBwoV1+nnIpN2NdXnrJEEIHyMlperWGTodqHVwOYiGXG1my9ZamPpxh8
127JHBG5DfR+UrURiH6R9RuRRALPivFcHcpjkZDO2nAYigKsoEnGUWIqbluE3+X5
JBs/D4aVaxdBv2P+EcFm3xWaCwXIaeeAaLYLLgM+MFeSxQOM5jMSOPgqtIP9PwN1
nmo0wO34GPW79sr2hhiwaYMduDGZ3cwn2d0gkg9z/+mO8+Y9V/csllWlvuEHTOA/
hrRd9g8T+zY4kaABz0Pe51LBHn1ymQ23Cvuf8RcacKyfjDQjVhDhhGreVEGMbveJ
PlaLNh5OtMKiOg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:15:40 2025 by rpki-client