Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
File: vmBP81opyRFWvkvSKbO693yDl70.mft (raw, json)
Hash identifier: VZweugOVUU1g1Bd8DwEY6DbW4ziBQlyOtTdgM4ts4Mo=
Subject key identifier: C5:58:87:B1:41:31:DD:B9:2E:9C:49:14:6E:06:D0:5E:9E:EF:D9:72
Authority key identifier: BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
Certificate issuer: /CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Certificate serial: 01988CFEE1E9083746BDC9CB38E09A99AB1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
Manifest number: 084D
Signing time: Sat 09 Aug 2025 04:02:50 +0000
Manifest this update: Sat 09 Aug 2025 04:02:50 +0000
Manifest next update: Sun 10 Aug 2025 04:02:50 +0000
Files and hashes: 1: 8TP605-bnnRU4oKxlSCpw5mXUvE.roa (hash: mDnmEgfw91sdWLEWlPQZ2jWiCvBV4IYovQSRnJwJt28=)
2: vmBP81opyRFWvkvSKbO693yDl70.crl (hash: NCvqZBe9twVannwn9yP9CKGBpgKmFv7EPR162Uqy5ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fe:e1:e9:08:37:46:bd:c9:cb:38:e0:9a:99:ab:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Validity
Not Before: Aug 9 04:02:50 2025 GMT
Not After : Aug 10 04:02:50 2025 GMT
Subject: CN=c55887b14131ddb92e9c49146e06d05e9eefd972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:11:16:f4:db:8e:c9:6a:e4:99:4e:6e:f9:01:
05:cb:84:43:65:33:96:e7:a3:eb:ef:9e:e1:04:f9:
9e:fd:e3:31:62:62:1d:28:ba:f1:53:aa:a5:a6:08:
08:3a:c7:15:67:be:10:1d:10:93:d0:cd:44:df:54:
cd:98:1c:64:9c:10:e7:3a:11:09:18:a0:81:bb:6f:
95:7b:d9:3c:ef:85:92:46:eb:ce:63:1d:cf:c2:d1:
fb:8b:df:91:a5:34:4e:70:44:30:b2:80:24:41:04:
ba:c5:8c:c8:de:2b:83:a1:31:bc:b7:32:20:ed:23:
47:91:66:d1:c9:d1:e4:56:48:dc:9e:05:b8:64:13:
71:24:7f:9d:e7:ae:68:2c:fd:16:87:6e:55:77:b0:
f6:d3:d5:9d:a2:7f:05:70:6f:47:90:1f:72:1d:44:
95:0d:42:69:2e:5c:11:15:84:38:7e:66:33:50:f6:
66:4b:fc:41:cd:13:4c:76:31:40:b1:32:21:f9:a8:
93:79:9b:c4:fa:d9:9a:28:8f:c2:bc:df:7f:ca:e9:
8e:36:66:7b:e7:d1:56:94:75:a4:13:a7:df:d9:67:
e7:c1:6a:79:85:a9:74:d4:85:1a:21:67:0a:38:5f:
70:c7:1a:22:a8:92:6d:e2:5c:ab:5d:ff:c1:35:fe:
6b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:58:87:B1:41:31:DD:B9:2E:9C:49:14:6E:06:D0:5E:9E:EF:D9:72
X509v3 Authority Key Identifier:
keyid:BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a1:95:1e:8f:3a:98:55:4e:3d:2c:c9:a2:1d:a8:88:e1:99:
7f:4e:01:33:34:fe:50:e7:7d:a7:f7:2f:bf:7e:f4:63:83:6c:
12:da:87:06:b9:c6:40:d9:cd:45:3b:c6:a4:14:81:c2:4d:c5:
32:8b:49:54:3f:68:46:0b:27:1b:74:7c:0d:28:d6:99:b2:b5:
cb:29:df:78:10:6a:8e:97:77:d7:39:ce:31:b0:cd:e1:23:3b:
8f:7d:b1:4c:20:a1:87:ec:65:9f:e6:ee:74:fb:04:eb:9c:8a:
8f:34:3c:69:d5:bb:7e:33:0f:2f:b1:a1:1e:3a:51:7e:c6:a1:
6c:0f:bb:11:ad:79:e5:7e:d3:f4:01:11:f2:41:63:1e:09:2f:
ca:3d:85:7b:30:bc:f8:48:15:d9:79:61:aa:8c:91:37:df:2d:
0b:97:b7:9c:4a:7e:59:3c:56:d4:e4:71:e9:e9:75:6f:07:3e:
83:93:d8:dd:3a:be:ce:20:3b:1b:47:49:05:00:f3:c9:6c:0b:
e1:e3:7a:e9:02:49:f8:e2:bc:65:a1:6a:70:68:0d:8e:46:43:
4d:d8:d6:5d:60:65:75:f9:04:e8:ac:e9:0c:1b:30:fb:12:fa:
7d:5a:2e:77:3a:90:21:a8:ff:a4:c7:00:cd:b3:bb:b1:f6:75:
ee:91:bd:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiM/uHpCDdGvcnLOOCamasdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNjA0ZmYzNWEyOWM5MTE1NmJlNGJkMjI5YjNiYWY3N2M4
Mzk3YmQwHhcNMjUwODA5MDQwMjUwWhcNMjUwODEwMDQwMjUwWjAzMTEwLwYDVQQD
EyhjNTU4ODdiMTQxMzFkZGI5MmU5YzQ5MTQ2ZTA2ZDA1ZTllZWZkOTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxEW9NuOyWrkmU5u+QEFy4RDZTOW
56Pr757hBPme/eMxYmIdKLrxU6qlpggIOscVZ74QHRCT0M1E31TNmBxknBDnOhEJ
GKCBu2+Ve9k874WSRuvOYx3PwtH7i9+RpTROcEQwsoAkQQS6xYzI3iuDoTG8tzIg
7SNHkWbRydHkVkjcngW4ZBNxJH+d565oLP0Wh25Vd7D209Wdon8FcG9HkB9yHUSV
DUJpLlwRFYQ4fmYzUPZmS/xBzRNMdjFAsTIh+aiTeZvE+tmaKI/CvN9/yumONmZ7
59FWlHWkE6ff2WfnwWp5hal01IUaIWcKOF9wxxoiqJJt4lyrXf/BNf5rywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVYh7FBMd25LpxJFG4G0F6e79lyMB8GA1UdIwQY
MBaAFL5gT/NaKckRVr5L0imzuvd8g5e9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm1CUDgxb3B5UkZXdmt2U0tiTzY5M3lEbDcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lODQ5YmItMTMwNC00NGVhLTgzOGYt
MWEzOWMzZDM0ZjA4LzEvdm1CUDgxb3B5UkZXdmt2U0tiTzY5M3lEbDcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lODQ5YmItMTMwNC00NGVhLTgzOGYtMWEzOWMzZDM0ZjA4
LzEvdm1CUDgxb3B5UkZXdmt2U0tiTzY5M3lEbDcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWaGVHo86
mFVOPSzJoh2oiOGZf04BMzT+UOd9p/cvv370Y4NsEtqHBrnGQNnNRTvGpBSBwk3F
MotJVD9oRgsnG3R8DSjWmbK1yynfeBBqjpd31znOMbDN4SM7j32xTCChh+xln+bu
dPsE65yKjzQ8adW7fjMPL7GhHjpRfsahbA+7Ea155X7T9AER8kFjHgkvyj2FezC8
+EgV2XlhqoyRN98tC5e3nEp+WTxW1ORx6el1bwc+g5PY3Tq+ziA7G0dJBQDzyWwL
4eN66QJJ+OK8ZaFqcGgNjkZDTdjWXWBldfkE6KzpDBsw+xL6fVoudzqQIaj/pMcA
zbO7sfZ17pG9SQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:51 2025 by rpki-client