Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft
File: VmRpui7FavQFn4UHViCEec4VW3o.mft (raw, json)
Hash identifier: UhNAqrdZdLiOLgFZwjihdkXO8Benf6WRTG+H3HhwfVM=
Subject key identifier: 86:5D:54:83:0A:72:B0:F1:1D:9B:9B:14:9F:1A:F1:B5:08:CF:02:35
Authority key identifier: 56:64:69:BA:2E:C5:6A:F4:05:9F:85:07:56:20:84:79:CE:15:5B:7A
Certificate issuer: /CN=566469ba2ec56af4059f850756208479ce155b7a
Certificate serial: 01987306626A668672C29DA52944047E2E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmRpui7FavQFn4UHViCEec4VW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft
Manifest number: 054F
Signing time: Mon 04 Aug 2025 03:00:54 +0000
Manifest this update: Mon 04 Aug 2025 03:00:54 +0000
Manifest next update: Tue 05 Aug 2025 03:00:54 +0000
Files and hashes: 1: VmRpui7FavQFn4UHViCEec4VW3o.crl (hash: 4tDhK32ATkmUIU6+GB1wg7dLjSM0rdzPig1+ftS1bUQ=)
2: kniutbSU_-qRAK95UI_8HV0omH8.roa (hash: O5mP5p6KZHlt5DYxryJnWdH3oyg1kqV5mUt5tDGEri0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/VmRpui7FavQFn4UHViCEec4VW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:62:6a:66:86:72:c2:9d:a5:29:44:04:7e:2e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=566469ba2ec56af4059f850756208479ce155b7a
Validity
Not Before: Aug 4 03:00:54 2025 GMT
Not After : Aug 5 03:00:54 2025 GMT
Subject: CN=865d54830a72b0f11d9b9b149f1af1b508cf0235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a8:73:de:8f:4e:e8:c0:92:bd:05:f5:1b:36:
53:7a:c8:6c:3c:2d:62:ad:74:0f:cb:35:16:a8:3a:
ac:f3:cc:01:be:bb:1d:fe:f5:97:21:35:c8:94:85:
8c:15:53:19:ba:31:e4:90:cb:b7:47:67:64:76:d8:
66:10:a2:cf:03:3c:38:4e:2a:cd:5f:7e:fa:30:d8:
63:e3:87:53:7d:19:5b:a4:77:53:5f:d0:73:b6:fd:
8f:05:ca:e6:57:5c:34:21:29:c8:92:5e:f8:6c:e8:
97:32:2b:80:00:c1:6a:e3:58:18:95:47:8e:c8:a1:
44:49:40:83:dd:8e:83:46:96:e1:14:04:38:45:40:
dc:67:dc:dc:f5:59:ee:55:ee:5a:58:da:69:eb:a3:
d5:1b:4f:03:3b:07:bd:ad:e4:54:ca:e2:b6:f4:3c:
4f:a8:68:41:4a:77:fe:c9:7a:9e:d8:1b:35:bc:d3:
35:08:6f:35:63:9a:ec:ac:c4:28:36:62:d7:54:e3:
77:78:7a:22:94:2a:23:13:38:2e:ea:ea:a7:12:45:
be:6d:38:77:0b:69:a5:4c:eb:69:67:37:57:05:01:
1e:7f:23:cc:90:a9:3d:42:64:cf:32:1d:88:bf:c1:
4a:ad:4b:69:41:99:db:90:2a:72:86:d2:71:0f:69:
e4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5D:54:83:0A:72:B0:F1:1D:9B:9B:14:9F:1A:F1:B5:08:CF:02:35
X509v3 Authority Key Identifier:
keyid:56:64:69:BA:2E:C5:6A:F4:05:9F:85:07:56:20:84:79:CE:15:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmRpui7FavQFn4UHViCEec4VW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8f:0e:8b:b9:72:54:88:f5:00:d8:2b:85:17:52:b2:a2:c3:
58:61:61:55:67:35:e5:f7:2c:6d:45:c5:b9:87:9e:61:05:e2:
3e:4a:0b:d9:db:10:3e:86:d3:b8:b6:47:b5:ca:94:89:40:b5:
9e:4e:35:78:80:d5:3d:b0:fe:4d:c7:10:11:55:79:c8:e9:8e:
6d:82:e9:65:a6:21:0f:22:90:d2:06:b4:03:1b:f5:87:60:43:
17:b6:9a:d4:3a:f0:87:b2:31:86:3d:cf:ac:ff:25:17:7c:d4:
00:3a:07:e1:5b:ae:78:b8:cb:85:94:84:70:5a:a0:91:83:cd:
fe:c9:3c:d9:21:d9:09:25:05:ed:03:af:47:21:35:54:41:e9:
27:53:65:96:78:d6:aa:68:36:a4:39:25:5f:59:e5:8f:70:c2:
a5:20:02:ec:1c:c0:38:65:6c:33:75:c1:62:94:54:b5:59:bc:
f0:69:f3:c4:e7:8b:bd:4e:ae:a2:70:61:2c:3d:c7:4e:74:10:
4c:78:d8:0f:d8:bb:71:06:92:c2:de:78:66:4d:fe:f4:a0:9c:
40:0a:b3:e4:08:95:09:98:23:bb:1f:41:fc:61:25:be:ee:a2:
95:68:d9:40:d3:f8:7d:16:14:08:b7:e2:cb:58:f1:73:0b:e3:
5f:f5:3b:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBmJqZoZywp2lKUQEfi6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NjQ2OWJhMmVjNTZhZjQwNTlmODUwNzU2MjA4NDc5Y2Ux
NTViN2EwHhcNMjUwODA0MDMwMDU0WhcNMjUwODA1MDMwMDU0WjAzMTEwLwYDVQQD
Eyg4NjVkNTQ4MzBhNzJiMGYxMWQ5YjliMTQ5ZjFhZjFiNTA4Y2YwMjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvahz3o9O6MCSvQX1GzZTeshsPC1i
rXQPyzUWqDqs88wBvrsd/vWXITXIlIWMFVMZujHkkMu3R2dkdthmEKLPAzw4TirN
X376MNhj44dTfRlbpHdTX9Bztv2PBcrmV1w0ISnIkl74bOiXMiuAAMFq41gYlUeO
yKFESUCD3Y6DRpbhFAQ4RUDcZ9zc9VnuVe5aWNpp66PVG08DOwe9reRUyuK29DxP
qGhBSnf+yXqe2Bs1vNM1CG81Y5rsrMQoNmLXVON3eHoilCojEzgu6uqnEkW+bTh3
C2mlTOtpZzdXBQEefyPMkKk9QmTPMh2Iv8FKrUtpQZnbkCpyhtJxD2nkuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZdVIMKcrDxHZubFJ8a8bUIzwI1MB8GA1UdIwQY
MBaAFFZkabouxWr0BZ+FB1YghHnOFVt6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm1ScHVpN0ZhdlFGbjRVSFZpQ0VlYzRWVzNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9iZTFjOTctNDE4Zi00ZTQ2LWJjMWMt
ZWUwM2YzZGU0NGFhLzEvVm1ScHVpN0ZhdlFGbjRVSFZpQ0VlYzRWVzNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9iZTFjOTctNDE4Zi00ZTQ2LWJjMWMtZWUwM2YzZGU0NGFh
LzEvVm1ScHVpN0ZhdlFGbjRVSFZpQ0VlYzRWVzNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASI8Oi7ly
VIj1ANgrhRdSsqLDWGFhVWc15fcsbUXFuYeeYQXiPkoL2dsQPobTuLZHtcqUiUC1
nk41eIDVPbD+TccQEVV5yOmObYLpZaYhDyKQ0ga0Axv1h2BDF7aa1Drwh7Ixhj3P
rP8lF3zUADoH4VuueLjLhZSEcFqgkYPN/sk82SHZCSUF7QOvRyE1VEHpJ1NllnjW
qmg2pDklX1nlj3DCpSAC7BzAOGVsM3XBYpRUtVm88GnzxOeLvU6uonBhLD3HTnQQ
THjYD9i7cQaSwt54Zk3+9KCcQAqz5AiVCZgjux9B/GElvu6ilWjZQNP4fRYUCLfi
y1jxcwvjX/U7bQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:13 2025 by rpki-client