
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
File: Vi6OBQ04RQLreX9elEkxpm_dVVo.mft (raw, json)
Hash identifier: 6IpjYOkJz0yQ0Ah3cF3m/FxpDZC+dQB2Ka4SHmFT/Uc=
Subject key identifier: 73:11:41:06:24:CD:68:97:42:3D:DE:39:CE:AF:B3:19:58:CD:E9:11
Authority key identifier: 56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
Certificate issuer: /CN=562e8e050d384502eb797f5e944931a66fdd555a
Certificate serial: 01987F0A2B4B7D5EFF1887690CD70DBBE5B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
Manifest number: 036E
Signing time: Wed 06 Aug 2025 11:00:29 +0000
Manifest this update: Wed 06 Aug 2025 11:00:29 +0000
Manifest next update: Thu 07 Aug 2025 11:00:29 +0000
Files and hashes: 1: FZWMDDQMo_y8JJ57vskoxtwrzBc.roa (hash: htvNKiRY5N1vCsM0n5CFd0XNCYmHCVpMo5jU+IUCul4=)
2: GWxeu1y_CzxjapRD6Erht2PYQd8.roa (hash: YAm4XFVWKwDXQd0Bp/cmWH42UfuLzbVp2eD58NsLJok=)
3: Vi6OBQ04RQLreX9elEkxpm_dVVo.crl (hash: 4Lf7N+YsqEO3zgS4qi0K1kgn2UfBVpztWSDO2HywF5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:2b:4b:7d:5e:ff:18:87:69:0c:d7:0d:bb:e5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=562e8e050d384502eb797f5e944931a66fdd555a
Validity
Not Before: Aug 6 11:00:29 2025 GMT
Not After : Aug 7 11:00:29 2025 GMT
Subject: CN=7311410624cd6897423dde39ceafb31958cde911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:96:cd:e2:03:ee:34:f6:7a:e7:0a:09:83:64:
e3:da:a9:96:2e:8a:c8:eb:4d:c3:43:ae:d7:ae:19:
78:73:8d:87:41:77:55:b2:c6:b2:a9:c8:9a:a9:fc:
4b:2b:37:7b:36:a1:2d:73:74:fc:46:41:7e:14:22:
26:35:f2:e2:1d:44:05:fb:0f:24:a6:33:0d:fe:e3:
b6:5d:9c:f3:b5:46:30:56:1b:ef:a4:36:80:bf:b4:
9c:27:b8:61:19:11:43:0c:6e:a1:30:76:56:16:68:
3e:31:ea:8b:a1:4c:a7:9a:c7:b1:53:f8:3c:f8:1b:
d8:5f:0c:61:5f:ba:30:bb:c2:10:96:25:c3:c6:aa:
45:fb:08:be:57:f4:d8:b2:65:c7:5d:75:b2:63:b1:
b2:05:2b:1f:c1:89:00:ee:ab:c3:7c:92:e1:8e:0f:
ce:d7:25:26:47:8e:51:bc:18:67:6c:e2:0f:37:70:
29:24:6e:46:b5:68:2c:97:9e:14:d2:ef:3b:67:ff:
48:6f:2f:a1:80:0b:5a:0c:99:66:c4:94:7a:0d:72:
12:cc:6a:59:d9:26:a1:74:6c:8b:20:f9:1a:8b:de:
7d:2e:2a:7c:c8:35:bd:12:03:29:d7:41:ea:73:90:
02:81:96:97:af:4f:82:bc:58:12:95:12:1d:cc:64:
7a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:11:41:06:24:CD:68:97:42:3D:DE:39:CE:AF:B3:19:58:CD:E9:11
X509v3 Authority Key Identifier:
keyid:56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:97:a2:9d:13:d4:07:4b:fa:72:c0:18:3c:4a:9f:16:d0:9f:
03:cf:4a:fd:a7:b6:b0:9a:07:67:f2:51:ec:db:c2:07:a9:8a:
41:2f:c5:6c:71:b8:60:66:34:15:2c:b8:f4:e7:00:23:50:21:
55:1d:e2:6b:8e:92:05:1d:7f:2c:c7:58:b5:fb:5e:d9:89:2d:
57:56:2a:39:db:33:5a:4a:75:a9:6d:63:04:88:9b:9b:d9:78:
0b:2a:2b:9a:6f:d9:da:a4:e3:e3:16:95:32:93:1e:81:18:17:
38:23:3f:ee:3f:fb:f7:a2:06:19:de:57:e5:5d:19:d0:41:b6:
bc:1b:50:58:df:bf:ea:d4:c5:6f:38:53:a5:17:c8:69:36:b1:
28:88:95:c6:6d:f0:05:ec:c5:9f:c0:d1:9e:59:6a:10:a4:0d:
ff:44:0b:ac:a9:e0:03:8b:0e:34:bf:13:40:4f:2c:e9:26:f5:
38:c7:42:b0:7f:2d:b0:bb:00:4a:ba:9e:fa:47:d9:9b:09:b6:
06:fa:54:07:5c:7a:bb:68:a8:9d:af:85:88:5e:64:a2:b5:93:
97:24:e0:f2:13:85:47:e6:b3:2b:6e:e5:d3:3d:e7:16:52:f4:
55:ba:62:aa:69:db:5c:c5:94:da:bb:14:bf:e4:e3:f9:3c:f3:
2a:ef:29:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/CitLfV7/GIdpDNcNu+WxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2MmU4ZTA1MGQzODQ1MDJlYjc5N2Y1ZTk0NDkzMWE2NmZk
ZDU1NWEwHhcNMjUwODA2MTEwMDI5WhcNMjUwODA3MTEwMDI5WjAzMTEwLwYDVQQD
Eyg3MzExNDEwNjI0Y2Q2ODk3NDIzZGRlMzljZWFmYjMxOTU4Y2RlOTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZbN4gPuNPZ65woJg2Tj2qmWLorI
603DQ67Xrhl4c42HQXdVssayqciaqfxLKzd7NqEtc3T8RkF+FCImNfLiHUQF+w8k
pjMN/uO2XZzztUYwVhvvpDaAv7ScJ7hhGRFDDG6hMHZWFmg+MeqLoUynmsexU/g8
+BvYXwxhX7owu8IQliXDxqpF+wi+V/TYsmXHXXWyY7GyBSsfwYkA7qvDfJLhjg/O
1yUmR45RvBhnbOIPN3ApJG5GtWgsl54U0u87Z/9Iby+hgAtaDJlmxJR6DXISzGpZ
2SahdGyLIPkai959Lip8yDW9EgMp10Hqc5ACgZaXr0+CvFgSlRIdzGR6CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMRQQYkzWiXQj3eOc6vsxlYzekRMB8GA1UdIwQY
MBaAFFYujgUNOEUC63l/XpRJMaZv3VVaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmk2T0JRMDRSUUxyZVg5ZWxFa3hwbV9kVlZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jMmYxODItYmI2Ny00M2Q4LThlYTUt
OTVjNTAwMWJmYzcwLzEvVmk2T0JRMDRSUUxyZVg5ZWxFa3hwbV9kVlZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9jMmYxODItYmI2Ny00M2Q4LThlYTUtOTVjNTAwMWJmYzcw
LzEvVmk2T0JRMDRSUUxyZVg5ZWxFa3hwbV9kVlZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5einRPU
B0v6csAYPEqfFtCfA89K/ae2sJoHZ/JR7NvCB6mKQS/FbHG4YGY0FSy49OcAI1Ah
VR3ia46SBR1/LMdYtfte2YktV1YqOdszWkp1qW1jBIibm9l4Cyormm/Z2qTj4xaV
MpMegRgXOCM/7j/796IGGd5X5V0Z0EG2vBtQWN+/6tTFbzhTpRfIaTaxKIiVxm3w
BezFn8DRnllqEKQN/0QLrKngA4sONL8TQE8s6Sb1OMdCsH8tsLsASrqe+kfZmwm2
BvpUB1x6u2iona+FiF5korWTlyTg8hOFR+azK27l0z3nFlL0VbpiqmnbXMWU2rsU
v+Tj+TzzKu8pvA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:23:30 2025 by rpki-client