Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
File: vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft (raw, json)
Hash identifier: vaFF2cIKrpd41R1oPa25IJrtJNNz3TgsAdDAAUBiaY0=
Subject key identifier: 6A:6F:16:30:B8:57:D3:3E:71:89:91:37:EC:17:41:50:0F:5A:6A:11
Authority key identifier: BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E
Certificate issuer: /CN=bd85314d13c782c052dd022b3e4e20142b64170e
Certificate serial: 019922C2F17F479465C0F4ECC01D1724475E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
Manifest number: 1204
Signing time: Sun 07 Sep 2025 06:00:24 +0000
Manifest this update: Sun 07 Sep 2025 06:00:24 +0000
Manifest next update: Mon 08 Sep 2025 06:00:24 +0000
Files and hashes: 1: 87DcvIoV9C57hb7DwzS0oT0QBdM.roa (hash: 1fwwbxC7tvmVRypNN1d4FXoCK3/5oiWQOQyukuAKNSE=)
2: vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl (hash: Q7Vdjb9Vlkibv1Slmj/GT8iSQKdxC7QeDbO/uJHN5r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c2:f1:7f:47:94:65:c0:f4:ec:c0:1d:17:24:47:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd85314d13c782c052dd022b3e4e20142b64170e
Validity
Not Before: Sep 7 06:00:24 2025 GMT
Not After : Sep 8 06:00:24 2025 GMT
Subject: CN=6a6f1630b857d33e71899137ec1741500f5a6a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3a:13:24:e5:c2:ca:33:31:9a:4a:39:31:73:
8c:80:64:ec:aa:fb:9e:8f:55:c4:98:75:97:5b:3b:
a5:23:be:94:53:f2:d3:49:41:8a:36:b4:9d:40:94:
ca:da:f1:7f:81:6c:5b:d6:c7:20:66:a4:23:56:a0:
9c:66:c8:3a:16:a1:a9:5b:da:77:0f:4b:0e:3f:64:
db:f1:bc:ec:8a:71:08:45:56:4b:4d:fd:78:02:be:
34:3a:e4:66:7f:da:57:f0:ba:81:84:6c:4f:94:34:
4b:e1:98:5f:ae:dd:1a:26:25:30:04:79:8d:d7:cc:
39:1d:3a:ce:be:c3:95:36:fa:96:0b:df:c7:c6:b1:
87:41:f4:29:2d:ed:3d:b9:a0:2c:71:d8:b0:68:75:
64:84:bc:4c:76:1a:3a:53:d9:1b:c2:f9:16:1d:51:
24:d5:5e:fc:c2:16:17:b0:b9:f1:b7:c4:58:9b:52:
62:a3:c4:d6:6e:d8:3f:00:09:cc:85:5e:d9:08:49:
8a:06:d9:ef:f2:43:27:2a:3a:33:15:42:b8:90:97:
fb:80:cc:87:e9:94:bf:e6:78:b5:39:f7:fa:b3:6c:
78:f1:85:41:c2:9b:4b:9b:a7:05:92:39:f6:a4:51:
58:18:78:c7:fc:ee:ee:20:46:c4:2b:3f:96:8f:56:
4e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6F:16:30:B8:57:D3:3E:71:89:91:37:EC:17:41:50:0F:5A:6A:11
X509v3 Authority Key Identifier:
keyid:BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3e:2c:19:ed:85:56:bd:5b:7a:24:c2:44:80:12:64:a4:e2:
58:29:03:f0:d4:64:5d:05:a4:b8:fd:7d:04:e0:e0:5c:c6:9f:
55:f1:45:c6:bb:1b:7a:1e:15:bd:b9:a1:51:60:24:2b:79:99:
73:d4:ef:da:f1:2e:99:d9:0d:7d:1d:fa:e5:b1:97:04:c3:54:
66:fc:8b:28:8e:08:33:88:48:86:c0:70:7a:b7:a4:77:77:19:
4d:d3:20:32:30:b1:24:ce:dc:d6:28:bf:ae:f1:63:cd:56:33:
e3:db:e9:dc:d5:a2:22:51:9d:76:32:0c:cd:0d:f8:b9:07:e4:
6f:46:56:df:09:8d:21:fe:9f:82:ae:72:f8:02:19:aa:f1:04:
20:0f:a1:39:61:d6:b2:dc:c8:0f:23:55:97:87:6d:fd:e6:7a:
8c:81:27:0a:ae:64:ed:82:d9:11:1c:3b:f2:07:c9:d1:89:82:
f9:68:1f:8a:73:e0:aa:92:12:50:da:d6:49:cd:ef:59:7a:4d:
4b:5e:c3:ea:a3:aa:34:a8:19:9b:76:dc:eb:1b:96:db:74:47:
cb:e6:fc:b3:68:fb:3a:96:76:31:87:c6:c2:e7:83:2c:1d:dd:
17:6d:df:b8:fa:fe:83:86:34:29:6c:5b:e2:cd:84:f7:d6:a1:
c9:08:74:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiwvF/R5RlwPTswB0XJEdeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkODUzMTRkMTNjNzgyYzA1MmRkMDIyYjNlNGUyMDE0MmI2
NDE3MGUwHhcNMjUwOTA3MDYwMDI0WhcNMjUwOTA4MDYwMDI0WjAzMTEwLwYDVQQD
Eyg2YTZmMTYzMGI4NTdkMzNlNzE4OTkxMzdlYzE3NDE1MDBmNWE2YTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDoTJOXCyjMxmko5MXOMgGTsqvue
j1XEmHWXWzulI76UU/LTSUGKNrSdQJTK2vF/gWxb1scgZqQjVqCcZsg6FqGpW9p3
D0sOP2Tb8bzsinEIRVZLTf14Ar40OuRmf9pX8LqBhGxPlDRL4Zhfrt0aJiUwBHmN
18w5HTrOvsOVNvqWC9/HxrGHQfQpLe09uaAscdiwaHVkhLxMdho6U9kbwvkWHVEk
1V78whYXsLnxt8RYm1Jio8TWbtg/AAnMhV7ZCEmKBtnv8kMnKjozFUK4kJf7gMyH
6ZS/5ni1Off6s2x48YVBwptLm6cFkjn2pFFYGHjH/O7uIEbEKz+Wj1ZOFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpvFjC4V9M+cYmRN+wXQVAPWmoRMB8GA1UdIwQY
MBaAFL2FMU0Tx4LAUt0CKz5OIBQrZBcOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdllVeFRSUEhnc0JTM1FJclBrNGdGQ3RrRnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wNTJkMzgtNjA4MC00ZTc5LThhNGIt
NjI1NTE1ZmY1OTQ0LzEvdllVeFRSUEhnc0JTM1FJclBrNGdGQ3RrRnc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8wNTJkMzgtNjA4MC00ZTc5LThhNGItNjI1NTE1ZmY1OTQ0
LzEvdllVeFRSUEhnc0JTM1FJclBrNGdGQ3RrRnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACz4sGe2F
Vr1beiTCRIASZKTiWCkD8NRkXQWkuP19BODgXMafVfFFxrsbeh4VvbmhUWAkK3mZ
c9Tv2vEumdkNfR365bGXBMNUZvyLKI4IM4hIhsBwerekd3cZTdMgMjCxJM7c1ii/
rvFjzVYz49vp3NWiIlGddjIMzQ34uQfkb0ZW3wmNIf6fgq5y+AIZqvEEIA+hOWHW
stzIDyNVl4dt/eZ6jIEnCq5k7YLZERw78gfJ0YmC+WgfinPgqpISUNrWSc3vWXpN
S17D6qOqNKgZm3bc6xuW23RHy+b8s2j7OpZ2MYfGwueDLB3dF23fuPr+g4Y0KWxb
4s2E99ahyQh0/Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:50 2025 by rpki-client