Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
File: VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft (raw, json)
Hash identifier: W9/Urp7DcluxH/1N9M3FaonplaAzrX6LzGOjIwFb6Ls=
Subject key identifier: 66:43:29:0D:6D:DC:55:98:2E:9A:AE:65:F2:59:6E:76:A7:F8:01:A7
Authority key identifier: 54:CE:24:45:A2:E8:87:43:18:BF:24:9B:73:A6:54:C9:90:91:9E:E0
Certificate issuer: /CN=54ce2445a2e8874318bf249b73a654c990919ee0
Certificate serial: 0199239FD14D14BD67E96BC77B6AE6622D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
Manifest number: 0E05
Signing time: Sun 07 Sep 2025 10:01:40 +0000
Manifest this update: Sun 07 Sep 2025 10:01:40 +0000
Manifest next update: Mon 08 Sep 2025 10:01:40 +0000
Files and hashes: 1: VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl (hash: k6D8B6mfmtor0f+uGV3skNmprHRsxdXHBaC304BKdOA=)
2: qCD8L1dMgJ9yzf77qP7Yswj5ta4.roa (hash: oyvr0Mb88tpow7HpmKv7H5W0zqdzX3mbbm1lwxbPABw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:d1:4d:14:bd:67:e9:6b:c7:7b:6a:e6:62:2d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ce2445a2e8874318bf249b73a654c990919ee0
Validity
Not Before: Sep 7 10:01:40 2025 GMT
Not After : Sep 8 10:01:40 2025 GMT
Subject: CN=6643290d6ddc55982e9aae65f2596e76a7f801a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:64:d4:69:05:be:13:bf:4a:1f:cb:7a:bc:9b:
fe:2a:5c:b6:bc:4e:37:49:a0:53:80:bd:62:a6:89:
73:c0:9b:98:8f:a4:ca:f7:03:d7:58:31:9d:28:4c:
dd:98:11:2e:2c:d2:ad:ae:aa:df:b1:5a:e8:c2:ad:
9d:a6:3e:74:cf:a1:11:b9:d3:1a:06:29:d4:13:d7:
03:bb:96:56:f4:98:8a:9b:c7:4d:52:ca:55:21:3e:
32:af:ec:6b:88:98:30:c2:72:0b:cf:67:2f:6b:b6:
e0:a1:c0:c2:80:ab:28:4c:c9:7d:2c:60:20:5a:2a:
82:3d:50:65:2e:58:12:a9:ca:d7:f9:9d:ba:2c:ce:
0d:6f:47:5e:50:da:3d:03:c0:f0:37:0b:8a:ad:c4:
4a:11:1d:22:72:c4:9b:cd:a9:84:47:f3:ac:36:b7:
15:87:08:ed:a8:ed:67:0b:2d:50:f7:a2:3c:e1:c7:
1c:cb:25:d2:55:db:80:5b:8d:53:60:19:dc:74:8d:
8a:56:e3:3f:2d:61:31:9e:35:2e:ae:e4:30:1a:68:
74:41:da:ea:89:da:6e:41:ec:b0:17:65:f1:93:ad:
87:df:85:ac:2a:ef:cd:d7:55:6c:c7:f9:e6:fe:eb:
32:4f:5d:03:47:2a:e0:f3:ba:7f:58:a3:31:b2:39:
86:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:43:29:0D:6D:DC:55:98:2E:9A:AE:65:F2:59:6E:76:A7:F8:01:A7
X509v3 Authority Key Identifier:
keyid:54:CE:24:45:A2:E8:87:43:18:BF:24:9B:73:A6:54:C9:90:91:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6f:0f:0c:92:46:f1:a3:92:55:ec:1d:8a:f7:dd:d7:1d:72:
9a:53:98:73:f7:e4:f0:54:6a:ac:71:49:74:49:6d:d6:09:05:
66:eb:1b:96:80:be:d5:70:bb:3d:01:c2:31:92:4b:a5:26:6a:
f6:cc:71:bb:ca:a8:d4:ac:73:29:11:c4:8f:40:98:02:1b:9d:
21:84:fa:fd:2f:f0:a5:51:07:b1:64:fe:40:5c:de:f3:15:08:
d1:a7:04:3f:4c:04:f9:6b:02:43:d3:cd:51:4f:ef:bd:a6:68:
33:24:02:41:68:fe:64:6d:06:81:61:cb:ad:54:37:b7:77:7e:
fa:02:7d:fb:45:b3:40:15:73:12:4a:83:83:d0:ca:1a:ec:4d:
7d:4e:ab:81:30:2a:c4:02:36:23:ee:31:e6:c8:48:51:ae:5d:
36:95:3e:c6:8f:41:2d:0a:52:9f:98:12:9c:0a:aa:bf:bf:97:
dc:af:c1:65:a3:9b:b9:ab:3c:97:aa:4d:dc:12:05:80:a7:fd:
e0:9b:72:90:44:79:0a:75:cb:21:fb:ba:ef:01:35:26:63:1b:
49:26:aa:6a:ca:75:72:7d:97:65:4b:b6:f5:e1:0f:50:c5:bf:
9d:26:bb:19:92:a4:c4:8e:b4:c6:1e:df:b7:00:3f:d3:d1:e2:
0c:b7:83:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn9FNFL1n6WvHe2rmYi2fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Y2UyNDQ1YTJlODg3NDMxOGJmMjQ5YjczYTY1NGM5OTA5
MTllZTAwHhcNMjUwOTA3MTAwMTQwWhcNMjUwOTA4MTAwMTQwWjAzMTEwLwYDVQQD
Eyg2NjQzMjkwZDZkZGM1NTk4MmU5YWFlNjVmMjU5NmU3NmE3ZjgwMWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWTUaQW+E79KH8t6vJv+Kly2vE43
SaBTgL1ipolzwJuYj6TK9wPXWDGdKEzdmBEuLNKtrqrfsVrowq2dpj50z6ERudMa
BinUE9cDu5ZW9JiKm8dNUspVIT4yr+xriJgwwnILz2cva7bgocDCgKsoTMl9LGAg
WiqCPVBlLlgSqcrX+Z26LM4Nb0deUNo9A8DwNwuKrcRKER0icsSbzamER/OsNrcV
hwjtqO1nCy1Q96I84cccyyXSVduAW41TYBncdI2KVuM/LWExnjUuruQwGmh0Qdrq
idpuQeywF2Xxk62H34WsKu/N11Vsx/nm/usyT10DRyrg87p/WKMxsjmG+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZDKQ1t3FWYLpquZfJZbnan+AGnMB8GA1UdIwQY
MBaAFFTOJEWi6IdDGL8km3OmVMmQkZ7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk00a1JhTG9oME1ZdnlTYmM2WlV5WkNSbnVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iZDc3ODAtZWI1My00YzFkLWFjY2Ut
Y2ZlN2UzZjlmOTJkLzEvVk00a1JhTG9oME1ZdnlTYmM2WlV5WkNSbnVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iZDc3ODAtZWI1My00YzFkLWFjY2UtY2ZlN2UzZjlmOTJk
LzEvVk00a1JhTG9oME1ZdnlTYmM2WlV5WkNSbnVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD28PDJJG
8aOSVewdivfd1x1ymlOYc/fk8FRqrHFJdElt1gkFZusbloC+1XC7PQHCMZJLpSZq
9sxxu8qo1KxzKRHEj0CYAhudIYT6/S/wpVEHsWT+QFze8xUI0acEP0wE+WsCQ9PN
UU/vvaZoMyQCQWj+ZG0GgWHLrVQ3t3d++gJ9+0WzQBVzEkqDg9DKGuxNfU6rgTAq
xAI2I+4x5shIUa5dNpU+xo9BLQpSn5gSnAqqv7+X3K/BZaObuas8l6pN3BIFgKf9
4JtykER5CnXLIfu67wE1JmMbSSaqasp1cn2XZUu29eEPUMW/nSa7GZKkxI60xh7f
twA/09HiDLeDMw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:49:38 2025 by rpki-client