Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
File: vqbKA6jBNc7q4jLJN8HuC6uH54I.mft (raw, json)
Hash identifier: aGPe2+UmpkbKgcjD6WUz6c2fEi3W/XnQRyDwrdHrTdc=
Subject key identifier: DD:2A:25:65:BD:30:79:28:CB:C2:97:35:CC:D8:99:69:B8:C6:56:36
Authority key identifier: BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
Certificate issuer: /CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Certificate serial: 0198CACAEA2DE2B0AED30F8916C5E0175D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
Manifest number: 0E5D
Signing time: Thu 21 Aug 2025 04:02:32 +0000
Manifest this update: Thu 21 Aug 2025 04:02:32 +0000
Manifest next update: Fri 22 Aug 2025 04:02:32 +0000
Files and hashes: 1: RWAst6rhQtck0cf4rpJmbaVPDy4.roa (hash: ptBc35DUx8RheDUbwgxYVnrU5/IkEp9u9Ianwe8RHT0=)
2: dZgYAx_N36qliHArmqX1gaumeGY.roa (hash: f8R8/QcHyuVgs1r9zKBrMS4KaT9iNImM3nX83XfW2bA=)
3: vqbKA6jBNc7q4jLJN8HuC6uH54I.crl (hash: RMq4JlE2IP3i4wse37ULLFTJTo7h+hCRodJbrhGfIoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 04:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:ca:ea:2d:e2:b0:ae:d3:0f:89:16:c5:e0:17:5d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Validity
Not Before: Aug 21 04:02:32 2025 GMT
Not After : Aug 22 04:02:32 2025 GMT
Subject: CN=dd2a2565bd307928cbc29735ccd89969b8c65636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:7b:57:22:7a:cc:88:c0:58:c9:0d:67:72:
36:b7:fe:fe:9d:df:a5:c6:d2:ae:a6:9c:9b:23:58:
dd:40:68:ae:1f:87:e0:fc:3c:4b:d4:ee:19:fc:11:
f1:17:53:53:92:16:4f:8f:f5:78:b7:21:da:d0:cc:
94:a6:32:20:e3:bf:99:70:50:56:ac:a5:67:76:03:
d2:47:81:c4:2e:c5:6f:d3:f2:06:30:52:69:b2:0c:
6a:4a:ab:27:6d:79:31:55:2e:a0:0a:be:4c:3a:85:
90:d5:5c:17:60:fa:4b:27:f5:f5:5a:85:85:2b:b2:
d2:f3:a0:e9:cd:2e:83:4a:37:dd:26:2c:d0:79:db:
f5:8c:69:25:4b:70:40:eb:06:ce:a6:cf:2f:60:39:
67:b6:84:63:a5:16:47:8b:a3:27:81:9d:fc:0f:23:
d3:eb:5f:17:91:a9:26:fa:8d:88:0a:60:e5:6b:0d:
f2:0a:8a:7d:fe:af:2e:92:af:af:e8:ac:d3:04:ec:
d0:ef:c1:d0:f0:41:34:30:93:e9:18:e2:56:cc:77:
eb:a5:5c:d2:a6:10:08:2e:3d:26:03:22:77:a4:e0:
2b:5f:dc:19:94:f7:c0:fa:42:05:38:f3:c0:34:58:
15:8c:a8:98:2b:af:ab:f9:b8:2c:35:81:a7:40:e4:
dd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2A:25:65:BD:30:79:28:CB:C2:97:35:CC:D8:99:69:B8:C6:56:36
X509v3 Authority Key Identifier:
keyid:BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:85:b2:aa:d0:3e:65:a5:ef:b2:9f:1b:48:79:16:2d:e5:94:
ac:e6:2a:59:71:09:e3:37:30:e0:3f:00:39:5e:b9:b7:61:60:
62:b6:2e:4d:b5:7c:45:71:37:0b:41:be:22:50:49:e4:0d:44:
b8:1b:9a:3b:2a:cb:57:28:43:ef:25:19:02:5f:84:0e:56:30:
37:d1:33:07:c1:4f:b7:23:38:e6:52:6b:29:7e:7a:73:fc:ba:
07:70:a4:81:91:73:e4:4f:55:0e:0e:d4:f7:0e:bd:fd:ba:17:
23:f3:37:ab:1b:9c:42:3f:dc:92:6a:55:2b:5b:88:81:79:36:
f7:d5:74:17:f8:1e:61:a3:5e:78:97:48:c2:74:c8:9e:e5:f9:
fa:94:29:8a:9e:b2:b9:a6:ba:a1:64:d1:0f:7b:48:d2:3e:90:
3e:b7:e6:af:b4:c4:b0:b7:9e:f1:c3:e6:ac:29:06:a6:11:bb:
75:a3:56:06:fd:17:b6:e3:65:23:1b:5a:18:64:50:6c:58:b9:
52:55:bc:3c:a4:66:ba:67:be:9c:9a:9c:6b:6c:7f:25:e3:d9:
d0:81:c8:9f:f2:f2:d6:0b:ab:93:4a:b8:a4:af:1f:88:b2:46:
5b:53:73:96:29:a1:fb:13:21:43:07:94:1d:4c:a7:46:88:b3:
55:f4:64:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjKyuot4rCu0w+JFsXgF10PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTZjYTAzYThjMTM1Y2VlYWUyMzJjOTM3YzFlZTBiYWI4
N2U3ODIwHhcNMjUwODIxMDQwMjMyWhcNMjUwODIyMDQwMjMyWjAzMTEwLwYDVQQD
EyhkZDJhMjU2NWJkMzA3OTI4Y2JjMjk3MzVjY2Q4OTk2OWI4YzY1NjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg57VyJ6zIjAWMkNZ3I2t/7+nd+l
xtKuppybI1jdQGiuH4fg/DxL1O4Z/BHxF1NTkhZPj/V4tyHa0MyUpjIg47+ZcFBW
rKVndgPSR4HELsVv0/IGMFJpsgxqSqsnbXkxVS6gCr5MOoWQ1VwXYPpLJ/X1WoWF
K7LS86DpzS6DSjfdJizQedv1jGklS3BA6wbOps8vYDlntoRjpRZHi6MngZ38DyPT
618Xkakm+o2ICmDlaw3yCop9/q8ukq+v6KzTBOzQ78HQ8EE0MJPpGOJWzHfrpVzS
phAILj0mAyJ3pOArX9wZlPfA+kIFOPPANFgVjKiYK6+r+bgsNYGnQOTdSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0qJWW9MHkoy8KXNczYmWm4xlY2MB8GA1UdIwQY
MBaAFL6mygOowTXO6uIyyTfB7gurh+eCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFiS0E2akJOYzdxNGpMSk44SHVDNnVINTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iYzY1ZjYtMGMzYi00MDRlLWJmYWQt
OWZhNDIyOGMwMmVhLzEvdnFiS0E2akJOYzdxNGpMSk44SHVDNnVINTRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iYzY1ZjYtMGMzYi00MDRlLWJmYWQtOWZhNDIyOGMwMmVh
LzEvdnFiS0E2akJOYzdxNGpMSk44SHVDNnVINTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANIWyqtA+
ZaXvsp8bSHkWLeWUrOYqWXEJ4zcw4D8AOV65t2FgYrYuTbV8RXE3C0G+IlBJ5A1E
uBuaOyrLVyhD7yUZAl+EDlYwN9EzB8FPtyM45lJrKX56c/y6B3CkgZFz5E9VDg7U
9w69/boXI/M3qxucQj/ckmpVK1uIgXk299V0F/geYaNeeJdIwnTInuX5+pQpip6y
uaa6oWTRD3tI0j6QPrfmr7TEsLee8cPmrCkGphG7daNWBv0XtuNlIxtaGGRQbFi5
UlW8PKRmume+nJqca2x/JePZ0IHIn/Ly1gurk0q4pK8fiLJGW1Nzlimh+xMhQweU
HUynRoizVfRk9g==
-----END CERTIFICATE-----
Generated at Thu Aug 21 11:53:38 2025 by rpki-client