Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
File: vhqIfnZTot5E8TFj4YcDcyaimgM.mft (raw, json)
Hash identifier: d59yEQgTsfmcqc6mpociTonRj6gwgOoUho1TkFtKpe4=
Subject key identifier: 06:C5:54:11:92:4C:79:9F:54:C7:AE:65:09:BA:41:69:97:F1:0B:19
Authority key identifier: BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
Certificate issuer: /CN=be1a887e7653a2de44f13163e187037326a29a03
Certificate serial: 019923D64ECF6C1263A5874F461E20FD47F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
Manifest number: 1678
Signing time: Sun 07 Sep 2025 11:01:11 +0000
Manifest this update: Sun 07 Sep 2025 11:01:11 +0000
Manifest next update: Mon 08 Sep 2025 11:01:11 +0000
Files and hashes: 1: Ae-diP3rVk-4sa-PXAYgbcBanm4.roa (hash: u0iGxdBhci5JERVXq9GDeBfY++asc/728T5ZMln1pyE=)
2: Z9qZa3inYQ6MRNBOPIdAZNAoS4Y.roa (hash: hXK11vHnwMejj7JOnaAkUByhg12mm0SXJ7OP6kT8Ve8=)
3: vhqIfnZTot5E8TFj4YcDcyaimgM.crl (hash: d2bVHGqpkAwAwmLHV5dh7lwTgN38yrhynMfe1QbTMek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:4e:cf:6c:12:63:a5:87:4f:46:1e:20:fd:47:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1a887e7653a2de44f13163e187037326a29a03
Validity
Not Before: Sep 7 11:01:11 2025 GMT
Not After : Sep 8 11:01:11 2025 GMT
Subject: CN=06c55411924c799f54c7ae6509ba416997f10b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ba:04:36:50:91:ef:f8:4b:e3:71:9e:57:8e:
2b:93:44:c3:34:0e:ce:d7:13:bc:a1:c3:c4:4d:c6:
4e:2b:e7:43:61:b1:3f:ca:5c:b8:cb:cd:57:37:fd:
11:a4:9e:bb:9f:1f:76:d6:4c:c6:f7:cf:6b:64:ca:
88:ef:6b:87:b3:3c:28:97:88:fa:69:b9:78:1d:82:
88:6f:f5:9f:2f:34:39:f2:ed:85:4f:c6:79:fe:3a:
84:e7:1e:9b:25:c2:42:6a:d6:64:22:75:93:6c:98:
4f:0a:87:6a:60:a7:ca:49:6f:b0:82:88:05:d3:53:
fd:4c:3a:96:99:66:37:f0:ed:e5:12:d3:7a:e2:fe:
51:61:84:9b:df:5e:8c:89:42:84:f1:e3:47:1d:97:
3e:51:dc:b1:c8:1a:f8:2c:9c:b6:8a:02:2d:69:6d:
b9:15:e6:7c:28:e9:c8:1e:9b:67:9b:98:90:31:32:
5d:85:6c:a3:06:00:4d:c8:3f:82:96:5e:dd:8e:fb:
f8:3c:44:65:2b:59:a0:5f:7f:b7:b8:3c:cf:eb:74:
80:44:b5:00:e6:4a:29:95:36:bd:45:a3:2e:5d:33:
5b:89:84:51:c5:85:78:b6:15:ff:d1:57:59:d1:50:
1d:b5:10:6c:6a:6c:5f:cc:dc:88:42:ad:c3:89:7e:
44:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C5:54:11:92:4C:79:9F:54:C7:AE:65:09:BA:41:69:97:F1:0B:19
X509v3 Authority Key Identifier:
keyid:BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:eb:6c:2f:8b:9b:74:67:f0:2b:cf:1f:21:e4:73:17:a4:70:
5d:71:93:24:97:45:15:6a:f4:66:54:5f:f3:3e:bc:73:24:fc:
72:4c:72:bf:1a:55:85:70:30:2f:60:4f:70:96:5c:67:48:25:
97:6d:7b:5a:db:b7:c5:b7:48:d7:ef:8a:3a:c8:ca:28:d6:fe:
f4:46:25:25:77:8a:62:e6:42:f1:51:9d:d8:2c:d0:d6:14:fe:
16:54:dc:75:b3:d7:fd:83:8d:c7:08:bc:97:e8:31:53:27:70:
5b:82:11:c2:e0:d3:d8:be:c2:49:a5:bd:e4:37:f9:0e:d2:85:
d2:c8:79:36:1e:40:14:75:c5:b6:9c:a3:e1:c8:8d:6c:ee:39:
48:bd:9f:b5:c4:51:55:13:02:5b:ef:df:30:e3:bc:39:ea:34:
40:bb:53:7e:78:4d:ae:5b:f8:cc:f0:08:a9:f6:c9:3b:ed:b1:
22:97:b7:e2:cf:05:41:68:ac:c0:39:b6:9d:47:fd:c2:7c:88:
ee:11:18:53:54:1f:9f:81:cb:b6:91:af:4b:65:44:b2:3b:5b:
2e:cc:5b:ed:49:08:19:dc:cb:88:b7:ad:03:c7:e6:66:2d:42:
0e:8e:a6:6a:d5:0b:ee:ac:73:a4:5c:25:2b:dc:23:dc:31:9e:
52:e2:2e:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkj1k7PbBJjpYdPRh4g/UfxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMWE4ODdlNzY1M2EyZGU0NGYxMzE2M2UxODcwMzczMjZh
MjlhMDMwHhcNMjUwOTA3MTEwMTExWhcNMjUwOTA4MTEwMTExWjAzMTEwLwYDVQQD
EygwNmM1NTQxMTkyNGM3OTlmNTRjN2FlNjUwOWJhNDE2OTk3ZjEwYjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLoENlCR7/hL43GeV44rk0TDNA7O
1xO8ocPETcZOK+dDYbE/yly4y81XN/0RpJ67nx921kzG989rZMqI72uHszwol4j6
abl4HYKIb/WfLzQ58u2FT8Z5/jqE5x6bJcJCatZkInWTbJhPCodqYKfKSW+wgogF
01P9TDqWmWY38O3lEtN64v5RYYSb316MiUKE8eNHHZc+UdyxyBr4LJy2igItaW25
FeZ8KOnIHptnm5iQMTJdhWyjBgBNyD+Cll7djvv4PERlK1mgX3+3uDzP63SARLUA
5koplTa9RaMuXTNbiYRRxYV4thX/0VdZ0VAdtRBsamxfzNyIQq3DiX5EowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbFVBGSTHmfVMeuZQm6QWmX8QsZMB8GA1UdIwQY
MBaAFL4aiH52U6LeRPExY+GHA3MmopoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmhxSWZuWlRvdDVFOFRGajRZY0RjeWFpbWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84YjQ0M2UtZjNjOC00YmEwLTllOTYt
ODZjNTQxY2E5ZDcxLzEvdmhxSWZuWlRvdDVFOFRGajRZY0RjeWFpbWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC84YjQ0M2UtZjNjOC00YmEwLTllOTYtODZjNTQxY2E5ZDcx
LzEvdmhxSWZuWlRvdDVFOFRGajRZY0RjeWFpbWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgutsL4ub
dGfwK88fIeRzF6RwXXGTJJdFFWr0ZlRf8z68cyT8ckxyvxpVhXAwL2BPcJZcZ0gl
l217Wtu3xbdI1++KOsjKKNb+9EYlJXeKYuZC8VGd2CzQ1hT+FlTcdbPX/YONxwi8
l+gxUydwW4IRwuDT2L7CSaW95Df5DtKF0sh5Nh5AFHXFtpyj4ciNbO45SL2ftcRR
VRMCW+/fMOO8Oeo0QLtTfnhNrlv4zPAIqfbJO+2xIpe34s8FQWiswDm2nUf9wnyI
7hEYU1Qfn4HLtpGvS2VEsjtbLsxb7UkIGdzLiLetA8fmZi1CDo6matUL7qxzpFwl
K9wj3DGeUuIu1g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:18 2025 by rpki-client