Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
File: vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft (raw, json)
Hash identifier: 9F9RUA9jvRo9TFPtQEx9/gquNLu99AywUERSjYBa5aY=
Subject key identifier: E0:6F:FC:4B:9C:88:8C:B0:C2:3A:B1:47:24:5C:DC:56:D7:FA:A8:5C
Authority key identifier: BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
Certificate issuer: /CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Certificate serial: 019923A02D6B613A7BC59E7BB823CFC4FFB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
Manifest number: 0CA3
Signing time: Sun 07 Sep 2025 10:02:03 +0000
Manifest this update: Sun 07 Sep 2025 10:02:03 +0000
Manifest next update: Mon 08 Sep 2025 10:02:03 +0000
Files and hashes: 1: 5xqkx7rxr0A4ZoZWTCOMeWbUwt0.roa (hash: 4Hck3JY+pm1ENmjLoSNCLwI2ygQA04QrM7UO64TPQ/E=)
2: Tf-7kei6W8Gb1yTlztC-z7hqkGM.roa (hash: A3Jg7NsFsBNEFPdV1BOzgwIAFoCzktMr6ou5P5ENzQU=)
3: vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl (hash: ldw3wen9NzqexvKRQF3ihA1y3bGXZMsIHj559WaYQhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:2d:6b:61:3a:7b:c5:9e:7b:b8:23:cf:c4:ff:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Validity
Not Before: Sep 7 10:02:03 2025 GMT
Not After : Sep 8 10:02:03 2025 GMT
Subject: CN=e06ffc4b9c888cb0c23ab147245cdc56d7faa85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:23:7c:9d:8e:0b:fb:94:0c:56:df:90:a2:b7:
1a:ea:b1:0a:3f:3f:3c:f8:a7:b5:45:9a:6b:26:da:
91:ec:a6:f1:ba:15:03:43:94:17:52:1d:41:52:a1:
37:94:a6:2e:97:76:bc:49:56:31:19:fc:5f:21:23:
fe:92:ea:9f:fe:bc:80:59:11:6e:09:00:a2:79:78:
ea:38:e2:7b:ca:1f:22:eb:32:b0:fd:d9:4d:2b:1d:
4c:bc:96:3f:57:25:96:5c:de:db:05:e3:c4:6a:b2:
81:79:69:cc:15:02:4b:ca:07:c2:1b:56:22:9b:58:
59:4f:6c:29:a4:68:fe:2c:0d:6e:8a:62:65:a0:2a:
17:45:a3:d1:5c:a9:50:b4:19:86:86:be:1f:c2:75:
e5:f0:80:ff:bf:07:6b:91:48:f7:06:06:1a:46:af:
95:c7:97:1c:f0:84:5d:03:b6:23:4c:69:66:44:db:
50:fe:3b:7d:84:a1:7d:bc:7b:d2:37:f0:30:fb:e9:
d5:cc:f8:98:77:aa:d4:a2:cd:c3:47:73:d0:e3:6c:
be:db:08:30:15:18:53:9c:0c:23:95:38:09:67:f3:
a4:7a:09:e9:f5:d0:25:64:3b:1e:0e:d3:f3:c2:ae:
0c:a2:8e:a2:e8:85:61:c0:5a:6a:66:43:78:99:1b:
78:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6F:FC:4B:9C:88:8C:B0:C2:3A:B1:47:24:5C:DC:56:D7:FA:A8:5C
X509v3 Authority Key Identifier:
keyid:BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:02:cf:66:9a:5a:ad:50:3a:60:0d:e0:40:8e:8d:f0:92:25:
86:ef:0a:7f:7d:de:e7:d2:8b:4e:87:26:b2:2f:b4:6c:8e:94:
a6:06:2d:e2:b7:1a:7b:ff:7e:8b:e0:7d:60:d7:96:5b:9f:40:
b0:02:a7:1a:cd:93:47:58:ca:4b:ec:2c:78:66:08:e9:77:ce:
6c:0a:0e:b4:a9:54:48:41:15:ed:0b:36:90:01:71:e4:a5:b3:
da:ea:53:73:c1:e9:e1:49:31:8e:c9:0e:60:21:10:26:b9:d1:
dc:3d:57:1f:37:31:62:2e:b7:bf:4e:a2:a6:b3:cc:1f:54:48:
82:a5:25:c9:76:cb:2b:d1:b5:5a:8e:4b:ab:58:91:94:ac:56:
d7:df:d9:c7:f6:83:b1:c4:02:6d:86:1e:3d:09:65:05:f1:82:
a6:67:8e:da:46:b2:34:c2:20:3f:af:6e:a3:49:23:46:cf:3d:
2b:27:bc:22:44:c2:58:71:9c:65:a4:90:1d:6e:b7:d5:8c:c8:
a9:f2:57:0c:d5:99:eb:ec:cf:c0:be:f0:ec:d0:fa:44:98:28:
b0:98:a8:a1:ed:d9:91:17:ee:ac:73:0d:c7:6e:e6:8c:3e:67:
e5:39:15:72:ba:65:b2:7c:f4:02:83:f3:08:f0:1c:f9:65:13:
be:b7:90:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoC1rYTp7xZ57uCPPxP+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNjYzYzZlNzc5ZGFlOWJkYjA0Njg1NGYxODlmZThjNWMz
YzMyZTEwHhcNMjUwOTA3MTAwMjAzWhcNMjUwOTA4MTAwMjAzWjAzMTEwLwYDVQQD
EyhlMDZmZmM0YjljODg4Y2IwYzIzYWIxNDcyNDVjZGM1NmQ3ZmFhODVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CN8nY4L+5QMVt+Qorca6rEKPz88
+Ke1RZprJtqR7KbxuhUDQ5QXUh1BUqE3lKYul3a8SVYxGfxfISP+kuqf/ryAWRFu
CQCieXjqOOJ7yh8i6zKw/dlNKx1MvJY/VyWWXN7bBePEarKBeWnMFQJLygfCG1Yi
m1hZT2wppGj+LA1uimJloCoXRaPRXKlQtBmGhr4fwnXl8ID/vwdrkUj3BgYaRq+V
x5cc8IRdA7YjTGlmRNtQ/jt9hKF9vHvSN/Aw++nVzPiYd6rUos3DR3PQ42y+2wgw
FRhTnAwjlTgJZ/Okegnp9dAlZDseDtPzwq4Moo6i6IVhwFpqZkN4mRt4GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBv/EuciIywwjqxRyRc3FbX+qhcMB8GA1UdIwQY
MBaAFLxmPG53na6b2wRoVPGJ/oxcPDLhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkdZOGJuZWRycHZiQkdoVThZbi1qRnc4TXVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83YThmM2YtMzA0Yy00YTI2LWFlY2Et
MThiZGZlOGNjMGNkLzEvdkdZOGJuZWRycHZiQkdoVThZbi1qRnc4TXVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83YThmM2YtMzA0Yy00YTI2LWFlY2EtMThiZGZlOGNjMGNk
LzEvdkdZOGJuZWRycHZiQkdoVThZbi1qRnc4TXVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADALPZppa
rVA6YA3gQI6N8JIlhu8Kf33e59KLTocmsi+0bI6UpgYt4rcae/9+i+B9YNeWW59A
sAKnGs2TR1jKS+wseGYI6XfObAoOtKlUSEEV7Qs2kAFx5KWz2upTc8Hp4UkxjskO
YCEQJrnR3D1XHzcxYi63v06iprPMH1RIgqUlyXbLK9G1Wo5Lq1iRlKxW19/Zx/aD
scQCbYYePQllBfGCpmeO2kayNMIgP69uo0kjRs89Kye8IkTCWHGcZaSQHW631YzI
qfJXDNWZ6+zPwL7w7ND6RJgosJiooe3ZkRfurHMNx27mjD5n5TkVcrplsnz0AoPz
CPAc+WUTvreQIg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:46 2025 by rpki-client