
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.mft
File: vGyMBtLTwoAfBUWPyDQT2wpd360.mft (raw, json)
Hash identifier: 3XeGALuHKyk9y7SxqhRqusljGNR5PDMikj5dB9xSUdE=
Subject key identifier: 87:FD:15:48:BD:92:BD:3F:12:DC:EE:79:AC:A6:45:E3:10:C5:F0:45
Authority key identifier: BC:6C:8C:06:D2:D3:C2:80:1F:05:45:8F:C8:34:13:DB:0A:5D:DF:AD
Certificate issuer: /CN=bc6c8c06d2d3c2801f05458fc83413db0a5ddfad
Certificate serial: 0199183FD1B254A9DAFCC85CE3386F23FDEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.mft
Manifest number: 1625
Signing time: Fri 05 Sep 2025 05:00:59 +0000
Manifest this update: Fri 05 Sep 2025 05:00:59 +0000
Manifest next update: Sat 06 Sep 2025 05:00:59 +0000
Files and hashes: 1: fGA1M57yGBtOMUI08h8wD_v-d7E.roa (hash: CuPB00S3uLOygPninxMXcEhxd+sJxquT0fKOzzZvR50=)
2: n1Z0Q-YQVQVsp6EtaSdV5kxzK8o.roa (hash: j/RbuEbSmCY6X+urcyJxBIm09OVw0mWKye4GRN1M584=)
3: vGyMBtLTwoAfBUWPyDQT2wpd360.crl (hash: 79Vi1bKFgXNJdRy876+TZrmpARvYvGveLDLeNuHMfdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:3f:d1:b2:54:a9:da:fc:c8:5c:e3:38:6f:23:fd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6c8c06d2d3c2801f05458fc83413db0a5ddfad
Validity
Not Before: Sep 5 05:00:59 2025 GMT
Not After : Sep 6 05:00:59 2025 GMT
Subject: CN=87fd1548bd92bd3f12dcee79aca645e310c5f045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f6:f1:8d:15:6c:62:37:85:8e:00:13:14:36:
57:21:d9:c6:0a:fd:f4:20:34:ef:52:bf:b4:cc:ed:
84:5c:b0:ef:5e:02:23:46:07:fa:d2:cd:a9:19:cd:
d3:99:60:bf:24:62:c1:19:2a:b1:22:a3:9d:df:2a:
f7:7b:b8:37:f1:0a:c2:f2:fd:0f:ae:f7:7c:eb:ae:
0a:48:71:a7:e4:96:8c:75:5d:df:bb:a8:1d:21:04:
1a:64:ff:11:87:5e:a8:c3:e8:4f:35:99:ec:ab:1f:
e7:a3:ee:17:4d:7f:00:04:b4:69:b5:a7:4a:69:bf:
24:b6:34:32:a5:8f:30:a8:86:84:80:46:0e:c9:65:
56:9c:ec:e6:64:d8:36:4b:a2:9d:fc:db:ed:eb:9c:
3c:2d:27:1c:14:a9:4f:09:37:85:f2:80:a5:b4:bb:
bd:cc:0a:3b:bb:62:00:d8:4c:7b:f8:ed:85:9b:87:
85:61:d1:31:a1:a6:1a:ec:63:df:93:30:ae:79:e2:
b3:a1:2e:b6:77:99:6f:04:2b:b3:e2:28:c1:d5:de:
85:10:28:6b:76:a8:dc:ee:7e:5f:87:e2:d0:19:97:
1c:20:8c:81:72:b3:f8:27:f7:17:7d:7d:10:0c:99:
c8:a0:7e:0b:e0:78:31:9a:bf:3a:bb:24:80:54:ee:
48:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FD:15:48:BD:92:BD:3F:12:DC:EE:79:AC:A6:45:E3:10:C5:F0:45
X509v3 Authority Key Identifier:
keyid:BC:6C:8C:06:D2:D3:C2:80:1F:05:45:8F:C8:34:13:DB:0A:5D:DF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:dc:65:2a:83:40:e1:f6:dc:77:6d:70:bc:7a:b5:cb:f4:24:
50:de:25:b5:df:21:de:96:0e:c0:ad:a2:d8:87:78:ba:e5:20:
6a:ec:80:1a:00:23:c9:a1:08:24:03:de:f4:d4:c3:b7:7b:31:
22:6a:0d:99:9d:45:03:08:2c:39:92:45:8c:da:88:6f:67:37:
dc:cf:41:9c:b7:05:b5:49:2c:df:a7:b7:e6:ae:6e:09:7f:de:
d0:ab:9f:4a:a5:e3:7d:b2:73:4d:19:7c:03:b1:0b:71:47:81:
e9:c5:bd:16:65:1b:b1:50:b8:ab:ad:0d:40:89:98:5c:28:7e:
51:de:05:05:e1:94:eb:ab:0a:c1:92:0f:c6:90:31:8c:a1:71:
ff:94:9a:13:fc:e0:ed:76:57:c6:85:ba:6b:6b:f4:48:aa:12:
70:cf:5f:7c:c3:60:12:0c:bc:94:38:c5:ed:fd:c3:e3:68:79:
6f:83:a3:f0:91:22:6e:a8:ba:16:9c:d3:4d:91:b2:98:cf:34:
44:c2:8f:d7:dd:18:fd:16:be:94:c0:67:f0:df:e5:0e:02:64:
78:70:f7:f2:4e:99:a0:0a:04:d3:de:90:34:74:42:84:99:25:
0e:e3:b9:bb:79:87:65:93:08:36:50:f4:03:49:75:91:49:81:
d7:5b:e4:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkYP9GyVKna/Mhc4zhvI/3uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNmM4YzA2ZDJkM2MyODAxZjA1NDU4ZmM4MzQxM2RiMGE1
ZGRmYWQwHhcNMjUwOTA1MDUwMDU5WhcNMjUwOTA2MDUwMDU5WjAzMTEwLwYDVQQD
Eyg4N2ZkMTU0OGJkOTJiZDNmMTJkY2VlNzlhY2E2NDVlMzEwYzVmMDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/bxjRVsYjeFjgATFDZXIdnGCv30
IDTvUr+0zO2EXLDvXgIjRgf60s2pGc3TmWC/JGLBGSqxIqOd3yr3e7g38QrC8v0P
rvd8664KSHGn5JaMdV3fu6gdIQQaZP8Rh16ow+hPNZnsqx/no+4XTX8ABLRptadK
ab8ktjQypY8wqIaEgEYOyWVWnOzmZNg2S6Kd/Nvt65w8LSccFKlPCTeF8oCltLu9
zAo7u2IA2Ex7+O2Fm4eFYdExoaYa7GPfkzCueeKzoS62d5lvBCuz4ijB1d6FEChr
dqjc7n5fh+LQGZccIIyBcrP4J/cXfX0QDJnIoH4L4Hgxmr86uySAVO5IWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIf9FUi9kr0/EtzueaymReMQxfBFMB8GA1UdIwQY
MBaAFLxsjAbS08KAHwVFj8g0E9sKXd+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkd5TUJ0TFR3b0FmQlVXUHlEUVQyd3BkMzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xN2FkZGYtZDMyNS00YWE3LTk3YTct
NGI0M2E0NzM4MmI2LzEvdkd5TUJ0TFR3b0FmQlVXUHlEUVQyd3BkMzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8xN2FkZGYtZDMyNS00YWE3LTk3YTctNGI0M2E0NzM4MmI2
LzEvdkd5TUJ0TFR3b0FmQlVXUHlEUVQyd3BkMzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9xlKoNA
4fbcd21wvHq1y/QkUN4ltd8h3pYOwK2i2Id4uuUgauyAGgAjyaEIJAPe9NTDt3sx
ImoNmZ1FAwgsOZJFjNqIb2c33M9BnLcFtUks36e35q5uCX/e0KufSqXjfbJzTRl8
A7ELcUeB6cW9FmUbsVC4q60NQImYXCh+Ud4FBeGU66sKwZIPxpAxjKFx/5SaE/zg
7XZXxoW6a2v0SKoScM9ffMNgEgy8lDjF7f3D42h5b4Oj8JEibqi6FpzTTZGymM80
RMKP190Y/Ra+lMBn8N/lDgJkeHD38k6ZoAoE096QNHRChJklDuO5u3mHZZMINlD0
A0l1kUmB11vkNQ==
-----END CERTIFICATE-----
Generated at Fri Sep 5 05:52:43 2025 by rpki-client