Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
File: VbIFm3SNbd1cWgwdNel173uohEI.mft (raw, json)
Hash identifier: TG48aB5hlPjZb9wEl11XoaFfkSHfdDzjqwG0lHEXBZw=
Subject key identifier: 0A:EC:45:A4:1D:28:58:00:09:EE:EE:4E:15:99:93:FF:73:CC:A8:E4
Authority key identifier: 55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42
Certificate issuer: /CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442
Certificate serial: 019937CAE7326CDF33ED73C5AAE7626793A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
Manifest number: 063A
Signing time: Thu 11 Sep 2025 08:01:08 +0000
Manifest this update: Thu 11 Sep 2025 08:01:08 +0000
Manifest next update: Fri 12 Sep 2025 08:01:08 +0000
Files and hashes: 1: VbIFm3SNbd1cWgwdNel173uohEI.crl (hash: uxPgOtNYi0c/d73n2LGS6TZh7JF6hTicC+1tzqCTcm8=)
2: r2ver_B1QfAF2R2XPpvc11DJXmA.roa (hash: 6Y5LmQV5zXuhOo4pwCZR6jl/OtipaY9LyBdb5pEQmos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:ca:e7:32:6c:df:33:ed:73:c5:aa:e7:62:67:93:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442
Validity
Not Before: Sep 11 08:01:08 2025 GMT
Not After : Sep 12 08:01:08 2025 GMT
Subject: CN=0aec45a41d28580009eeee4e159993ff73cca8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:dc:dd:c4:5f:93:ab:b3:f1:7f:e4:0d:29:
50:db:53:a9:8b:59:60:d7:ff:c1:dc:1d:19:06:0b:
7f:ff:88:8b:74:cb:e9:ef:a1:3b:75:b2:99:2d:34:
74:1b:6e:78:85:a3:1b:86:e8:db:af:99:92:3f:d0:
c1:f7:62:f5:fb:2d:6a:71:ee:e8:b6:df:b5:5b:cb:
9e:d5:6f:ed:36:fd:39:44:e5:28:5b:4b:8a:b2:34:
39:d2:40:66:29:6c:d6:55:0a:cf:93:f4:45:e1:e5:
31:64:2b:53:31:47:6a:aa:a6:b0:1a:8f:b4:69:22:
7d:8b:bc:f8:7b:d8:20:a0:28:98:e3:43:bd:22:a6:
6b:bb:f2:2b:ff:6b:fa:b6:57:38:ec:5c:b1:af:78:
4e:19:d6:e0:e8:61:e2:44:9d:01:f2:84:18:77:cd:
26:1f:5b:d2:59:be:8c:e8:a1:a8:22:3a:a9:4c:a8:
d3:f2:62:86:3b:77:03:7d:15:e7:f3:79:67:4d:9e:
1f:c5:02:33:04:b4:ab:bc:1d:8e:c4:3d:c1:64:c8:
fc:8d:2a:0f:2c:8f:d4:68:4f:a4:fa:af:db:ee:ed:
aa:b7:9c:8c:00:68:81:a8:40:bf:f6:ea:6c:a5:5b:
00:2f:9f:e9:e4:37:d6:a5:53:13:0c:2f:e0:b9:cc:
c7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EC:45:A4:1D:28:58:00:09:EE:EE:4E:15:99:93:FF:73:CC:A8:E4
X509v3 Authority Key Identifier:
keyid:55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:11:f6:79:4a:8d:c4:1f:78:b0:16:1b:59:ca:21:ea:18:7e:
f6:8d:36:ca:f4:9b:54:77:fb:24:72:98:10:e0:8e:48:8a:4a:
a7:c2:bf:de:7a:64:86:bd:f6:26:31:ff:52:6e:71:0f:14:46:
94:2e:b5:54:78:22:f8:a0:d3:d4:1f:6b:41:bd:13:04:95:8a:
28:96:b0:73:13:48:83:d2:c4:46:77:07:60:f5:9e:64:1e:f4:
ad:29:f0:3e:64:d8:46:27:eb:5f:28:e5:4a:74:fa:46:9a:c8:
55:87:39:72:c8:07:fb:d6:61:26:83:fc:89:c6:ed:f0:b0:c0:
6e:f9:4b:43:6d:c7:25:dd:3a:61:80:ca:3b:9e:88:7d:e7:0b:
77:3a:75:d4:f7:28:28:df:21:bb:c3:ad:cd:a3:d1:99:66:ed:
50:f1:f9:38:cc:5f:81:99:a8:55:1d:8b:b2:bd:81:88:3a:50:
42:1d:94:e1:02:c1:0d:8c:32:8b:99:a7:fd:8e:f9:aa:fc:f5:
3e:e0:4f:84:4f:35:42:ee:12:c2:8f:57:84:97:09:89:82:63:
5a:16:64:d7:0f:45:95:6f:49:21:1b:b4:01:9f:47:ef:67:86:
bd:8c:de:d2:0b:70:25:dc:19:74:95:f0:99:fe:76:25:1f:82:
61:1a:89:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk3yucybN8z7XPFqudiZ5OpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YjIwNTliNzQ4ZDZkZGQ1YzVhMGMxZDM1ZTk3NWVmN2Jh
ODg0NDIwHhcNMjUwOTExMDgwMTA4WhcNMjUwOTEyMDgwMTA4WjAzMTEwLwYDVQQD
EygwYWVjNDVhNDFkMjg1ODAwMDllZWVlNGUxNTk5OTNmZjczY2NhOGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut7c3cRfk6uz8X/kDSlQ21Opi1lg
1//B3B0ZBgt//4iLdMvp76E7dbKZLTR0G254haMbhujbr5mSP9DB92L1+y1qce7o
tt+1W8ue1W/tNv05ROUoW0uKsjQ50kBmKWzWVQrPk/RF4eUxZCtTMUdqqqawGo+0
aSJ9i7z4e9ggoCiY40O9IqZru/Ir/2v6tlc47Fyxr3hOGdbg6GHiRJ0B8oQYd80m
H1vSWb6M6KGoIjqpTKjT8mKGO3cDfRXn83lnTZ4fxQIzBLSrvB2OxD3BZMj8jSoP
LI/UaE+k+q/b7u2qt5yMAGiBqEC/9upspVsAL5/p5DfWpVMTDC/guczHrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArsRaQdKFgACe7uThWZk/9zzKjkMB8GA1UdIwQY
MBaAFFWyBZt0jW3dXFoMHTXpde97qIRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJJRm0zU05iZDFjV2d3ZE5lbDE3M3VvaEVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mOGU2N2YtOGRkMS00ZjJjLThkZTkt
MjMwNjRlMjFkMTRkLzEvVmJJRm0zU05iZDFjV2d3ZE5lbDE3M3VvaEVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9mOGU2N2YtOGRkMS00ZjJjLThkZTktMjMwNjRlMjFkMTRk
LzEvVmJJRm0zU05iZDFjV2d3ZE5lbDE3M3VvaEVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhH2eUqN
xB94sBYbWcoh6hh+9o02yvSbVHf7JHKYEOCOSIpKp8K/3npkhr32JjH/Um5xDxRG
lC61VHgi+KDT1B9rQb0TBJWKKJawcxNIg9LERncHYPWeZB70rSnwPmTYRifrXyjl
SnT6RprIVYc5csgH+9ZhJoP8icbt8LDAbvlLQ23HJd06YYDKO56IfecLdzp11Pco
KN8hu8OtzaPRmWbtUPH5OMxfgZmoVR2Lsr2BiDpQQh2U4QLBDYwyi5mn/Y75qvz1
PuBPhE81Qu4Swo9XhJcJiYJjWhZk1w9FlW9JIRu0AZ9H72eGvYze0gtwJdwZdJXw
mf52JR+CYRqJNA==
-----END CERTIFICATE-----
Generated at Thu Sep 11 16:36:54 2025 by rpki-client