Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
File: VTq9CI9YVGJD8CJwIs20e80dfY4.mft (raw, json)
Hash identifier: n4dJ16Hlf6c+WPhKUCF96dKc09SHjRjbmKM4lV++THc=
Subject key identifier: 1B:05:E3:07:3F:91:67:43:0B:27:8D:02:2C:5D:24:52:13:59:AD:66
Authority key identifier: 55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
Certificate issuer: /CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Certificate serial: 019872982935146A74BCD613C677065E72C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
Manifest number: 140F
Signing time: Mon 04 Aug 2025 01:00:31 +0000
Manifest this update: Mon 04 Aug 2025 01:00:31 +0000
Manifest next update: Tue 05 Aug 2025 01:00:31 +0000
Files and hashes: 1: VTq9CI9YVGJD8CJwIs20e80dfY4.crl (hash: sF7qcfuPkItpp2B79RIv297pu+auCw6vbE+cGWqyq0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:29:35:14:6a:74:bc:d6:13:c6:77:06:5e:72:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Validity
Not Before: Aug 4 01:00:31 2025 GMT
Not After : Aug 5 01:00:31 2025 GMT
Subject: CN=1b05e3073f9167430b278d022c5d24521359ad66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a4:51:20:15:36:ed:05:f1:2a:ed:59:40:87:
4e:52:5c:a0:96:68:cb:a6:1e:d4:07:f4:e0:e2:c5:
b7:a4:44:11:2f:ae:36:27:17:26:70:71:c3:7c:b5:
0f:ca:c6:75:77:c4:96:e0:34:b8:5a:de:65:01:f6:
16:8e:35:ed:89:2b:f4:4f:9e:d8:86:09:c8:f5:86:
46:ab:d0:cd:f6:c4:c0:09:f1:1f:96:ed:c1:e7:ca:
86:63:69:f4:e9:d4:4e:91:fe:b8:6e:70:23:e7:2e:
18:69:63:38:e5:3b:7a:10:c0:2a:60:fa:ba:f1:1a:
6c:fa:a4:76:29:ad:9e:8b:49:33:12:e4:0b:3a:af:
7d:82:5c:8c:40:cc:7e:cd:b5:da:22:94:49:eb:ff:
26:d3:d3:de:b8:7f:d3:e0:a3:fd:56:99:a2:b9:47:
18:4c:b5:06:08:1e:07:b3:90:18:95:b6:32:48:bd:
91:df:3a:c3:27:57:7a:24:88:d9:5a:a6:65:ba:06:
4a:c0:9e:77:eb:d4:c9:e6:62:60:fc:01:70:1f:05:
65:e7:a8:cf:2d:81:ae:74:49:10:57:0f:bc:66:c7:
32:f7:92:20:de:45:57:c0:b9:7b:b4:b4:66:e7:1c:
a2:55:99:f0:8a:26:f1:8e:47:b6:c0:f1:ff:0d:a7:
e5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:05:E3:07:3F:91:67:43:0B:27:8D:02:2C:5D:24:52:13:59:AD:66
X509v3 Authority Key Identifier:
keyid:55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:21:d5:d7:0d:05:23:db:cc:a7:99:c7:27:8d:3d:b7:25:bc:
36:8d:5b:2c:4a:4c:56:dc:aa:23:0d:5c:12:a2:44:aa:5e:43:
04:0b:ce:07:53:37:17:38:06:fc:6b:10:94:db:c2:fd:63:1f:
6f:f9:df:77:32:f8:39:0e:24:4e:66:ce:ee:77:0f:4c:cf:b9:
ca:89:81:96:16:1d:75:36:34:06:4b:6c:a2:21:a0:4a:40:75:
b3:76:61:8e:1e:af:ed:40:e0:b0:9f:c5:6f:af:88:56:b7:e4:
64:a2:ef:e9:39:7c:05:cd:cd:13:a1:ae:00:5d:1e:61:78:7b:
72:71:04:7f:b5:86:85:f1:36:d3:ed:d3:8e:fb:16:5e:c5:63:
12:70:d3:e5:51:db:29:82:44:6e:c1:a4:59:65:44:66:a0:b4:
90:15:9b:16:de:18:98:01:79:6d:5f:40:30:84:d2:74:98:14:
4d:9b:58:e6:db:b7:65:29:b3:b1:b9:43:98:f9:ad:1e:2a:c6:
f2:dc:08:79:4a:df:7d:42:3f:3e:e8:ca:48:77:59:ea:e5:70:
d8:b7:51:40:3b:c9:46:96:40:96:4b:a0:7d:71:f6:67:9b:46:
c7:3d:31:90:4c:18:95:2c:44:85:84:a1:08:e5:e3:82:37:8a:
20:e4:8f:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymCk1FGp0vNYTxncGXnLJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1M2FiZDA4OGY1ODU0NjI0M2YwMjI3MDIyY2RiNDdiY2Qx
ZDdkOGUwHhcNMjUwODA0MDEwMDMxWhcNMjUwODA1MDEwMDMxWjAzMTEwLwYDVQQD
EygxYjA1ZTMwNzNmOTE2NzQzMGIyNzhkMDIyYzVkMjQ1MjEzNTlhZDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qRRIBU27QXxKu1ZQIdOUlyglmjL
ph7UB/Tg4sW3pEQRL642JxcmcHHDfLUPysZ1d8SW4DS4Wt5lAfYWjjXtiSv0T57Y
hgnI9YZGq9DN9sTACfEflu3B58qGY2n06dROkf64bnAj5y4YaWM45Tt6EMAqYPq6
8Rps+qR2Ka2ei0kzEuQLOq99glyMQMx+zbXaIpRJ6/8m09PeuH/T4KP9VpmiuUcY
TLUGCB4Hs5AYlbYySL2R3zrDJ1d6JIjZWqZlugZKwJ5369TJ5mJg/AFwHwVl56jP
LYGudEkQVw+8Zscy95Ig3kVXwLl7tLRm5xyiVZnwiibxjke2wPH/DaflEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsF4wc/kWdDCyeNAixdJFITWa1mMB8GA1UdIwQY
MBaAFFU6vQiPWFRiQ/AicCLNtHvNHX2OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jMmRhZWMtODc0ZS00ZDIyLTk2NzQt
ZDU2NmY3M2QzZmIwLzEvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9jMmRhZWMtODc0ZS00ZDIyLTk2NzQtZDU2NmY3M2QzZmIw
LzEvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSHV1w0F
I9vMp5nHJ409tyW8No1bLEpMVtyqIw1cEqJEql5DBAvOB1M3FzgG/GsQlNvC/WMf
b/nfdzL4OQ4kTmbO7ncPTM+5yomBlhYddTY0BktsoiGgSkB1s3Zhjh6v7UDgsJ/F
b6+IVrfkZKLv6Tl8Bc3NE6GuAF0eYXh7cnEEf7WGhfE20+3TjvsWXsVjEnDT5VHb
KYJEbsGkWWVEZqC0kBWbFt4YmAF5bV9AMITSdJgUTZtY5tu3ZSmzsblDmPmtHirG
8twIeUrffUI/PujKSHdZ6uVw2LdRQDvJRpZAlkugfXH2Z5tGxz0xkEwYlSxEhYSh
COXjgjeKIOSP7g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:48 2025 by rpki-client