Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
File: vqPSZTUbZfI58pl94eioBneTOl4.mft (raw, json)
Hash identifier: HzUnnFxSUtGLBi1TVPD6+QGaj5KU8Ga9wirEhUdP7tg=
Subject key identifier: 01:07:A5:D7:BF:32:B8:32:96:61:D2:79:F9:FE:72:5A:DA:02:DD:77
Authority key identifier: BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
Certificate issuer: /CN=bea3d265351b65f239f2997de1e8a80677933a5e
Certificate serial: 0199240C88018E9ED2D482B86A906612C9A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
Manifest number: 0497
Signing time: Sun 07 Sep 2025 12:00:24 +0000
Manifest this update: Sun 07 Sep 2025 12:00:24 +0000
Manifest next update: Mon 08 Sep 2025 12:00:24 +0000
Files and hashes: 1: qeUjFmDBXRanRORKytHhxi_chXY.roa (hash: BDfZzOuGAgs1F3dD55NRk4ttvCosc+ZV+zf9zuFmFos=)
2: vqPSZTUbZfI58pl94eioBneTOl4.crl (hash: 7wlG/qzdIEV/BzWEGNx3Ur/gPHs+zJTVgbqkyDBSA0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:88:01:8e:9e:d2:d4:82:b8:6a:90:66:12:c9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea3d265351b65f239f2997de1e8a80677933a5e
Validity
Not Before: Sep 7 12:00:24 2025 GMT
Not After : Sep 8 12:00:24 2025 GMT
Subject: CN=0107a5d7bf32b8329661d279f9fe725ada02dd77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:09:65:1b:42:5e:ae:bb:6d:6c:29:67:b3:
32:08:d4:0d:ca:83:0c:e2:81:7a:91:d1:6e:8c:7a:
83:65:95:fb:a8:12:5e:ca:c3:e2:38:8f:57:36:23:
0d:df:d1:5d:51:fd:46:23:60:b8:33:12:8b:a7:80:
f4:6a:97:d8:c2:8a:19:50:f8:1b:e1:1f:dc:96:e1:
2a:2f:d6:b7:a1:47:e9:00:34:65:6b:e7:43:22:98:
1b:c0:19:44:98:aa:a8:06:f1:28:ba:3e:21:23:15:
cf:c1:70:2f:47:9c:9e:a5:a5:20:5e:14:37:f6:8c:
81:d9:5e:fe:2f:a5:83:02:b1:ed:61:d6:55:b4:42:
87:17:7c:00:c8:80:6d:3a:a6:c6:c2:54:d3:49:04:
e0:67:46:92:ab:04:04:46:cc:d1:8b:35:71:36:c1:
98:b8:54:e6:79:1c:77:72:5f:0f:84:ad:f7:6a:5c:
9b:34:1c:dc:d8:38:75:10:39:8a:05:f5:c9:c6:a8:
c0:1e:54:e6:0f:cb:5b:3c:f7:ec:be:14:17:72:9f:
1a:18:44:f6:45:84:c0:08:68:33:43:51:31:16:2d:
ef:31:58:26:96:87:d3:07:66:0a:5b:f8:89:2e:f9:
09:25:f8:4b:e8:b6:a4:a2:cb:38:e1:81:4c:30:19:
f1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:07:A5:D7:BF:32:B8:32:96:61:D2:79:F9:FE:72:5A:DA:02:DD:77
X509v3 Authority Key Identifier:
keyid:BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ab:ef:32:7b:69:79:5a:68:34:02:c9:53:f2:8d:69:38:ff:
4b:78:d9:c8:26:0c:4f:54:c2:18:d2:98:2b:97:6a:01:aa:b7:
7d:03:c5:a1:b8:ab:4b:44:7d:21:5d:bb:5b:df:9d:31:ae:d9:
54:a8:43:be:98:ab:63:82:00:70:6b:10:c8:73:9b:c9:db:98:
e7:54:a4:15:16:26:87:2a:9f:f1:42:49:30:09:f0:a9:6a:25:
c5:5c:d6:d3:f9:d8:49:03:bc:81:65:65:43:7d:74:cc:4f:28:
57:f5:3a:58:b5:e2:42:34:a1:8e:68:a7:be:00:c5:3b:25:66:
78:f3:d1:fd:64:d7:35:e5:05:2f:81:43:e1:ec:ec:f2:c9:bc:
74:58:d1:4b:d8:15:d4:74:cb:5f:90:81:65:f7:41:b1:5a:c7:
07:fe:90:6c:f1:1f:3d:d7:95:f0:84:13:b1:1b:f8:60:43:8b:
81:ee:3d:71:6b:2c:e1:a2:4e:cf:37:19:5d:34:86:70:35:c1:
12:8a:a7:b3:79:c4:31:f6:bc:4b:ae:18:f2:3a:08:5d:5b:25:
59:75:1b:0b:b3:d1:3f:d7:9b:8e:1b:08:f8:bc:bc:1d:3b:56:
86:d7:5f:a6:62:99:61:71:8d:dd:13:27:7a:e8:fc:aa:7b:c1:
3e:b5:cd:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDIgBjp7S1IK4apBmEsmjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTNkMjY1MzUxYjY1ZjIzOWYyOTk3ZGUxZThhODA2Nzc5
MzNhNWUwHhcNMjUwOTA3MTIwMDI0WhcNMjUwOTA4MTIwMDI0WjAzMTEwLwYDVQQD
EygwMTA3YTVkN2JmMzJiODMyOTY2MWQyNzlmOWZlNzI1YWRhMDJkZDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3oJZRtCXq67bWwpZ7MyCNQNyoMM
4oF6kdFujHqDZZX7qBJeysPiOI9XNiMN39FdUf1GI2C4MxKLp4D0apfYwooZUPgb
4R/cluEqL9a3oUfpADRla+dDIpgbwBlEmKqoBvEouj4hIxXPwXAvR5yepaUgXhQ3
9oyB2V7+L6WDArHtYdZVtEKHF3wAyIBtOqbGwlTTSQTgZ0aSqwQERszRizVxNsGY
uFTmeRx3cl8PhK33alybNBzc2Dh1EDmKBfXJxqjAHlTmD8tbPPfsvhQXcp8aGET2
RYTACGgzQ1ExFi3vMVgmlofTB2YKW/iJLvkJJfhL6Lakoss44YFMMBnxsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEHpde/MrgylmHSefn+clraAt13MB8GA1UdIwQY
MBaAFL6j0mU1G2XyOfKZfeHoqAZ3kzpeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFQU1pUVWJaZkk1OHBsOTRlaW9CbmVUT2w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jMDg3OGQtYWZjNi00ZTcwLTkwZDMt
ZjUzYzVjMTc1NmQ3LzEvdnFQU1pUVWJaZkk1OHBsOTRlaW9CbmVUT2w0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9jMDg3OGQtYWZjNi00ZTcwLTkwZDMtZjUzYzVjMTc1NmQ3
LzEvdnFQU1pUVWJaZkk1OHBsOTRlaW9CbmVUT2w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6vvMntp
eVpoNALJU/KNaTj/S3jZyCYMT1TCGNKYK5dqAaq3fQPFobirS0R9IV27W9+dMa7Z
VKhDvpirY4IAcGsQyHObyduY51SkFRYmhyqf8UJJMAnwqWolxVzW0/nYSQO8gWVl
Q310zE8oV/U6WLXiQjShjminvgDFOyVmePPR/WTXNeUFL4FD4ezs8sm8dFjRS9gV
1HTLX5CBZfdBsVrHB/6QbPEfPdeV8IQTsRv4YEOLge49cWss4aJOzzcZXTSGcDXB
Eoqns3nEMfa8S64Y8joIXVslWXUbC7PRP9ebjhsI+Ly8HTtWhtdfpmKZYXGN3RMn
euj8qnvBPrXNmQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:13 2025 by rpki-client