Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
File: vJjaCfCkWkCPW38brm2R4zM9VzI.mft (raw, json)
Hash identifier: vlgvdjJLihPowfyStEFVGYFkXw08VgRiaB/WkdHe/WI=
Subject key identifier: 6C:43:53:BA:6D:2E:A6:1B:75:28:F7:9B:66:6E:3F:D4:11:00:FA:4D
Authority key identifier: BC:98:DA:09:F0:A4:5A:40:8F:5B:7F:1B:AE:6D:91:E3:33:3D:57:32
Certificate issuer: /CN=bc98da09f0a45a408f5b7f1bae6d91e3333d5732
Certificate serial: 019864DD45B293757A34CCFFED5A17C3F21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
Manifest number: 160E
Signing time: Fri 01 Aug 2025 09:01:19 +0000
Manifest this update: Fri 01 Aug 2025 09:01:19 +0000
Manifest next update: Sat 02 Aug 2025 09:01:19 +0000
Files and hashes: 1: fxhyywtkkeQkBb1LWBBLmBYmdhw.roa (hash: JEDR1+B65jcWiXG9Txje4CaMRNTaWS3SE4CY6nIrNeE=)
2: vJjaCfCkWkCPW38brm2R4zM9VzI.crl (hash: r/DyQDa2IUcGlrby4GYHlCkW1bTOeYBZZmtpcC7zECU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 09:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:64:dd:45:b2:93:75:7a:34:cc:ff:ed:5a:17:c3:f2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc98da09f0a45a408f5b7f1bae6d91e3333d5732
Validity
Not Before: Aug 1 09:01:19 2025 GMT
Not After : Aug 2 09:01:19 2025 GMT
Subject: CN=6c4353ba6d2ea61b7528f79b666e3fd41100fa4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2a:22:19:ca:50:93:08:a2:45:5d:50:a5:66:
a1:c3:9d:b6:48:38:4f:e1:3a:9d:39:36:e4:03:be:
6c:f7:48:8b:a7:37:95:37:14:2d:b3:24:0c:6d:9b:
db:f0:f7:3a:6c:2f:95:a8:f0:4b:6e:71:59:bc:58:
86:e7:13:9b:8b:f8:21:e3:0a:cc:6b:d6:3a:eb:89:
15:56:1b:bb:4d:d4:b1:59:b4:48:09:a6:4e:23:9f:
0b:2e:2e:c5:17:d4:a4:c9:90:32:1a:5b:67:92:2d:
f2:72:8b:59:5e:ca:09:07:76:3a:26:f6:15:48:1b:
6d:26:1c:48:e3:83:ea:af:d3:5d:57:c8:9f:d0:40:
06:55:d6:d1:3f:5a:ab:c2:81:8c:e3:52:db:fe:00:
73:df:0f:99:e3:c0:eb:c4:88:d4:ef:40:6b:97:00:
31:00:f2:bd:de:c9:b6:c4:96:3b:62:7d:78:2f:d5:
7e:75:4d:c7:f0:be:42:49:f9:55:2c:9c:1e:0e:ea:
41:c4:50:f5:87:bb:36:a9:b7:53:51:29:fa:97:be:
7d:aa:77:ca:72:e1:7a:d5:85:e7:9a:23:a4:33:b9:
89:87:81:7b:28:53:3f:4c:96:9a:31:61:ed:c3:33:
00:ac:f0:4e:cc:6f:4b:16:01:03:79:1b:cc:d7:f1:
4d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:43:53:BA:6D:2E:A6:1B:75:28:F7:9B:66:6E:3F:D4:11:00:FA:4D
X509v3 Authority Key Identifier:
keyid:BC:98:DA:09:F0:A4:5A:40:8F:5B:7F:1B:AE:6D:91:E3:33:3D:57:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:55:aa:96:5c:e4:73:86:01:e1:3d:fb:5e:f7:1d:6b:8c:26:
b9:1b:c4:80:8f:3f:99:b1:c2:3e:70:2f:a9:2b:11:bb:7e:c6:
89:22:04:b1:3d:53:77:e0:c6:54:92:07:d7:cf:46:f1:ac:2b:
e8:62:9b:08:d1:35:8e:2b:81:84:57:03:1b:ab:0f:c9:7e:60:
01:52:fd:92:47:69:ca:9a:e2:57:a2:67:62:86:6a:d4:17:0a:
d7:21:38:c1:6e:31:ad:24:df:d4:75:5b:2d:77:b3:d1:13:27:
74:2e:cd:46:4e:ea:ff:32:a9:32:dc:75:11:3e:64:8b:56:95:
50:1e:de:e6:b6:2a:00:4f:b1:82:d0:09:05:23:b5:5c:88:fb:
f0:7d:06:a2:3a:23:e3:68:01:7f:1d:db:6b:45:60:1f:08:9a:
bf:0a:b5:8e:e4:94:82:5c:73:05:e4:ee:0c:6b:75:6b:77:2c:
54:2f:49:f7:ee:26:85:ae:db:62:ed:c4:51:13:bc:9c:2c:34:
81:7b:5c:61:2e:fb:b5:10:00:3e:72:57:91:ac:e8:00:e6:cb:
54:c1:26:4f:31:c5:8c:0a:01:25:0a:b8:2d:99:73:f5:61:93:
86:18:cd:c9:f4:19:b9:bf:cb:67:98:8a:eb:74:b7:c6:80:92:
5a:bc:2b:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhk3UWyk3V6NMz/7VoXw/IfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOThkYTA5ZjBhNDVhNDA4ZjViN2YxYmFlNmQ5MWUzMzMz
ZDU3MzIwHhcNMjUwODAxMDkwMTE5WhcNMjUwODAyMDkwMTE5WjAzMTEwLwYDVQQD
Eyg2YzQzNTNiYTZkMmVhNjFiNzUyOGY3OWI2NjZlM2ZkNDExMDBmYTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxioiGcpQkwiiRV1QpWahw522SDhP
4TqdOTbkA75s90iLpzeVNxQtsyQMbZvb8Pc6bC+VqPBLbnFZvFiG5xObi/gh4wrM
a9Y664kVVhu7TdSxWbRICaZOI58LLi7FF9SkyZAyGltnki3ycotZXsoJB3Y6JvYV
SBttJhxI44Pqr9NdV8if0EAGVdbRP1qrwoGM41Lb/gBz3w+Z48DrxIjU70BrlwAx
APK93sm2xJY7Yn14L9V+dU3H8L5CSflVLJweDupBxFD1h7s2qbdTUSn6l759qnfK
cuF61YXnmiOkM7mJh4F7KFM/TJaaMWHtwzMArPBOzG9LFgEDeRvM1/FNuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxDU7ptLqYbdSj3m2ZuP9QRAPpNMB8GA1UdIwQY
MBaAFLyY2gnwpFpAj1t/G65tkeMzPVcyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkpqYUNmQ2tXa0NQVzM4YnJtMlI0ek05VnpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9mMmNkNWUtZmQxYy00YjQ3LWFhNjUt
NWU4NjExNjU4ODRjLzEvdkpqYUNmQ2tXa0NQVzM4YnJtMlI0ek05VnpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9mMmNkNWUtZmQxYy00YjQ3LWFhNjUtNWU4NjExNjU4ODRj
LzEvdkpqYUNmQ2tXa0NQVzM4YnJtMlI0ek05VnpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVWqllzk
c4YB4T37Xvcda4wmuRvEgI8/mbHCPnAvqSsRu37GiSIEsT1Td+DGVJIH189G8awr
6GKbCNE1jiuBhFcDG6sPyX5gAVL9kkdpypriV6JnYoZq1BcK1yE4wW4xrSTf1HVb
LXez0RMndC7NRk7q/zKpMtx1ET5ki1aVUB7e5rYqAE+xgtAJBSO1XIj78H0Gojoj
42gBfx3ba0VgHwiavwq1juSUglxzBeTuDGt1a3csVC9J9+4mha7bYu3EURO8nCw0
gXtcYS77tRAAPnJXkazoAObLVMEmTzHFjAoBJQq4LZlz9WGThhjNyfQZub/LZ5iK
63S3xoCSWrwrmg==
-----END CERTIFICATE-----
Generated at Fri Aug 1 18:09:48 2025 by rpki-client