Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
File: vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json)
Hash identifier: ZihNCd0X6TmZYZzv4YGL466WNqbOTO0qLDWLQtar3jY=
Subject key identifier: 37:30:3E:CA:DF:07:F2:D6:67:18:2A:31:BE:43:74:28:73:FF:88:2A
Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
Certificate issuer: /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Certificate serial: 01989411E826042B80CAED1335CB41D65F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
Manifest number: 0BFA
Signing time: Sun 10 Aug 2025 13:00:58 +0000
Manifest this update: Sun 10 Aug 2025 13:00:58 +0000
Manifest next update: Mon 11 Aug 2025 13:00:58 +0000
Files and hashes: 1: hKsPJ4MnZD2pYCjFxua95M8Pd_I.roa (hash: doF91Tq6urawTtlcrWXugjS7shhgWKPbbEAfjccw0S8=)
2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: iDYwEHiASZY+GcD9A6o2pUusRr7Sjk8HjM9yq+KhO94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:11:e8:26:04:2b:80:ca:ed:13:35:cb:41:d6:5f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Validity
Not Before: Aug 10 13:00:58 2025 GMT
Not After : Aug 11 13:00:58 2025 GMT
Subject: CN=37303ecadf07f2d667182a31be43742873ff882a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:3a:8b:fe:e8:e9:89:91:81:70:38:4a:7d:
fd:2b:30:85:87:d3:ad:eb:42:40:1c:87:d2:7c:fc:
ab:9f:9b:3a:b0:48:93:94:f7:13:1a:9c:32:87:27:
c6:0a:03:b8:db:f0:97:7b:7c:cd:91:cd:57:e7:54:
60:b1:f7:cd:bd:eb:54:1a:83:8f:e8:bc:bb:cb:bc:
73:e5:90:8c:47:fe:33:ed:46:92:5a:b6:24:86:66:
72:ed:79:a5:0f:70:8f:e0:61:28:0a:5f:9c:55:01:
3d:4c:de:c9:8f:b6:78:7c:5d:c8:f1:26:83:fb:38:
3e:80:3c:2f:5a:40:31:9c:d6:31:f3:b7:13:a4:bb:
fa:5a:f7:22:bb:bd:89:69:63:df:e6:cb:0d:98:06:
7e:4a:54:3a:ad:9d:f0:14:54:d7:e8:11:6d:99:1a:
13:68:70:a6:92:61:23:fa:5a:43:30:1a:1f:6c:88:
61:42:38:94:35:bf:98:7c:b6:04:32:bf:5a:c1:02:
a6:db:d7:f6:09:99:71:50:43:49:e2:ac:35:4f:6d:
f4:d2:3f:3d:f5:db:7f:38:2b:ed:4f:33:08:a8:c8:
e1:0f:49:80:6c:aa:68:26:82:38:0a:fa:0d:a4:a2:
da:03:b2:be:77:60:8b:bf:47:38:17:04:ba:59:27:
54:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:30:3E:CA:DF:07:F2:D6:67:18:2A:31:BE:43:74:28:73:FF:88:2A
X509v3 Authority Key Identifier:
keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ee:42:76:51:20:5c:e8:ef:9d:6b:46:8e:dd:88:ca:25:c6:
12:87:fb:38:27:0a:19:4d:4f:79:e6:b5:d9:c7:b7:9f:59:33:
a5:19:f4:53:21:b4:10:10:8a:a8:95:40:52:f2:24:9b:cd:49:
6f:9f:a2:65:00:e3:03:4c:3c:40:ef:a4:5e:a7:3b:2f:87:fd:
9b:4f:91:e0:e7:b1:54:96:17:c3:b3:c7:83:eb:a1:1e:f7:6d:
af:e4:78:a3:cc:b5:0e:b8:e5:e5:da:a7:99:21:97:d6:4f:46:
18:1c:30:b3:18:55:22:94:f9:51:0d:9d:9c:72:78:44:c5:37:
85:11:c5:89:d0:d4:02:68:a1:5b:7e:c8:7c:b8:8c:b9:4f:17:
c5:46:6e:27:56:9c:ee:11:9d:88:0c:4c:23:f8:b2:e3:98:f7:
49:81:96:ae:2a:7c:cc:cb:f1:4a:1c:31:90:77:43:80:9c:08:
47:c7:40:1b:ea:64:48:90:1f:32:bd:0c:31:e5:23:4c:c6:8b:
09:60:ff:fb:12:51:7a:93:66:13:af:2c:e1:c3:60:42:fa:18:
be:d1:3c:36:e6:c9:7b:ac:25:38:35:17:6d:b1:f3:df:b5:33:
3a:fa:5e:4d:13:8a:28:d6:38:dd:1f:3f:25:b2:78:d2:60:02:
3b:49:9f:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUEegmBCuAyu0TNctB1l+DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlOGIxNWMyMzdmMzRjNWM1YzUzNDRiNDA3OWViYjNhNTg5
ZDAxNDgwHhcNMjUwODEwMTMwMDU4WhcNMjUwODExMTMwMDU4WjAzMTEwLwYDVQQD
EygzNzMwM2VjYWRmMDdmMmQ2NjcxODJhMzFiZTQzNzQyODczZmY4ODJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgQ6i/7o6YmRgXA4Sn39KzCFh9Ot
60JAHIfSfPyrn5s6sEiTlPcTGpwyhyfGCgO42/CXe3zNkc1X51RgsffNvetUGoOP
6Ly7y7xz5ZCMR/4z7UaSWrYkhmZy7XmlD3CP4GEoCl+cVQE9TN7Jj7Z4fF3I8SaD
+zg+gDwvWkAxnNYx87cTpLv6Wvciu72JaWPf5ssNmAZ+SlQ6rZ3wFFTX6BFtmRoT
aHCmkmEj+lpDMBofbIhhQjiUNb+YfLYEMr9awQKm29f2CZlxUENJ4qw1T2300j89
9dt/OCvtTzMIqMjhD0mAbKpoJoI4CvoNpKLaA7K+d2CLv0c4FwS6WSdUlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcwPsrfB/LWZxgqMb5DdChz/4gqMB8GA1UdIwQY
MBaAFL6LFcI380xcXFNEtAeeuzpYnQFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hYTU5NzItMzUzOC00MzYxLWExMzQt
MzFkZTE3NjlmZDhhLzEvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9hYTU5NzItMzUzOC00MzYxLWExMzQtMzFkZTE3NjlmZDhh
LzEvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr+5CdlEg
XOjvnWtGjt2IyiXGEof7OCcKGU1Peea12ce3n1kzpRn0UyG0EBCKqJVAUvIkm81J
b5+iZQDjA0w8QO+kXqc7L4f9m0+R4OexVJYXw7PHg+uhHvdtr+R4o8y1Drjl5dqn
mSGX1k9GGBwwsxhVIpT5UQ2dnHJ4RMU3hRHFidDUAmihW37IfLiMuU8XxUZuJ1ac
7hGdiAxMI/iy45j3SYGWrip8zMvxShwxkHdDgJwIR8dAG+pkSJAfMr0MMeUjTMaL
CWD/+xJRepNmE68s4cNgQvoYvtE8NubJe6wlODUXbbHz37UzOvpeTROKKNY43R8/
JbJ40mACO0mf1w==
-----END CERTIFICATE-----
Generated at Sun Aug 10 21:08:28 2025 by rpki-client