Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
File: VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft (raw, json)
Hash identifier: 5timYnfzdtDaE0PmiyShtF3ZAhQne8ohHEwKUmdE5MM=
Subject key identifier: 8A:69:CA:9E:8D:1C:15:95:FC:EA:8E:6E:2B:6E:27:AD:21:E1:0C:A1
Authority key identifier: 56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
Certificate issuer: /CN=567190854786a16afa6b0ec78dfb0620abaacfef
Certificate serial: 019881D5119819DF5068B43BF3AF8DB76171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
Manifest number: 1624
Signing time: Thu 07 Aug 2025 00:01:21 +0000
Manifest this update: Thu 07 Aug 2025 00:01:21 +0000
Manifest next update: Fri 08 Aug 2025 00:01:21 +0000
Files and hashes: 1: GQ1DSO1of_qyrqxkPQTC0ENKnfg.roa (hash: nTd0zjLE6XtOMPZyttCDWktzUnkCfLfuxFOPmZBOHEs=)
2: VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl (hash: XLuLIKwhpeOtCwf54/Qd4thuKOWnkYv5gLL2jYBnrJA=)
3: qdba9XlB-cPjFIeLPK89fH4z7YE.roa (hash: 1JK31mC2SxxDKOuDPCP+7Ar2oTz/PPCsc7D4ztv27uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:11:98:19:df:50:68:b4:3b:f3:af:8d:b7:61:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567190854786a16afa6b0ec78dfb0620abaacfef
Validity
Not Before: Aug 7 00:01:21 2025 GMT
Not After : Aug 8 00:01:21 2025 GMT
Subject: CN=8a69ca9e8d1c1595fcea8e6e2b6e27ad21e10ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:b2:1b:cf:3e:33:4f:20:58:3b:66:0f:b1:
39:41:18:ee:5c:3a:64:fc:0c:89:11:3f:fb:d8:c5:
4c:70:a4:4e:1c:61:a7:85:5a:c5:64:cb:8f:28:a3:
80:76:25:15:b4:ad:45:89:ac:6e:04:95:79:37:e2:
29:aa:c3:ec:8f:67:4a:d5:91:ad:57:11:73:88:46:
fd:86:8e:79:c8:44:88:b1:46:ad:05:9d:c1:15:ea:
f5:da:1d:a7:8c:1c:c6:b1:f5:32:6c:f2:97:ef:4b:
cf:22:fa:58:72:f2:25:6d:5d:ea:b6:93:9a:34:cc:
45:91:44:0d:1a:eb:b6:f5:7d:ed:03:15:2c:d9:91:
1d:c7:82:09:b4:e9:79:c1:d0:1d:8f:48:70:b4:29:
59:fc:a4:6d:c6:9f:7f:66:1f:97:34:e5:a6:cd:05:
ff:e1:ff:cf:15:96:2f:88:2d:7e:17:83:c9:2c:aa:
c8:4f:ff:cd:4b:0e:35:91:e6:65:3e:90:2b:5b:76:
df:d6:0f:bd:10:a5:60:6e:a8:74:85:3d:e1:2a:6b:
dc:ad:2c:e8:8b:e4:1a:3e:67:73:94:19:d0:0b:10:
94:99:18:ec:d3:85:c0:fc:4b:e6:ed:eb:f0:6a:fa:
23:f6:f6:11:1b:4b:6e:06:78:83:5f:4f:77:46:60:
af:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:69:CA:9E:8D:1C:15:95:FC:EA:8E:6E:2B:6E:27:AD:21:E1:0C:A1
X509v3 Authority Key Identifier:
keyid:56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:46:73:90:9a:4e:d3:28:fb:10:e9:1b:9a:d9:c2:b6:cc:0c:
f8:3d:c8:91:0e:19:19:57:a2:64:85:bb:e5:a6:04:94:b5:05:
b2:87:30:18:08:a7:69:ea:61:f6:0f:0a:7f:30:a0:bc:f4:b7:
cf:59:23:80:06:f4:91:25:53:78:9d:c9:f9:f1:7b:d7:62:50:
c1:fa:5d:e4:aa:45:bb:8d:70:d5:9b:04:80:42:d9:3c:18:a7:
30:c3:ac:98:57:7f:14:60:f7:01:fb:3b:30:3a:d5:ff:73:59:
de:0e:13:88:5d:51:a9:46:7f:3d:9e:a5:ae:87:14:84:2f:26:
46:00:9a:26:9c:4b:7a:c0:aa:d2:d5:18:8c:09:b1:51:c8:d8:
07:9b:28:b2:2c:6b:ad:6b:10:cb:7f:aa:84:b5:18:8b:9b:76:
e3:0d:ee:30:63:c9:9a:d7:d0:70:d7:fb:ae:c9:7d:9c:80:2c:
d9:a4:43:ff:05:d3:83:1b:d5:7b:5e:59:a7:07:1c:fd:5b:47:
0c:4c:c2:6b:b5:55:3b:73:df:52:9a:32:97:8f:ae:0a:a8:e8:
cc:66:73:7b:a6:60:57:eb:6a:20:e0:9e:1e:d3:70:9b:66:74:
aa:25:6a:2c:0f:37:2f:41:2c:fb:3d:83:8a:f7:8e:e4:7c:7a:
a5:e8:33:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiB1RGYGd9QaLQ786+Nt2FxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NzE5MDg1NDc4NmExNmFmYTZiMGVjNzhkZmIwNjIwYWJh
YWNmZWYwHhcNMjUwODA3MDAwMTIxWhcNMjUwODA4MDAwMTIxWjAzMTEwLwYDVQQD
Eyg4YTY5Y2E5ZThkMWMxNTk1ZmNlYThlNmUyYjZlMjdhZDIxZTEwY2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxluyG88+M08gWDtmD7E5QRjuXDpk
/AyJET/72MVMcKROHGGnhVrFZMuPKKOAdiUVtK1FiaxuBJV5N+IpqsPsj2dK1ZGt
VxFziEb9ho55yESIsUatBZ3BFer12h2njBzGsfUybPKX70vPIvpYcvIlbV3qtpOa
NMxFkUQNGuu29X3tAxUs2ZEdx4IJtOl5wdAdj0hwtClZ/KRtxp9/Zh+XNOWmzQX/
4f/PFZYviC1+F4PJLKrIT//NSw41keZlPpArW3bf1g+9EKVgbqh0hT3hKmvcrSzo
i+QaPmdzlBnQCxCUmRjs04XA/Evm7evwavoj9vYRG0tuBniDX093RmCv8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIppyp6NHBWV/OqObituJ60h4QyhMB8GA1UdIwQY
MBaAFFZxkIVHhqFq+msOx437BiCrqs/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm5HUWhVZUdvV3I2YXc3SGpmc0dJS3Vxei04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yNGMzMjQtYTE1ZS00Y2QwLTk0YzEt
NzNmZjQwOTU5MzQ4LzEvVm5HUWhVZUdvV3I2YXc3SGpmc0dJS3Vxei04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yNGMzMjQtYTE1ZS00Y2QwLTk0YzEtNzNmZjQwOTU5MzQ4
LzEvVm5HUWhVZUdvV3I2YXc3SGpmc0dJS3Vxei04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0ZzkJpO
0yj7EOkbmtnCtswM+D3IkQ4ZGVeiZIW75aYElLUFsocwGAinaeph9g8KfzCgvPS3
z1kjgAb0kSVTeJ3J+fF712JQwfpd5KpFu41w1ZsEgELZPBinMMOsmFd/FGD3Afs7
MDrV/3NZ3g4TiF1RqUZ/PZ6lrocUhC8mRgCaJpxLesCq0tUYjAmxUcjYB5sosixr
rWsQy3+qhLUYi5t24w3uMGPJmtfQcNf7rsl9nIAs2aRD/wXTgxvVe15Zpwcc/VtH
DEzCa7VVO3PfUpoyl4+uCqjozGZze6ZgV+tqIOCeHtNwm2Z0qiVqLA83L0Es+z2D
iveO5Hx6pegzOg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:33:28 2025 by rpki-client