Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
File: vIwagDL1fyKwFFSmXvMt6ndJbQs.mft (raw, json)
Hash identifier: zBSj2JAYarQy+bg9aiWQak4IaulpLwN4gG/9v9dpGoE=
Subject key identifier: DA:D1:EE:47:2D:4B:90:7D:8E:8B:E0:36:9A:BC:56:7D:85:C3:B1:9B
Authority key identifier: BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
Certificate issuer: /CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Certificate serial: 01992FDA4A1D48A3D0923EF70F85E99C4AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
Manifest number: 09AC
Signing time: Tue 09 Sep 2025 19:00:58 +0000
Manifest this update: Tue 09 Sep 2025 19:00:58 +0000
Manifest next update: Wed 10 Sep 2025 19:00:58 +0000
Files and hashes: 1: 87EiEbuhBkMDFm619edEsUyoB7Y.roa (hash: iu5N7p/QfYR3g8fpVRiIN4OpWGAgMRa+uUZVim92tYw=)
2: hhHnsqFssAy3cZ6p2eic8J_5Jkg.roa (hash: 4+RUythcb8WdsV0R43hgKvkcYTcHEmIS4/pDs5LGxZk=)
3: vIwagDL1fyKwFFSmXvMt6ndJbQs.crl (hash: HHRF/yBOy1tQgi/IBGJ50UjtDNEJL9Fo46bmT87mJfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:da:4a:1d:48:a3:d0:92:3e:f7:0f:85:e9:9c:4a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Validity
Not Before: Sep 9 19:00:58 2025 GMT
Not After : Sep 10 19:00:58 2025 GMT
Subject: CN=dad1ee472d4b907d8e8be0369abc567d85c3b19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:00:eb:b9:93:a5:21:6e:78:bb:bc:3b:bc:04:
5c:8a:63:9d:81:4e:b5:a7:d8:4c:99:87:c3:d1:16:
55:59:16:1f:2f:7a:94:52:ad:d7:b8:65:65:be:15:
13:3f:51:aa:e0:3d:dd:8e:a6:ee:9a:ce:09:37:b9:
90:4a:74:92:48:17:2d:30:08:c2:5f:a1:8b:b1:22:
c7:a1:0f:9f:69:1b:ba:1b:ec:a4:8d:33:0a:1f:94:
86:39:6d:8c:48:68:aa:5b:6d:2f:d2:16:a3:53:e5:
c7:30:ff:31:14:48:e2:0d:a0:76:3d:a5:e0:c1:cb:
e8:05:31:85:57:6c:c5:96:bc:cf:d6:b3:bd:ce:a9:
be:ab:22:fa:ee:21:50:74:64:2d:f7:5d:35:13:05:
b1:93:5f:a1:21:d0:a8:f3:09:07:71:5c:9e:b5:14:
7b:e4:1c:c7:5a:43:ca:e6:3f:d2:52:2e:48:fb:5c:
3d:76:93:2e:6e:77:c7:6a:15:4a:99:7c:fa:ca:d8:
35:d3:20:d7:c9:01:9f:3d:3c:66:7c:f8:dc:47:a6:
74:6e:55:7d:8e:00:9c:da:70:8b:a8:c5:29:c0:e3:
40:c0:07:97:a4:e2:5a:a2:9f:08:b7:35:c9:2f:89:
7d:0e:0f:96:1c:d6:cf:9c:c6:42:1e:b4:18:84:86:
d8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D1:EE:47:2D:4B:90:7D:8E:8B:E0:36:9A:BC:56:7D:85:C3:B1:9B
X509v3 Authority Key Identifier:
keyid:BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:de:9c:8f:b0:de:23:98:c3:ec:93:dd:33:51:db:f1:15:f5:
6f:17:b5:14:f0:06:0f:57:b4:2d:ad:a7:94:07:cc:95:87:1a:
eb:e7:55:0a:8e:ca:c3:b4:9b:92:1a:03:f2:32:4d:28:62:2a:
cc:fb:10:1d:9c:8c:ba:a2:79:99:db:1a:a3:f2:cf:0b:9b:e3:
67:53:bc:69:0e:42:25:db:f5:47:bb:99:a1:05:ac:4d:2d:46:
37:d9:7d:c8:ad:a2:84:1b:7f:93:36:31:60:59:f4:23:48:7c:
92:c9:39:02:60:5f:7a:52:f4:e8:40:f5:3e:2f:45:bb:4d:0d:
46:ba:b4:12:f0:1e:ce:75:06:c6:0b:bd:39:c1:45:33:8e:32:
9a:3a:b1:be:c0:b2:83:6e:c5:6a:26:14:f3:7d:d9:68:ae:43:
7f:dd:55:95:e0:14:45:98:01:17:f8:5c:2a:89:02:b1:07:4a:
c6:b5:b0:27:f3:8c:e0:35:96:af:39:5e:88:99:99:e0:54:6c:
77:9b:ce:4f:77:df:bf:fd:57:2f:ad:e2:01:a2:b6:46:16:66:
46:59:9b:7c:60:b0:aa:dc:99:e6:ec:5a:f4:b4:ec:05:57:8d:
c6:3e:67:40:95:91:45:96:8b:a8:ac:25:16:1a:c8:6b:da:c8:
15:73:46:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkv2kodSKPQkj73D4XpnEqzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOGMxYTgwMzJmNTdmMjJiMDE0NTRhNjVlZjMyZGVhNzc0
OTZkMGIwHhcNMjUwOTA5MTkwMDU4WhcNMjUwOTEwMTkwMDU4WjAzMTEwLwYDVQQD
EyhkYWQxZWU0NzJkNGI5MDdkOGU4YmUwMzY5YWJjNTY3ZDg1YzNiMTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wDruZOlIW54u7w7vARcimOdgU61
p9hMmYfD0RZVWRYfL3qUUq3XuGVlvhUTP1Gq4D3djqbums4JN7mQSnSSSBctMAjC
X6GLsSLHoQ+faRu6G+ykjTMKH5SGOW2MSGiqW20v0hajU+XHMP8xFEjiDaB2PaXg
wcvoBTGFV2zFlrzP1rO9zqm+qyL67iFQdGQt9101EwWxk1+hIdCo8wkHcVyetRR7
5BzHWkPK5j/SUi5I+1w9dpMubnfHahVKmXz6ytg10yDXyQGfPTxmfPjcR6Z0blV9
jgCc2nCLqMUpwONAwAeXpOJaop8ItzXJL4l9Dg+WHNbPnMZCHrQYhIbYWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrR7kctS5B9jovgNpq8Vn2Fw7GbMB8GA1UdIwQY
MBaAFLyMGoAy9X8isBRUpl7zLep3SW0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkl3YWdETDFmeUt3RkZTbVh2TXQ2bmRKYlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85ZjQyODItZGZlYi00MGMxLWFmODQt
YTU2NGVjMDExYzVkLzEvdkl3YWdETDFmeUt3RkZTbVh2TXQ2bmRKYlFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC85ZjQyODItZGZlYi00MGMxLWFmODQtYTU2NGVjMDExYzVk
LzEvdkl3YWdETDFmeUt3RkZTbVh2TXQ2bmRKYlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABd6cj7De
I5jD7JPdM1Hb8RX1bxe1FPAGD1e0La2nlAfMlYca6+dVCo7Kw7SbkhoD8jJNKGIq
zPsQHZyMuqJ5mdsao/LPC5vjZ1O8aQ5CJdv1R7uZoQWsTS1GN9l9yK2ihBt/kzYx
YFn0I0h8ksk5AmBfelL06ED1Pi9Fu00NRrq0EvAeznUGxgu9OcFFM44ymjqxvsCy
g27FaiYU833ZaK5Df91VleAURZgBF/hcKokCsQdKxrWwJ/OM4DWWrzleiJmZ4FRs
d5vOT3ffv/1XL63iAaK2RhZmRlmbfGCwqtyZ5uxa9LTsBVeNxj5nQJWRRZaLqKwl
FhrIa9rIFXNGQw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 03:47:24 2025 by rpki-client