Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
File: VwhmHGruys2bcRdqct6WybRQlDk.mft (raw, json)
Hash identifier: SmeCS9GFmbJ8EeWOiX20FZi6lMvOgvMCX9j7faqR7AY=
Subject key identifier: 78:56:97:5A:1C:15:FB:D9:F9:52:17:92:E1:01:39:CE:54:C0:CE:BA
Authority key identifier: 57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
Certificate issuer: /CN=5708661c6aeecacd9b71176a72de96c9b4509439
Certificate serial: 01987C405BF52932A7903A5CC5A0674BE7DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
Manifest number: 0F46
Signing time: Tue 05 Aug 2025 22:00:49 +0000
Manifest this update: Tue 05 Aug 2025 22:00:49 +0000
Manifest next update: Wed 06 Aug 2025 22:00:49 +0000
Files and hashes: 1: 0DRAcYwVU1wTPmKPUVZE-cIvVWk.roa (hash: SCcdCtXYPz3bfVKFsB8kMQkE3rKjzNyXJ29sazaODiU=)
2: VwhmHGruys2bcRdqct6WybRQlDk.crl (hash: e3TuAsj8ySGz9XWFBIybvU5NHvzqQZ3NSJLnZ99k4HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:5b:f5:29:32:a7:90:3a:5c:c5:a0:67:4b:e7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5708661c6aeecacd9b71176a72de96c9b4509439
Validity
Not Before: Aug 5 22:00:49 2025 GMT
Not After : Aug 6 22:00:49 2025 GMT
Subject: CN=7856975a1c15fbd9f9521792e10139ce54c0ceba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ae:71:93:9b:4d:45:a2:1b:93:3f:38:66:d4:
22:9c:7f:ba:6d:2d:14:b8:6e:86:87:8f:c0:2c:f8:
c1:ca:1e:03:93:05:e9:5b:f9:58:f0:d7:3c:5a:6c:
ce:cc:64:f0:c5:4e:b6:86:55:52:f8:d4:a5:2c:3f:
1d:95:0a:bd:5f:20:e4:32:22:1b:a5:26:2f:ba:76:
04:ed:f8:e1:a4:dc:90:e3:60:6d:4d:b0:ce:cb:ce:
8b:c2:e9:e8:e8:26:4d:52:02:b8:a6:90:45:90:56:
fa:99:d2:03:20:86:39:50:16:e9:f3:bc:84:3b:19:
68:c2:96:2f:3b:9d:b0:7f:90:0f:24:ba:55:e7:90:
75:78:ea:8f:fd:57:97:74:7d:75:7a:27:4e:5e:9e:
7b:2a:f9:a9:4c:6f:1d:a6:fb:fe:e8:0b:70:45:29:
72:45:1b:ce:29:52:0b:d8:f5:7b:12:05:ca:6a:29:
21:2a:57:07:f4:a9:44:81:bd:92:91:a0:6b:d9:03:
7e:9e:5b:36:c4:00:fa:96:52:f0:ec:42:3f:9c:57:
4d:6f:8c:6e:58:35:a8:01:b1:c7:89:8c:1c:cb:41:
bb:35:eb:03:56:68:89:2f:c5:91:5e:b3:54:cf:85:
d8:fa:bf:cb:99:fa:79:8e:98:a1:1e:e3:86:41:8a:
cb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:56:97:5A:1C:15:FB:D9:F9:52:17:92:E1:01:39:CE:54:C0:CE:BA
X509v3 Authority Key Identifier:
keyid:57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:55:32:ff:5b:a4:c0:70:15:7e:bc:83:0a:91:f1:ef:39:90:
cd:2c:91:92:76:d6:85:4b:12:aa:3e:1e:ec:10:cc:48:6b:68:
57:f1:bd:fa:f3:51:91:c8:56:70:6d:39:1a:7d:3a:0e:c6:27:
ed:35:3e:4d:86:80:b4:1b:2c:d0:40:61:26:72:ab:94:d1:b0:
e9:1c:f8:e7:69:b6:60:34:cb:e5:55:1c:23:a2:e4:94:b7:c5:
96:32:1e:74:ba:f1:d0:40:ed:9c:3f:17:44:67:72:8b:14:c3:
eb:c7:e5:2c:0e:39:e1:6b:c9:52:93:0b:2f:02:cc:0b:80:32:
c9:a5:78:02:36:6c:e2:f6:e9:0f:b4:64:7a:05:1f:9d:8d:ac:
de:2d:0d:87:1c:9a:88:65:bb:f0:62:f8:de:d5:56:a7:02:f3:
49:ff:70:51:89:92:f3:4a:e9:a6:46:08:9f:42:94:56:11:65:
60:70:3b:0a:e8:08:0e:30:24:e4:a3:15:d3:6c:80:42:2f:a4:
b3:ee:b2:b4:f0:7e:92:70:19:79:b0:2e:d8:cb:96:f5:c3:5f:
03:b4:33:35:7b:ab:48:8d:8d:81:32:fd:44:8f:f8:96:64:df:
0d:aa:4d:47:e3:57:14:ee:93:30:8b:01:63:36:cb:c2:67:4f:
0c:64:1b:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8QFv1KTKnkDpcxaBnS+fdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MDg2NjFjNmFlZWNhY2Q5YjcxMTc2YTcyZGU5NmM5YjQ1
MDk0MzkwHhcNMjUwODA1MjIwMDQ5WhcNMjUwODA2MjIwMDQ5WjAzMTEwLwYDVQQD
Eyg3ODU2OTc1YTFjMTVmYmQ5Zjk1MjE3OTJlMTAxMzljZTU0YzBjZWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA365xk5tNRaIbkz84ZtQinH+6bS0U
uG6Gh4/ALPjByh4DkwXpW/lY8Nc8WmzOzGTwxU62hlVS+NSlLD8dlQq9XyDkMiIb
pSYvunYE7fjhpNyQ42BtTbDOy86Lwuno6CZNUgK4ppBFkFb6mdIDIIY5UBbp87yE
OxlowpYvO52wf5APJLpV55B1eOqP/VeXdH11eidOXp57KvmpTG8dpvv+6AtwRSly
RRvOKVIL2PV7EgXKaikhKlcH9KlEgb2SkaBr2QN+nls2xAD6llLw7EI/nFdNb4xu
WDWoAbHHiYwcy0G7NesDVmiJL8WRXrNUz4XY+r/Lmfp5jpihHuOGQYrLnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhWl1ocFfvZ+VIXkuEBOc5UwM66MB8GA1UdIwQY
MBaAFFcIZhxq7srNm3EXanLelsm0UJQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVndobUhHcnV5czJiY1JkcWN0Nld5YlJRbERrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS82NDdhNGEtZDJmZC00M2UwLThmM2It
NDQxMDgxNjJlNDkyLzEvVndobUhHcnV5czJiY1JkcWN0Nld5YlJRbERrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS82NDdhNGEtZDJmZC00M2UwLThmM2ItNDQxMDgxNjJlNDky
LzEvVndobUhHcnV5czJiY1JkcWN0Nld5YlJRbERrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlUy/1uk
wHAVfryDCpHx7zmQzSyRknbWhUsSqj4e7BDMSGtoV/G9+vNRkchWcG05Gn06DsYn
7TU+TYaAtBss0EBhJnKrlNGw6Rz452m2YDTL5VUcI6LklLfFljIedLrx0EDtnD8X
RGdyixTD68flLA454WvJUpMLLwLMC4AyyaV4AjZs4vbpD7RkegUfnY2s3i0Nhxya
iGW78GL43tVWpwLzSf9wUYmS80rppkYIn0KUVhFlYHA7CugIDjAk5KMV02yAQi+k
s+6ytPB+knAZebAu2MuW9cNfA7QzNXurSI2NgTL9RI/4lmTfDapNR+NXFO6TMIsB
YzbLwmdPDGQbPA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:41:08 2025 by rpki-client