Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
File: VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft (raw, json)
Hash identifier: YUmLasJL4boA5pjSeMMXwpx1Fuvy2uiStOfLo91TrUU=
Subject key identifier: 79:22:C0:93:E0:A1:5D:0C:9C:0B:30:BA:4B:3F:8E:09:3B:89:13:E4
Authority key identifier: 56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18
Certificate issuer: /CN=56e02f73509bde35d95d1851803e1f00829eb718
Certificate serial: 01992BC67759F2DF3C054E208DE6F0EE85BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
Manifest number: 0654
Signing time: Tue 09 Sep 2025 00:00:50 +0000
Manifest this update: Tue 09 Sep 2025 00:00:50 +0000
Manifest next update: Wed 10 Sep 2025 00:00:50 +0000
Files and hashes: 1: Kk17QDRaVm55Nj1Ql5GZNxMxg-E.roa (hash: 1DI9vhSZXA/YJqAVaaagZypXr5kFSqz0lKWRcfLOEfQ=)
2: VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl (hash: 6PhB+Tz8McaT82l2LezpMoUubw0Tgame9IVfGyJByEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:c6:77:59:f2:df:3c:05:4e:20:8d:e6:f0:ee:85:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e02f73509bde35d95d1851803e1f00829eb718
Validity
Not Before: Sep 9 00:00:50 2025 GMT
Not After : Sep 10 00:00:50 2025 GMT
Subject: CN=7922c093e0a15d0c9c0b30ba4b3f8e093b8913e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:50:2b:93:d7:41:ac:55:e6:e1:b5:64:17:d2:
0c:93:0a:3c:50:35:a4:50:d7:30:2d:87:55:df:32:
93:eb:f6:df:ac:15:b9:12:d6:9d:2d:e5:24:3a:9c:
30:39:3f:6a:75:73:d7:cf:f4:52:d1:22:41:ed:cc:
b8:0f:72:4d:88:81:ec:64:c4:a7:25:49:7f:a3:b2:
84:ed:1c:dd:30:f3:d0:44:ce:de:1a:cb:8b:b3:c6:
ef:42:e6:33:e3:23:d0:5f:05:2c:0a:85:3c:aa:66:
18:0d:ab:27:b1:18:9d:cf:bc:a2:3a:ef:c0:56:a5:
f8:fe:d5:94:1d:6a:77:67:81:f1:e3:2e:e4:da:a1:
ac:fe:3f:f4:c4:de:9e:f0:b8:33:8f:df:49:6a:31:
ec:a1:dd:14:d9:b7:b3:63:53:4d:02:33:a5:22:a4:
80:71:f3:e1:cf:2a:bc:97:55:95:92:35:9d:84:b7:
bc:b7:ae:83:15:29:7f:47:f0:1e:94:dd:90:07:5d:
c1:d9:81:a6:67:b2:c2:0b:ba:4b:b3:87:6f:6e:27:
a5:51:de:9a:c2:38:46:68:d5:5d:33:44:b0:90:09:
dc:20:af:91:79:12:f8:d1:90:24:ce:09:45:ae:10:
3f:15:ee:fa:ed:92:fe:b5:9e:88:f0:0a:8d:16:79:
b0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:22:C0:93:E0:A1:5D:0C:9C:0B:30:BA:4B:3F:8E:09:3B:89:13:E4
X509v3 Authority Key Identifier:
keyid:56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:86:dc:49:70:4a:16:fd:1b:f8:0f:a3:31:d0:a3:b1:81:62:
1f:0a:e3:28:c8:8b:eb:16:17:a5:68:1f:d4:1d:20:5c:10:75:
e3:29:bb:77:e5:e9:69:4a:87:f9:f7:bb:01:7e:12:3f:37:5a:
7c:41:9b:ad:19:42:0a:3a:4c:11:12:86:ae:b4:38:a5:14:bf:
b8:0f:59:46:ae:60:31:86:5d:29:c2:cc:ee:41:64:fd:f8:4d:
14:e4:31:5c:5b:50:47:2f:e5:c5:22:b6:86:80:89:d9:4c:af:
67:d0:12:a6:43:df:cf:bf:56:74:b7:70:99:6b:8c:13:36:66:
6c:1d:c3:1a:5c:d5:48:c4:22:07:ed:af:85:09:1e:c4:1e:a9:
36:0d:30:e3:dd:56:41:18:db:c3:7f:c0:ce:b9:27:2f:03:c3:
0b:3b:ad:54:e8:8c:16:be:d1:2e:c7:ce:f0:4c:3b:cb:a5:77:
4e:62:2c:d7:b6:ef:10:66:80:71:fc:66:65:ac:b6:0f:53:5d:
f4:21:17:86:4e:75:e6:0f:a3:95:0f:0e:b3:cb:7e:81:8d:05:
0a:9c:0a:69:dc:a0:a6:6d:45:78:86:2c:67:42:9b:5f:95:dc:
3e:26:2e:55:d4:c9:0a:61:bd:dd:95:d1:48:53:10:06:e3:1e:
f9:19:e0:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkrxndZ8t88BU4gjebw7oW9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZTAyZjczNTA5YmRlMzVkOTVkMTg1MTgwM2UxZjAwODI5
ZWI3MTgwHhcNMjUwOTA5MDAwMDUwWhcNMjUwOTEwMDAwMDUwWjAzMTEwLwYDVQQD
Eyg3OTIyYzA5M2UwYTE1ZDBjOWMwYjMwYmE0YjNmOGUwOTNiODkxM2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVArk9dBrFXm4bVkF9IMkwo8UDWk
UNcwLYdV3zKT6/bfrBW5EtadLeUkOpwwOT9qdXPXz/RS0SJB7cy4D3JNiIHsZMSn
JUl/o7KE7RzdMPPQRM7eGsuLs8bvQuYz4yPQXwUsCoU8qmYYDasnsRidz7yiOu/A
VqX4/tWUHWp3Z4Hx4y7k2qGs/j/0xN6e8Lgzj99JajHsod0U2bezY1NNAjOlIqSA
cfPhzyq8l1WVkjWdhLe8t66DFSl/R/AelN2QB13B2YGmZ7LCC7pLs4dvbielUd6a
wjhGaNVdM0SwkAncIK+ReRL40ZAkzglFrhA/Fe767ZL+tZ6I8AqNFnmwrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkiwJPgoV0MnAswuks/jgk7iRPkMB8GA1UdIwQY
MBaAFFbgL3NQm9412V0YUYA+HwCCnrcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnVBdmMxQ2IzalhaWFJoUmdENGZBSUtldHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDBjMDctZTk3Mi00ZDg4LTk1ZTgt
ZmM5NThlOGQ0OGMyLzEvVnVBdmMxQ2IzalhaWFJoUmdENGZBSUtldHhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iZDBjMDctZTk3Mi00ZDg4LTk1ZTgtZmM5NThlOGQ0OGMy
LzEvVnVBdmMxQ2IzalhaWFJoUmdENGZBSUtldHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANobcSXBK
Fv0b+A+jMdCjsYFiHwrjKMiL6xYXpWgf1B0gXBB14ym7d+XpaUqH+fe7AX4SPzda
fEGbrRlCCjpMERKGrrQ4pRS/uA9ZRq5gMYZdKcLM7kFk/fhNFOQxXFtQRy/lxSK2
hoCJ2UyvZ9ASpkPfz79WdLdwmWuMEzZmbB3DGlzVSMQiB+2vhQkexB6pNg0w491W
QRjbw3/AzrknLwPDCzutVOiMFr7RLsfO8Ew7y6V3TmIs17bvEGaAcfxmZay2D1Nd
9CEXhk515g+jlQ8Os8t+gY0FCpwKadygpm1FeIYsZ0KbX5XcPiYuVdTJCmG93ZXR
SFMQBuMe+Rng6Q==
-----END CERTIFICATE-----
Generated at Tue Sep 9 09:27:04 2025 by rpki-client