Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
File: VEi51bhRcfcmQjiyegMGxWz7a08.mft (raw, json)
Hash identifier: 3W+xCd3fSBxYPvGM2F7xsEOdMJ32CDjqgQeFdg5SwUQ=
Subject key identifier: AF:37:37:A1:E4:DD:1F:65:B9:0D:D8:F8:6F:40:74:69:A2:BA:2B:66
Authority key identifier: 54:48:B9:D5:B8:51:71:F7:26:42:38:B2:7A:03:06:C5:6C:FB:6B:4F
Certificate issuer: /CN=5448b9d5b85171f7264238b27a0306c56cfb6b4f
Certificate serial: 0199356E6BAAF4FCF596905E665B5D9C305E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
Manifest number: 07C2
Signing time: Wed 10 Sep 2025 21:00:52 +0000
Manifest this update: Wed 10 Sep 2025 21:00:52 +0000
Manifest next update: Thu 11 Sep 2025 21:00:52 +0000
Files and hashes: 1: VEi51bhRcfcmQjiyegMGxWz7a08.crl (hash: zlwb7oD4ygNP+qP9f3zgcLYrf379pBGRSndKNvam40s=)
2: ZgXd4-iRm-6EfiiRbptDsH9YV00.roa (hash: IdlINd8LGSye4C+J8uo8raNO879fzxKpQdAtnUj3Zr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:6b:aa:f4:fc:f5:96:90:5e:66:5b:5d:9c:30:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5448b9d5b85171f7264238b27a0306c56cfb6b4f
Validity
Not Before: Sep 10 21:00:52 2025 GMT
Not After : Sep 11 21:00:52 2025 GMT
Subject: CN=af3737a1e4dd1f65b90dd8f86f407469a2ba2b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d9:21:ae:da:bf:b8:01:d9:54:b3:d4:47:1b:
03:35:47:5d:1f:ff:7a:5c:09:64:44:b2:89:06:40:
5d:34:be:40:ef:0c:f3:d4:18:18:d2:d6:0a:6d:10:
8e:3d:07:9f:4b:39:32:0d:e3:4f:eb:38:c5:b2:58:
05:34:1a:74:1c:af:73:da:d9:c3:35:70:74:26:ff:
12:28:9a:58:1e:a9:7e:6b:ad:81:ad:69:de:7c:a3:
6a:2d:cd:94:fd:3e:99:3b:a1:a8:f0:db:38:25:a5:
47:31:90:b6:50:fa:06:95:e1:ca:4c:f2:fe:b4:64:
3c:64:98:b2:aa:38:71:d7:79:74:95:5e:fb:56:f5:
7c:8e:61:d5:a6:57:f7:1e:dc:84:b4:5a:d7:d3:0a:
50:8e:21:b3:f0:77:d6:2e:fc:77:6b:0d:bd:9f:43:
e9:c5:2b:d1:fb:cc:3f:29:a0:79:1c:9d:e1:44:ad:
be:31:21:24:8e:7e:98:f1:47:8b:5e:fe:11:54:62:
68:63:73:f1:d0:28:ed:2f:56:a4:8b:36:ec:98:4c:
8a:8b:0f:88:e6:96:02:5b:22:9d:28:cf:d5:6a:8f:
3f:5e:84:ec:fd:0e:17:60:a7:2b:de:03:77:47:4c:
bf:09:e9:10:f1:e1:e0:07:c6:54:01:0f:f5:ed:fb:
e0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:37:37:A1:E4:DD:1F:65:B9:0D:D8:F8:6F:40:74:69:A2:BA:2B:66
X509v3 Authority Key Identifier:
keyid:54:48:B9:D5:B8:51:71:F7:26:42:38:B2:7A:03:06:C5:6C:FB:6B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:48:5b:a4:18:af:3a:94:8b:2f:b2:6c:f5:42:e6:ac:cc:65:
bf:6f:5f:10:cd:3b:ea:4d:d0:52:90:f8:b4:84:ff:dc:5a:02:
e9:9e:ed:b1:36:7b:a2:66:42:cd:96:43:18:b7:cf:2e:ca:53:
e4:ed:58:31:f9:6e:ac:e9:27:af:4a:03:25:97:b0:66:cb:17:
66:b0:98:3e:73:b2:20:d7:95:d8:91:63:07:49:5d:97:0b:10:
55:c1:65:62:cb:20:6c:35:e0:c0:24:be:e9:ee:0b:0b:59:37:
b8:4a:3c:a6:8b:db:0d:ad:16:d7:aa:f7:ca:2b:d3:cb:b1:ce:
2a:65:5d:aa:f8:18:5a:14:1d:8a:da:51:14:5e:44:b0:98:cf:
d2:f6:2b:8f:18:a6:c7:ee:0a:4b:ff:71:a0:25:c2:86:b1:d5:
85:ef:2d:41:27:36:6a:f8:84:ed:9f:53:f1:cb:49:52:91:56:
80:49:53:99:ee:3d:b7:4d:6e:63:fc:e4:77:82:88:09:01:7a:
ca:11:bf:09:95:c2:60:93:b8:43:2e:0b:ba:ad:50:53:af:8c:
43:b5:2a:d7:24:86:51:69:22:fe:bd:82:8e:23:71:d0:a3:b0:
2f:e7:99:54:0c:fb:85:9e:97:ee:69:94:27:ed:d8:28:d2:01:
59:ae:bb:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1bmuq9Pz1lpBeZltdnDBeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NDhiOWQ1Yjg1MTcxZjcyNjQyMzhiMjdhMDMwNmM1NmNm
YjZiNGYwHhcNMjUwOTEwMjEwMDUyWhcNMjUwOTExMjEwMDUyWjAzMTEwLwYDVQQD
EyhhZjM3MzdhMWU0ZGQxZjY1YjkwZGQ4Zjg2ZjQwNzQ2OWEyYmEyYjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Nkhrtq/uAHZVLPURxsDNUddH/96
XAlkRLKJBkBdNL5A7wzz1BgY0tYKbRCOPQefSzkyDeNP6zjFslgFNBp0HK9z2tnD
NXB0Jv8SKJpYHql+a62BrWnefKNqLc2U/T6ZO6Go8Ns4JaVHMZC2UPoGleHKTPL+
tGQ8ZJiyqjhx13l0lV77VvV8jmHVplf3HtyEtFrX0wpQjiGz8HfWLvx3aw29n0Pp
xSvR+8w/KaB5HJ3hRK2+MSEkjn6Y8UeLXv4RVGJoY3Px0CjtL1akizbsmEyKiw+I
5pYCWyKdKM/Vao8/XoTs/Q4XYKcr3gN3R0y/CekQ8eHgB8ZUAQ/17fvgDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK83N6Hk3R9luQ3Y+G9AdGmiuitmMB8GA1UdIwQY
MBaAFFRIudW4UXH3JkI4snoDBsVs+2tPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkVpNTFiaFJjZmNtUWppeWVnTUd4V3o3YTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi80NWRmNjMtOTVmMC00MjU0LThjOWIt
YjIyM2M3MmE1NTkzLzEvVkVpNTFiaFJjZmNtUWppeWVnTUd4V3o3YTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi80NWRmNjMtOTVmMC00MjU0LThjOWItYjIyM2M3MmE1NTkz
LzEvVkVpNTFiaFJjZmNtUWppeWVnTUd4V3o3YTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckhbpBiv
OpSLL7Js9ULmrMxlv29fEM076k3QUpD4tIT/3FoC6Z7tsTZ7omZCzZZDGLfPLspT
5O1YMflurOknr0oDJZewZssXZrCYPnOyINeV2JFjB0ldlwsQVcFlYssgbDXgwCS+
6e4LC1k3uEo8povbDa0W16r3yivTy7HOKmVdqvgYWhQditpRFF5EsJjP0vYrjxim
x+4KS/9xoCXChrHVhe8tQSc2aviE7Z9T8ctJUpFWgElTme49t01uY/zkd4KICQF6
yhG/CZXCYJO4Qy4Luq1QU6+MQ7Uq1ySGUWki/r2CjiNx0KOwL+eZVAz7hZ6X7mmU
J+3YKNIBWa67nA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 22:39:23 2025 by rpki-client