Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
File: VwzdFzLlZDoV7tnud-E5S4AkJUg.mft (raw, json)
Hash identifier: Z60OcaScVYsmFC1yFmQmHviUB52Mi04dJPu9gwOB2qg=
Subject key identifier: F5:B6:BD:87:03:49:35:A7:EF:8F:79:49:5C:B4:EE:7D:82:18:DA:E0
Authority key identifier: 57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48
Certificate issuer: /CN=570cdd1732e5643a15eed9ee77e1394b80242548
Certificate serial: 019856EBA75A1E3CACA14D55CEA2B5A89945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
Manifest number: 0AFE
Signing time: Tue 29 Jul 2025 16:02:20 +0000
Manifest this update: Tue 29 Jul 2025 16:02:20 +0000
Manifest next update: Wed 30 Jul 2025 16:02:20 +0000
Files and hashes: 1: VwzdFzLlZDoV7tnud-E5S4AkJUg.crl (hash: z6CcpWqBBMMb9UC5emlmFFozsizx1LFX9BS0mU/Mg8A=)
2: t3EOhCqhRV2WckdeZdMmZde2sco.roa (hash: 9YigDUievW+JnsoS3fARTo39jCVhAjMEThq2WY+OCkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:eb:a7:5a:1e:3c:ac:a1:4d:55:ce:a2:b5:a8:99:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570cdd1732e5643a15eed9ee77e1394b80242548
Validity
Not Before: Jul 29 16:02:20 2025 GMT
Not After : Jul 30 16:02:20 2025 GMT
Subject: CN=f5b6bd87034935a7ef8f79495cb4ee7d8218dae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ed:99:40:4e:ca:e4:d1:10:37:06:9b:f3:2b:
f6:ff:bf:2f:a0:cf:f7:0d:b5:77:f8:e0:a9:c0:2c:
6d:3b:f1:7a:82:5b:d8:d6:3b:f0:ad:34:aa:c0:ef:
66:94:20:d7:eb:b1:e8:0b:6e:7f:e2:da:58:d1:fa:
d0:59:47:9b:0c:b5:ac:3f:42:e8:e1:c6:4c:19:8b:
97:23:20:a3:af:30:67:87:0c:ac:1f:6c:a0:be:4f:
0c:e5:a0:ec:ab:66:40:dd:16:86:bb:22:99:59:c7:
56:0d:c1:ea:f9:8a:f9:c8:82:4d:27:d3:cb:c5:1f:
c1:97:e1:fd:f0:64:b8:89:12:bd:c3:69:60:89:7b:
c7:13:1b:2f:06:4d:21:37:35:18:d7:5c:93:60:e9:
b6:2d:25:19:4c:f0:1b:06:9f:e4:27:32:34:a8:e0:
65:ea:9f:14:08:76:9a:bd:ea:8a:a3:01:f6:da:67:
5c:f2:e7:b5:63:aa:6c:82:84:38:e2:5f:b2:7f:eb:
28:b1:fe:e0:53:63:3a:60:df:e4:60:23:26:22:2a:
d3:70:09:da:07:06:a9:ac:c4:9f:dd:35:58:94:04:
61:1e:90:d3:1f:c3:99:eb:6c:1c:05:87:05:b7:af:
98:09:78:b6:f1:8b:1d:bd:69:e5:84:2b:3b:2a:e3:
47:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B6:BD:87:03:49:35:A7:EF:8F:79:49:5C:B4:EE:7D:82:18:DA:E0
X509v3 Authority Key Identifier:
keyid:57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3f:5d:b4:4b:2d:23:65:ad:ba:55:83:90:8e:d5:33:a4:e6:
95:fe:06:49:0b:a7:3f:37:25:de:e0:47:45:7a:9e:cf:e0:05:
27:57:b8:1d:aa:f3:11:98:a4:c9:b5:56:7f:08:8d:e5:93:7b:
6c:bd:d0:16:a5:11:e0:b0:d4:38:cd:b8:60:02:0e:14:26:2c:
1d:d6:59:79:37:bd:c0:d1:e9:44:6c:bb:c7:33:8c:2c:a2:dd:
8a:0c:e1:de:63:74:38:20:37:cd:81:04:64:e6:ec:15:26:5b:
02:35:b2:ed:ed:43:0d:55:75:1b:09:cf:c9:b5:b7:41:ec:e7:
f6:28:78:c8:f1:c7:aa:24:b6:eb:49:b4:41:7b:ef:8e:e9:6e:
71:2f:cb:7f:ce:24:84:a9:aa:df:87:76:8e:8d:da:1f:f5:bb:
1a:bb:e9:28:df:2d:d7:07:7c:64:14:d4:59:2d:fb:0b:7e:0a:
4e:11:fa:e3:99:c0:e8:40:b6:76:e1:57:c4:f8:de:10:05:3f:
9f:95:44:cc:6f:7a:bc:16:72:21:5f:8b:c7:f2:13:bd:a6:63:
a7:52:06:cb:5a:68:4e:da:aa:3b:cd:b7:14:89:4e:53:66:cf:
13:73:68:dd:c0:e8:17:fa:31:94:78:b5:1f:d2:6e:8d:a0:a7:
d4:11:30:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhW66daHjysoU1VzqK1qJlFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MGNkZDE3MzJlNTY0M2ExNWVlZDllZTc3ZTEzOTRiODAy
NDI1NDgwHhcNMjUwNzI5MTYwMjIwWhcNMjUwNzMwMTYwMjIwWjAzMTEwLwYDVQQD
EyhmNWI2YmQ4NzAzNDkzNWE3ZWY4Zjc5NDk1Y2I0ZWU3ZDgyMThkYWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O2ZQE7K5NEQNwab8yv2/78voM/3
DbV3+OCpwCxtO/F6glvY1jvwrTSqwO9mlCDX67HoC25/4tpY0frQWUebDLWsP0Lo
4cZMGYuXIyCjrzBnhwysH2ygvk8M5aDsq2ZA3RaGuyKZWcdWDcHq+Yr5yIJNJ9PL
xR/Bl+H98GS4iRK9w2lgiXvHExsvBk0hNzUY11yTYOm2LSUZTPAbBp/kJzI0qOBl
6p8UCHaaveqKowH22mdc8ue1Y6psgoQ44l+yf+sosf7gU2M6YN/kYCMmIirTcAna
BwaprMSf3TVYlARhHpDTH8OZ62wcBYcFt6+YCXi28YsdvWnlhCs7KuNHdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPW2vYcDSTWn7495SVy07n2CGNrgMB8GA1UdIwQY
MBaAFFcM3Rcy5WQ6Fe7Z7nfhOUuAJCVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnd6ZEZ6TGxaRG9WN3RudWQtRTVTNEFrSlVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82NGQzMTMtNjQ0Yy00YjlmLTgxMWEt
MzhhNWM5MTA1Y2M1LzEvVnd6ZEZ6TGxaRG9WN3RudWQtRTVTNEFrSlVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My82NGQzMTMtNjQ0Yy00YjlmLTgxMWEtMzhhNWM5MTA1Y2M1
LzEvVnd6ZEZ6TGxaRG9WN3RudWQtRTVTNEFrSlVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKD9dtEst
I2WtulWDkI7VM6Tmlf4GSQunPzcl3uBHRXqez+AFJ1e4HarzEZikybVWfwiN5ZN7
bL3QFqUR4LDUOM24YAIOFCYsHdZZeTe9wNHpRGy7xzOMLKLdigzh3mN0OCA3zYEE
ZObsFSZbAjWy7e1DDVV1GwnPybW3Qezn9ih4yPHHqiS260m0QXvvjulucS/Lf84k
hKmq34d2jo3aH/W7GrvpKN8t1wd8ZBTUWS37C34KThH645nA6EC2duFXxPjeEAU/
n5VEzG96vBZyIV+Lx/ITvaZjp1IGy1poTtqqO823FIlOU2bPE3No3cDoF/oxlHi1
H9JujaCn1BEwBQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 23:15:09 2025 by rpki-client