Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
File: VytO2SaC1xio_ESIFAAnQGlgeV8.mft (raw, json)
Hash identifier: IQK+6eK+sPF7gfWSvII/GyKiHSHnXiovB9828oj/zCE=
Subject key identifier: 6A:3C:02:6D:A4:F0:34:43:6E:53:ED:65:2A:60:E4:05:5F:A4:4C:8F
Authority key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
Certificate issuer: /CN=572b4ed92682d718a8fc4488140027406960795f
Certificate serial: 0198466400782497C0B3E492E4B9D6C7525E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
Manifest number: 0C5C
Signing time: Sat 26 Jul 2025 11:00:15 +0000
Manifest this update: Sat 26 Jul 2025 11:00:15 +0000
Manifest next update: Sun 27 Jul 2025 11:00:15 +0000
Files and hashes: 1: 8R_SRNPLxmibFS1usJIWud4x3Z8.roa (hash: b2dIcGiMsdbDXAx7DhwSvU4UC5F6aoWQ/Pjpo9tIfQA=)
2: HSPZejR5lJB8cqlG1i1XbvBd4AY.roa (hash: LYg4VkRRLjikz7I2hzCQk0ST28urIdVmK83g08e6nBA=)
3: VytO2SaC1xio_ESIFAAnQGlgeV8.crl (hash: CeLiePled0uSLULiH0Nrn4WNsb4uebzsofl05e4qYic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:00:78:24:97:c0:b3:e4:92:e4:b9:d6:c7:52:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572b4ed92682d718a8fc4488140027406960795f
Validity
Not Before: Jul 26 11:00:15 2025 GMT
Not After : Jul 27 11:00:15 2025 GMT
Subject: CN=6a3c026da4f034436e53ed652a60e4055fa44c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:68:82:42:2e:94:0a:8c:84:6a:c9:72:ae:
ca:e9:e5:a7:d2:fc:80:19:22:1f:d6:a7:71:74:6b:
da:f9:cb:66:4a:a0:2a:80:5d:5c:3b:07:d1:de:57:
5b:c4:47:9c:ea:83:00:ed:5e:d6:b5:5f:f6:3c:f1:
76:bd:d3:54:61:56:1c:e9:2a:89:4c:a3:9b:de:87:
84:40:7f:0f:e8:39:87:9d:8a:99:d0:65:b8:1f:52:
08:b4:f6:d6:5a:02:74:49:2d:c3:3e:7a:40:7f:84:
16:4a:5d:9f:d0:ed:1f:0b:08:8d:08:b4:7e:d0:1c:
ed:a0:37:40:e4:f7:21:a2:3b:1f:d0:8a:b0:4e:94:
13:2a:e2:64:2d:9a:d6:89:88:1f:12:42:8f:e8:06:
93:1c:1d:1f:74:87:b8:b1:6d:2d:91:24:01:71:20:
77:cf:f7:c4:b7:23:a7:b9:da:93:8b:9a:4d:90:73:
54:b6:3e:14:40:b6:a6:9e:ea:3e:76:36:7d:5d:71:
25:a5:bf:90:4a:33:74:53:9b:4d:b9:d4:0a:1d:bb:
fb:de:ef:98:46:45:84:c2:16:d4:af:ef:76:12:8c:
ee:de:b8:a7:5f:eb:bb:ed:de:9c:62:49:06:7b:dd:
18:87:09:81:2b:c9:0b:6c:bf:44:f7:da:ed:db:ed:
39:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3C:02:6D:A4:F0:34:43:6E:53:ED:65:2A:60:E4:05:5F:A4:4C:8F
X509v3 Authority Key Identifier:
keyid:57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:49:eb:bc:15:19:dc:ba:b9:df:ab:ed:b6:3c:5e:36:53:06:
8d:79:1e:4e:7a:d6:0b:fe:00:75:88:df:66:b2:b7:4b:57:da:
0d:7f:8d:16:18:34:99:10:af:07:dc:58:e6:6c:9b:81:5d:02:
68:2b:70:e1:2b:7f:d1:4c:70:7e:a0:32:70:3d:f9:bb:12:bf:
72:c0:fb:7c:31:f6:a3:4c:22:98:54:00:b3:12:28:33:50:16:
73:0d:18:35:1f:a6:c5:5b:3b:b5:1a:d1:da:34:a9:5d:42:ac:
b6:d9:ca:41:b8:16:08:81:e8:8a:f2:ae:9b:1e:9b:a9:20:0c:
f6:6c:3b:52:72:d0:cf:fd:f9:2e:9a:24:f7:33:29:58:47:c2:
58:ff:96:b5:7a:28:ab:17:17:5f:b7:da:12:23:ba:13:a8:ff:
64:b1:42:ed:fa:b4:e3:c6:01:9d:68:8d:d6:99:30:f2:2f:00:
86:fd:93:7c:0f:28:34:09:2e:e7:fe:24:f8:97:0d:b4:d7:44:
89:2d:a7:cb:c8:a9:02:67:52:72:54:bc:e8:93:96:2c:d6:69:
53:5a:46:e4:a1:4b:b9:50:8f:b9:bf:62:e6:e0:96:a5:9f:1a:
20:b3:25:be:d2:b4:bf:e3:ba:4a:99:98:92:bd:16:5c:32:84:
05:d7:12:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGZAB4JJfAs+SS5LnWx1JeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MmI0ZWQ5MjY4MmQ3MThhOGZjNDQ4ODE0MDAyNzQwNjk2
MDc5NWYwHhcNMjUwNzI2MTEwMDE1WhcNMjUwNzI3MTEwMDE1WjAzMTEwLwYDVQQD
Eyg2YTNjMDI2ZGE0ZjAzNDQzNmU1M2VkNjUyYTYwZTQwNTVmYTQ0YzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ1ogkIulAqMhGrJcq7K6eWn0vyA
GSIf1qdxdGva+ctmSqAqgF1cOwfR3ldbxEec6oMA7V7WtV/2PPF2vdNUYVYc6SqJ
TKOb3oeEQH8P6DmHnYqZ0GW4H1IItPbWWgJ0SS3DPnpAf4QWSl2f0O0fCwiNCLR+
0BztoDdA5Pchojsf0IqwTpQTKuJkLZrWiYgfEkKP6AaTHB0fdIe4sW0tkSQBcSB3
z/fEtyOnudqTi5pNkHNUtj4UQLamnuo+djZ9XXElpb+QSjN0U5tNudQKHbv73u+Y
RkWEwhbUr+92Eozu3rinX+u77d6cYkkGe90YhwmBK8kLbL9E99rt2+057QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGo8Am2k8DRDblPtZSpg5AVfpEyPMB8GA1UdIwQY
MBaAFFcrTtkmgtcYqPxEiBQAJ0BpYHlfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnl0TzJTYUMxeGlvX0VTSUZBQW5RR2xnZVY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84ODRjMzEtZTUwOS00MjJiLWIwYTEt
YWY5ZmMwMTJiZDU0LzEvVnl0TzJTYUMxeGlvX0VTSUZBQW5RR2xnZVY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84ODRjMzEtZTUwOS00MjJiLWIwYTEtYWY5ZmMwMTJiZDU0
LzEvVnl0TzJTYUMxeGlvX0VTSUZBQW5RR2xnZVY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMEnrvBUZ
3Lq536vttjxeNlMGjXkeTnrWC/4AdYjfZrK3S1faDX+NFhg0mRCvB9xY5mybgV0C
aCtw4St/0UxwfqAycD35uxK/csD7fDH2o0wimFQAsxIoM1AWcw0YNR+mxVs7tRrR
2jSpXUKsttnKQbgWCIHoivKumx6bqSAM9mw7UnLQz/35Lpok9zMpWEfCWP+WtXoo
qxcXX7faEiO6E6j/ZLFC7fq048YBnWiN1pkw8i8Ahv2TfA8oNAku5/4k+JcNtNdE
iS2ny8ipAmdSclS86JOWLNZpU1pG5KFLuVCPub9i5uCWpZ8aILMlvtK0v+O6SpmY
kr0WXDKEBdcS8A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:35:57 2025 by rpki-client