Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft
File: VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft (raw, json)
Hash identifier: B2e2+1zJldI61R2Fvl8FKhbLQKVo3HN2pKunQ8xRVm4=
Subject key identifier: FE:4B:96:51:D0:45:9F:50:73:71:68:C9:17:27:75:E2:0F:F9:46:0E
Authority key identifier: 54:49:5A:2F:41:CD:10:5A:EF:06:F2:87:0A:76:33:98:01:ED:B9:0D
Certificate issuer: /CN=54495a2f41cd105aef06f2870a76339801edb90d
Certificate serial: 01989E95A796B2B1FA92DDAEFC073E75356A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft
Manifest number: 021C
Signing time: Tue 12 Aug 2025 14:01:04 +0000
Manifest this update: Tue 12 Aug 2025 14:01:04 +0000
Manifest next update: Wed 13 Aug 2025 14:01:04 +0000
Files and hashes: 1: VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl (hash: xIkMrBNeFdJQww5JI16Q97y0mesMPFIMPPf/BbS55FM=)
2: iWKzGh5m2_oz6qvqBjoyFnizgxw.roa (hash: YVbdlpkB57bicqIuUwT2dIakABg210l0QU3avOsuQbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:95:a7:96:b2:b1:fa:92:dd:ae:fc:07:3e:75:35:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54495a2f41cd105aef06f2870a76339801edb90d
Validity
Not Before: Aug 12 14:01:04 2025 GMT
Not After : Aug 13 14:01:04 2025 GMT
Subject: CN=fe4b9651d0459f50737168c9172775e20ff9460e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5f:9e:0f:ab:e5:d5:d3:e8:4b:60:d9:db:2c:
58:af:36:db:63:a2:1f:de:51:ed:02:8a:6e:2a:b9:
5c:93:ab:73:13:a4:32:c2:9f:df:b1:87:33:11:c1:
1b:5a:f9:7c:e9:21:03:5d:48:31:29:43:63:3b:4f:
ec:94:4b:e5:77:dc:df:d8:47:0c:19:4e:42:ec:94:
db:5a:bf:de:a0:80:40:bf:ce:ad:bc:c0:07:c4:3a:
c3:82:21:bc:a9:d3:da:9b:34:4b:9f:70:08:59:f5:
6c:19:0a:57:30:1e:8a:93:f2:67:3b:00:41:39:b2:
2d:f3:06:62:0c:e1:2b:16:ec:09:9a:db:b0:5f:a7:
25:8f:ce:a1:02:17:c3:6d:4d:b3:4d:e1:d6:52:f4:
c7:46:e7:78:54:5e:3e:c5:d0:15:de:0a:c4:1c:c2:
8e:48:ff:90:69:e3:74:8b:36:d7:e3:39:ce:0b:06:
51:87:b9:ee:3b:1a:c5:c8:91:eb:e1:29:bb:75:7d:
b3:2c:71:b9:0d:5a:54:07:f1:5e:13:07:ec:40:6b:
ab:42:c5:8c:11:87:45:cf:da:95:db:7d:59:29:ac:
5d:7f:8f:e7:52:1c:22:57:2a:32:b0:e9:f6:01:ee:
1f:ab:9c:d8:0c:32:aa:36:4b:5f:3c:b4:d5:c7:8a:
6a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4B:96:51:D0:45:9F:50:73:71:68:C9:17:27:75:E2:0F:F9:46:0E
X509v3 Authority Key Identifier:
keyid:54:49:5A:2F:41:CD:10:5A:EF:06:F2:87:0A:76:33:98:01:ED:B9:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:8c:44:84:3e:6b:4a:32:e0:6d:12:e6:a6:80:67:01:91:10:
bb:20:8c:e6:c3:71:b1:b7:70:cd:bd:f2:45:a7:8f:1b:67:b9:
e9:1a:0c:01:01:42:28:d4:27:3a:d8:b9:3a:c6:ae:03:77:1e:
31:15:e9:8c:62:63:91:1f:c5:2d:c6:dc:d1:21:ad:ea:5b:6d:
85:00:56:0d:01:d2:07:22:f8:20:3b:89:4a:d8:3b:c1:06:be:
af:4a:0d:cb:78:99:9f:de:9d:6e:c8:02:61:6c:aa:cc:a0:21:
69:3d:1c:5a:5f:ee:56:17:97:6a:73:72:f0:ca:04:00:42:f3:
aa:f3:81:1e:dd:ad:47:5c:be:57:21:43:56:6e:e4:4e:ae:0c:
da:a8:49:31:02:f2:9e:ad:e5:5b:31:00:09:24:86:48:14:a0:
09:a0:7a:1a:30:8d:71:13:fe:c6:92:55:a1:04:53:16:9f:c3:
cf:63:aa:7a:39:f4:62:0d:48:80:59:df:4e:e1:db:e9:d0:45:
e1:85:47:96:d5:4f:98:ea:ae:f8:45:bd:18:6f:c4:71:0c:f0:
e0:06:b7:fe:1c:f9:f2:c4:fa:73:db:b9:09:35:ec:7a:e6:0b:
5c:bf:a0:a2:6d:1a:4f:11:8a:2a:0d:b5:d6:83:5a:2c:74:37:
99:89:51:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZielaeWsrH6kt2u/Ac+dTVqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NDk1YTJmNDFjZDEwNWFlZjA2ZjI4NzBhNzYzMzk4MDFl
ZGI5MGQwHhcNMjUwODEyMTQwMTA0WhcNMjUwODEzMTQwMTA0WjAzMTEwLwYDVQQD
EyhmZTRiOTY1MWQwNDU5ZjUwNzM3MTY4YzkxNzI3NzVlMjBmZjk0NjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1+eD6vl1dPoS2DZ2yxYrzbbY6If
3lHtAopuKrlck6tzE6Qywp/fsYczEcEbWvl86SEDXUgxKUNjO0/slEvld9zf2EcM
GU5C7JTbWr/eoIBAv86tvMAHxDrDgiG8qdPamzRLn3AIWfVsGQpXMB6Kk/JnOwBB
ObIt8wZiDOErFuwJmtuwX6clj86hAhfDbU2zTeHWUvTHRud4VF4+xdAV3grEHMKO
SP+QaeN0izbX4znOCwZRh7nuOxrFyJHr4Sm7dX2zLHG5DVpUB/FeEwfsQGurQsWM
EYdFz9qV231ZKaxdf4/nUhwiVyoysOn2Ae4fq5zYDDKqNktfPLTVx4pqlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5LllHQRZ9Qc3FoyRcndeIP+UYOMB8GA1UdIwQY
MBaAFFRJWi9BzRBa7wbyhwp2M5gB7bkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkVsYUwwSE5FRnJ2QnZLSENuWXptQUh0dVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9kNjdhNTgtMzgwZi00MjdhLTg0OWEt
Zjk5NDBmYTFlMTA4LzEvVkVsYUwwSE5FRnJ2QnZLSENuWXptQUh0dVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9kNjdhNTgtMzgwZi00MjdhLTg0OWEtZjk5NDBmYTFlMTA4
LzEvVkVsYUwwSE5FRnJ2QnZLSENuWXptQUh0dVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcoxEhD5r
SjLgbRLmpoBnAZEQuyCM5sNxsbdwzb3yRaePG2e56RoMAQFCKNQnOti5OsauA3ce
MRXpjGJjkR/FLcbc0SGt6ltthQBWDQHSByL4IDuJStg7wQa+r0oNy3iZn96dbsgC
YWyqzKAhaT0cWl/uVheXanNy8MoEAELzqvOBHt2tR1y+VyFDVm7kTq4M2qhJMQLy
nq3lWzEACSSGSBSgCaB6GjCNcRP+xpJVoQRTFp/Dz2Oqejn0Yg1IgFnfTuHb6dBF
4YVHltVPmOqu+EW9GG/EcQzw4Aa3/hz58sT6c9u5CTXseuYLXL+gom0aTxGKKg21
1oNaLHQ3mYlRPQ==
-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:09 2025 by rpki-client